CWE-693: Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
From the CWE List. © The MITRE Corporation.
Newest
- mozilla firefox, firefox esr, thunderbird +2 moreIf a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently...9.6 Critical
- oracle graalvm, debian linux, fedoraproject fedora +18 more +20 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...5.3 Medium
- juniper contrail service orchestrationContrail Service Orchestration: Tenants able to see other tenants policies via REST API interface7.7 High
- jenkins debian package builder, jenkins project debian package builder plugin +1 moreAgent-to-controller security bypass in Jenkins Debian Package Builder Plugin8.8 High
- dell networking os10Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled...4.9 Medium
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +58 more +60 moreA side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI...5.5 Medium
- jenkins squash tm publisher, jenkins project squash tm publisher (squash4jenkins) plugin +1 moreAgent-to-controller security bypass in Jenkins Squash TM Publisher (Squash4Jenkins) Plugin allows writing arbitrary files8.1 High
- jenkinsAgent-to-controller access control allowed writing to sensitive directory used by Jenkins Pipeline: Shared Groovy Libraries Plugin9.8 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 Critical
- solarwinds kiwi syslog serverClickjacking Vulnerability5.0 Medium
- oracle graalvm, debian linux, fedoraproject fedora +12 more +14 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks.5.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An IS-IS adjacency might be taken down if a bad hello PDU is received for an existing adjacency causing a DoS6.5 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software H.323 Application Level Gateway Bypass Vulnerability4.7 Medium
- eclipse ketiGroovy Sandbox escape in Eclipse Keti9.9 Critical
- jenkins azure ad, jenkins project azure ad plugin +1 moreJenkins Azure AD Plugin allows bypassing CSRF protection for any URL8.8 High
- jenkins saml, jenkins project saml plugin +1 moreJenkins SAML Plugin allows bypassing CSRF protection for any URL8.8 High
- lenovo bios, 730s-13iml firmware, ideacentre aio 5-24imb05 firmware +19 more +21 moreSome Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel...6.8 Medium
- xwiki, xwiki xwiki-platform +1 moreA user without PR can reset user authentication failures information2.0 Low
- cisco webex meetings server, webex meetings online +1 moreCisco Webex Meetings and Webex Meetings Server Multimedia Sharing Security Bypass Vulnerability5.0 Medium
- jenkins templating engine, jenkins project templating engine plugin +1 moreRemote code execution vulnerability in Jenkins Templating Engine Plugin8.8 High
- tp-link archer a7, archer a7 firmware +1 moreThis vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 prior...8.1 High
- snort, cisco firepower threat defense software, ios xe +14 more +16 moreMultiple Cisco Products Snort TCP Fast Open File Policy Bypass Vulnerability5.8 Medium
- snort, cisco firepower threat defense software, ios xe +2 more +4 moreMultiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability5.8 Medium
- siemens sicam a8000 cp-8000, sicam a8000 cp-8021, sicam a8000 cp-8022 +3 more +5 moreA vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V16), SICAM A8000 CP...7.3 High
- cisco firepower extensible operating system (fxos), firepower extensible operating system +1 moreCisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass Vulnerability6.7 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 1000/2100 Series Appliances Secure Boot Bypass Vulnerabilities6.7 Medium
- snort, cisco firepower threat defense software, secure firewall threat defense +2 moreMultiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass Vulnerability5.8 Medium
- electronContext isolation bypass in Electron5.6 Medium
- electronUnpreventable top-level navigation in Electron7.5 High
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerability in Jenkins Script Security Plugin9.9 Critical
- philips clinical collaboration platformPhilips Clinical Collaboration Platform Protection Mechanism Failure5.0 Medium
- mcafee endpoint security, bitdefender endpoint security for windows +1 moreProtection Mechanism Failure in ENS for Windows6.7 Medium
http-proxynpm,@rootio/http-proxyRoot +1 moreDenial of Service in http-proxy7.5 High- dell inspiron 7352 bios, cpg bios +1 moreDell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite...6.8 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software SSL/TLS URL Category Bypass Vulnerability5.8 Medium
- cisco firepower threat defense software, ios, secure firewall management center +1 more +3 moreMultiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability5.8 Medium
- mcafee endpoint security, mcafee llc endpoint security (ens), mcafee, llc mcafee endpoint security (ens) +2 moreMcAfee processes not protected6.8 Medium
- becton, dickinson and company (bd) pyxis anesthesia (pas) es system, pyxis medstation es system, bd pyxis anesthesia station es firmware +1 more +3 moreIn BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted...6.1 Medium
- tp-link archer a7, ac1750 firmware +1 moreThis vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7...8.1 High
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerability in Script Security Plugin8.8 High
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerability in Script Security Plugin8.8 High
- ge ultrasound products, invenia abus scan station firmware, logiq e10 firmware +14 more +16 moreA restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of...6.8 Medium
- siemens scalance s602, scalance s612, scalance s623 +13 more +15 moreA vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) ...5.4 Medium
- siemens sinamics perfect harmony gh180 firmware, siemens ag sinamics perfect harmony gh180 drives mlfb 6sr32..-.....-.... mlfb 6sr4...-.....-.... mlfb 6sr5...-.....-.... with option a30 (hmis 12 inches or larger), sinamics perfect harmony gh180 drives mlfb 6sr325.-.....-.... (high availability) +2 moreA vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-....6.8 Medium
- medtronic valleylab ft10 energy platform (vlft10gen), valleylab ls10 energy platform (vlls10gen—not available in the united states), valleylab ft10 energy platform firmware +1 more +3 moreMedtronic Valleylab FT10 and LS10 Protection Mechanism Failure4.6 Medium
- cisco firepower, firesight system software +1 moreCisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities5.8 Medium
- cisco firepower, firesight system software +1 moreCisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities5.8 Medium
- cisco hyperflex hx-series, hyperflex hx220c af m5 firmware, hyperflex hx220c edge m5 firmware +3 more +5 moreCisco HyperFlex Software Cross-Frame Scripting Vulnerability6.5 Medium
- osisoft pi web apiIn OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a...8.8 High
- Show moreLoading…