CWE-693: Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
From the CWE List. © The MITRE Corporation.
Newest
- jenkins 360 fireline, jenkins project 360 fireline plugin +1 moreContent-Security-Policy protection for user content can be disabled in Jenkins 360 FireLine Plugin5.3 Medium
- jenkins neuvector vulnerability scanner, jenkins project neuvector vulnerability scanner plugin +1 moreContent-Security-Policy protection for user content disabled by Jenkins NeuVector Vulnerability Scanner Plugin5.3 Medium
- jenkins screenrecorder, jenkins project screenrecorder plugin +1 moreContent-Security-Policy protection for user content disabled by Jenkins ScreenRecorder Plugin4.3 Medium
- jenkins xframium builder, jenkins project xframium builder plugin +1 moreContent-Security-Policy protection for user content disabled by Jenkins XFramium Builder Plugin4.3 Medium
- jenkins compuware topaz for total test, jenkins project compuware topaz for total test plugin +1 moreJenkins Compuware Topaz for Total Test Plugin vulnerable to Protection Mechanism Failure7.5 High
- jenkins compuware topaz for total test, jenkins project compuware topaz for total test plugin +1 moreAgent-to-controller security bypass vulnerabilities in Jenkins Compuware Topaz for Total Test Plugin5.3 Medium
- jenkins compuware xpediter code coverage, jenkins project compuware xpediter code coverage plugin +1 moreAgent-to-controller security bypass vulnerability in Jenkins Compuware Xpediter Code Coverage Plugin5.3 Medium
- jenkins project compuware source code download for endevor, pds, and ispw plugin, jenkins compuware source code download for endevor\, pds\, and ispw +1 moreAgent-to-controller security bypass vulnerability in Jenkins BMC Compuware Source Code Download for Endevor, PDS, and ISPW Plugin5.3 Medium
- jenkins compuware topaz utilities, jenkins project compuware topaz utilities plugin +1 moreAgent-to-controller security bypass vulnerability in Jenkins Compuware Topaz Utilities Plugin5.3 Medium
- jenkins katalon, jenkins project katalon plugin +1 moreJenkins Katalon Plugin vulnerable to Protection Mechanism Failure8.8 High
- jenkins nunit, jenkins project nunit plugin +1 moreJenkins NUnit Plugin vulnerable to Protection Mechanism Failure5.3 Medium
- jenkins groovy libraries, jenkins project pipeline: deprecated groovy libraries plugin +1 moreSandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin9.9 Critical
- jenkins groovy libraries, jenkins project pipeline: groovy libraries plugin +1 moreSandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin and Pipeline: Deprecated Groovy Libraries Plugin9.9 Critical
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin9.9 Critical
- jenkins script security, jenkins project script security plugin +1 moreJenkins Script Security Plugin sandbox bypass vulnerability9.9 Critical
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code execution9.9 Critical
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin9.9 Critical
- oracle graalvm, azul zulu, fedoraproject fedora +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...5.3 Medium
- huawei emui, harmonyos +1 moreThe HISP module has a vulnerability of bypassing the check of the data transferred in the kernel...7.5 High
- google androidIn various functions of ap_input_processor.c, there is a possible way to record audio during a...5.5 Medium
- isolated-vm project isolated-vmisolated-vm has vulnerable CachedDataOptions in API9.7 Critical
- apple ipados, macos, watchos +1 more +3 moreThis issue was addressed with improved checks. This issue is fixed in watchOS 8.7, iOS 15.6 and...10.0 Critical
- jenkins wildfly deployer, jenkins project wildfly deployer plugin +1 moreJenkins WildFly Deployer Plugin vulnerable to path traversal5.3 Medium
- apple ipados, macos, tvos +1 more +3 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6...7.8 High
- apple macosThis issue was addressed with improved environment sanitization. This issue is fixed in macOS...8.8 High
- intel ssd 600p firmware, ssd 660p firmware, ssd 665p firmware +27 more +29 moreProtection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged...7.9 High
- intel ssd 600p firmware, ssd 660p firmware, ssd 665p firmware +27 more +29 moreProtection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged...4.1 Medium
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 moreResponse body bypass in OWASP ModSecurity Core Rule Set via a specialy crafted charset in the HTTP Accept header7.3 High
- open-policy-agent opa, openpolicyagent open policy agent +1 moreOPA Compiler: Bypass of WithUnsafeBuiltins using `with` keyword to mock functions7.4 High
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Content Security Policy in Google Chrome prior to 105.0.5195...6.5 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Site Isolation in Google Chrome prior to 105.0.5195.52 allowed a...6.5 Medium
- minetestLua sandbox escape from mod in Minetest7.7 High
- microsoft excel, 365 apps, 365 apps for enterprise +6 more +8 moreMicrosoft Excel Security Feature Bypass Vulnerability7.3 High
- jenkins compuware zadviser api, jenkins project compuware zadviser api plugin +1 moreJenkins Compuware zAdviser API Plugin vulnerable to protection mechanism failure8.2 High
- jenkins compuware ispw operations, jenkins project compuware ispw operations plugin +1 moreAgent-to-controller security bypass in Jenkins BMC Compuware ISPW Operations plugin8.2 High
- jenkins xunit, jenkins project xunit plugin +1 moreAgent-to-controller security bypass in Jenkins xUnit Plugin9.1 Critical
- jenkinsUnauthorized view fragment access in Jenkins7.5 High
- hid mercury ep4502, lp1501, lp1502 +25 more +27 moreRemote Code Execution via command injection of the hostname9.6 Critical
- apple itunes, itunes for windows +1 moreA logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4...7.8 High
- cisco umbrella secure web gateway, umbrella insights virtual appliance +1 moreCisco Umbrella Secure Web Gateway File Decryption Bypass Vulnerability4.1 Medium
- philips vue pacs, myvue, speech +3 more +5 morePhilips Vue PACS Protection Mechanism Failure6.5 Medium
- rockwell automation factorytalk services platformRockwell Automation FactoryTalk Services Platform Protection Mechanism Failure8.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code>...9.6 Critical
- jenkins hashicorp vault, jenkins project hashicorp vault plugin +1 moreAgent-to-controller security bypass in Jenkins HashiCorp Vault Plugin allows reading arbitrary files6.5 Medium
- jenkins hashicorp vault, jenkins project hashicorp vault plugin +1 moreAgent-to-controller security bypass in Jenkins HashiCorp Vault Plugin6.5 Medium
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure8.8 High
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure8.8 High
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure8.8 High
- cisco umbrella secure web gateway, umbrella insights virtual appliance +1 moreCisco Umbrella Secure Web Gateway File Inspection Bypass Vulnerability5.8 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWeb-accessible extension pages (pages with a moz-extension:// scheme) were not correctly...8.8 High
- Show moreLoading…