CWE-693: Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
From the CWE List. © The MITRE Corporation.
Newest
- cisco firepower threat defense software, secure firewall management center, secure firewall threat defense +2 moreCisco Firepower Threat Defense Software File Policy Bypass Vulnerability5.8 Medium
- dell unity, emc unity operating environment, emc unityvsa operating environment +2 moreDell EMC Unity and UnityVSA versions prior to 5.0.0.0.5.116 contain a plain-text password storage...7.8 High
- analogic poste.ioThe Roundcube component of Analogic Poste.io 2.1.6 uses .htaccess to protect the logs/ folder,...4.3 Medium
- cure53 dompurifyDOMPurify before 3.4.12 Hook Bypass via CUSTOM_ELEMENT_HANDLING5.1 Medium
- cure53 dompurifyDOMPurify before 3.4.7 Hook Mutation Pollution via allowedTags5.3 Medium
- cure53 dompurifyDOMPurify before 3.4.9 Trusted Types Policy State Contamination5.1 Medium
- cure53 dompurifyDOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM6.1 Medium
- cure53 dompurifyDOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checks6.1 Medium
- nvidia vibrante linuxNVIDIA’s Vibrante Linux version 1.1, 2.0, and 2.2 contains a vulnerability in the user space driver in which protection mechanisms are insufficient, may lead to denial of service or information disclo…8.2 High
- gitea, jenkins project gitea plugin +1 moreImproper handling of untrusted branches in Gitea Jenkins Plugin7.5 High
- jenkins pipeline remote loader, jenkins project pipeline remote loader plugin +1 moreUnsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin9.9 Critical
- cisco firepower threat defense software, secure firewall management center +1 moreCisco Firepower Threat Defense Software SSL/TLS Policy Bypass Vulnerability5.8 Medium
- cisco firepower threat defense software, secure firewall management center +1 moreCisco Firepower Threat Defense Software Detection Engine Policy Bypass Vulnerability5.8 Medium
- mcafee endpoint security, mcafee, llc mcafee endpoint security (ens) +1 moreMcAfee Endpoint Security firewall not always acting on GTI lookup results7.5 High
- canonical selinuxSELinux initscript misuse of touch5.2 Medium
- capsule technologies smartlinx neuron 2, capsuletech smartlinx neuron 2 firmware +1 moreA restricted environment escape vulnerability exists in the “kiosk mode” function of Capsule...7.6 High
- palletsprojects jinja, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreJinja2 sandbox escape via string formatting8.6 High
- jenkins job dsl, jenkins project job dsl plugin, redhat openshift container platform +2 moreScript security sandbox bypass in Jenkins Job DSL Plugin9.9 Critical
- jenkins groovy, jenkins project groovy plugin +1 moreJenkins Groovy Plugin sandbox bypass vulnerability8.8 High
- jenkins email extension, jenkins project email extension plugin +1 moreScript security sandbox bypass in Jenkins Email Extension Plugin9.9 Critical
- jenkins matrix project, jenkins project matrix project plugin, redhat openshift container platform +2 moreScript security sandbox bypass in Matrix Project Plugin9.9 Critical
- jenkins project pipeline: groovy plugin, jenkins matrix project plugin, pipeline\ +1 more +3 moreSandbox bypass in Jenkins Pipeline: Groovy Plugin9.9 Critical
- jenkins script security plugin, script security, redhat openshift container platform +2 moreSandbox bypass in Script Security Plugin9.9 Critical
- jenkins script security, jenkins project script security plugin +1 moreSandbox Bypass in Script Security Plugin8.8 High
- check point software technologies ltd. winrarIn WinRAR versions prior to and including 5.61, there is path traversal vulnerability when...5.5 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software Packet Inspection and Enforcement Bypass Vulnerability8.6 High
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 moreProtection Mechanism Failure in Jenkins Script Security Plugin8.8 High
- siemens sinumerik 808d v4.7 firmware, sinumerik 808d v4.8 firmware, sinumerik 828d v4.7 firmware +3 more +5 moreA vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 ...7.8 High
- siemens sinumerik 808d v4.7 firmware, sinumerik 808d v4.8 firmware, sinumerik 828d v4.7 firmware +3 more +5 moreA vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 ...7.8 High
- cisco hyperflex hx-series, hyperflex hx data platform +1 moreCisco HyperFlex UI Clickjacking Vulnerability4.7 Medium
- foxit reader, foxitsoftware foxit reader, phantompdf +2 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxit reader, foxitsoftware foxit reader, phantompdf +2 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- cisco secure firewall management centerA vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an...5.8 Medium
- cisco secure firewall management centerA vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an...8.6 High
- ics-cert medtronic n'vision clinician programmer, ics cert medtronic n vision clinician programmer, medtronic 8840 n’vision clinician programmer +3 more +5 moreMedtronic N'Vision Clinician Programmer Protection Mechanism Failure6.3 Medium
- gigabyte gb-bsi7h-6500, gb-bxi7-5775, gb-bsi7h-6500 firmware +1 more +3 moreGIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protection9.8 Critical
- cisco secure firewall management centerA vulnerability in the VPN configuration management of Cisco FireSIGHT System Software could...5.8 Medium
- bmw head unit hu nbt firmwareThe Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series,...7.8 High
- bmw head unit hu nbt firmwareThe Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series,...7.8 High
- bmw telematics control unit firmwareThe Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW...9.8 Critical
- bmw head unit hu nbt firmwareThe Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series,...6.8 Medium
- bmw head unit hu nbt firmwareThe Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series,...5.3 Medium
- bmw head unit hu nbt firmwareThe Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series,...7.8 High
- bmw telematics control unit firmwareThe Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW...9.8 Critical
- cisco telepresence server, telepresence tx9000 firmware +1 moreA vulnerability in the web UI of Cisco TelePresence Server Software could allow an...6.1 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreA vulnerability in the detection engine of Cisco Firepower Threat Defense software could allow an...5.8 Medium
- cisco aironet access point software, aironet access points +1 moreA vulnerability in Central Web Authentication (CWA) with FlexConnect Access Points (APs) for...4.1 Medium
- cisco secure firewall threat defenseA vulnerability in the detection engine of Cisco Firepower System Software could allow an...5.3 Medium
- cisco secure firewall threat defenseA vulnerability in the detection engine of Cisco Firepower System Software could allow an...5.8 Medium
- cisco secure firewall threat defenseA vulnerability in the detection engine of Cisco Firepower System Software could allow an...5.8 Medium
- Show moreLoading…