CWE-693: Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
From the CWE List. © The MITRE Corporation.
Newest
- intel openvinoProtection mechanism failure in some Intel(R) Distribution of OpenVINO toolkit software before...5.3 Medium
- intel data center managerProtection mechanism failure in some Intel DCM software before version 5.2 may allow an...10.0 Critical
- mattermost desktopLack of Hardening against media exploitation from a remote origin3.7 Low
- gnome tracker miners, red hat enterprise linux 7, enterprise linux 8 +12 more +14 moreTracker-miners: sandbox escape7.5 High
- wargio naxsiIgnoreIP/IgnoreCIDR should not trust X-Forwarded-For9.1 Critical
- mediawikiAn issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1...5.3 Medium
- fortinet fortiwebA protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4...7.1 High
- gnu gcc, arm ltd gnu toolchain, siemens ruggedcom rst2428p +5 more +7 moreGCC's-fstack-protector fails to guard dynamically-sized local variables on AArch644.8 Medium
- ethyca fidesRemote Code Execution in Custom Integration Upload in Fides8.8 High
- samsung blockchain keystoreProtection Mechanism Failure in bc_tui trustlet from Samsung Blockchain Keystore prior to version...5.5 Medium
- dell powerscale onefsDell PowerScale OneFS, 9.5.0.x, contains a protection mechanism bypass vulnerability. An...7.3 High
- node.js, nodejs node, fedoraproject fedora +2 moreThe use of `module.constructor.createRequire()` can bypass the policy mechanism and require...8.8 High
- intel realsense 450 fa firmwareProtection mechanism failure in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM...5.3 Medium
- intel arc a750 firmware, arc a770 firmware +1 moreProtection mechanism failure for some Intel(R) Arc(TM) graphics cards A770 and A750 sold between...4.4 Medium
- intel corporation intel(r) proset/wireless wifi software, debian linux, fedoraproject fedora +3 more +5 moreProtection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a...8.2 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability6.5 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +6 more +8 moreWindows Remote Desktop Security Feature Bypass Vulnerability7.5 High
- microsoft office, 365 apps, 365 apps for enterprise +6 more +8 moreMicrosoft Office Security Feature Bypass Vulnerability9.6 Critical
- redhat openshift container platform, red hat openshift serverless, openshift service mesh 2.2.x +13 more +15 moreOcp & fips mode7.0 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability8.8 High
- siemens totally integrated automation portal (tia portal) v14, totally integrated automation portal (tia portal) v15, totally integrated automation portal (tia portal) v15.1 +6 more +8 moreA vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V14 (All...6.2 Medium
- ciliumPotential HTTP policy bypass when using header rules in Cilium2.6 Low
- intel data center managerProtection mechanism failure in the Intel(R) DCM software before version 5.1 may allow an...5.4 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability4.7 Medium
- microsoft edge (chromium-based), edge chromium, edge (chromium-based) extended stable +2 moreMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability6.1 Medium
- microsoft edgeMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability4.3 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.2.1 - reCaptcha Protection Bypass5.3 Medium
- google androidIn maybeFinish of FallbackHome.java, there is a possible delay of lockdown screen due to logic...7.8 High
- jenkins email extension, jenkins project email extension plugin +1 moreSandbox escape in Jenkins Email Extension Plugin9.9 Critical
- cisco firepower threat defense software, utd snort ips engine software +1 moreMultiple Cisco products are affected by a vulnerability in the Snort detection engine that could...5.8 Medium
- huawei harmonyosThe phone-PC collaboration module has a logic bypass vulnerability. Successful exploitation of...9.1 Critical
- huawei emui, harmonyos +1 moreThe HwContacts module has a logic bypass vulnerability. Successful exploitation of this...7.5 High
- palo alto networks cortex xdr agentCortex XDR Agent: Product Disruption by Local Windows User5.5 Medium
- torproject tor, debian linux, fedoraproject fedora +2 moreThe SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol...6.5 Medium
- amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 moreInsufficient fencing and checks in System Management Unit (SMU) may result in access to invalid...5.5 Medium
- google chromeInsufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote...4.3 Medium
- google chromeInappropriate implementation in in iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed...6.5 Medium
- huawei emui, harmonyos +1 moreThe memory management module has a logic bypass vulnerability.Successful exploitation of this...7.5 High
- siren investigateAn issue was discovered in Siren Investigate before 12.1.7. Script variable whitelisting is...9.8 Critical
- google androidIn getStringsForPrefix of Settings.java, there is a possible prevention of package uninstallation...7.8 High
- apple icloud, icloud for windows, ipados +5 more +7 moreA logic issue was addressed with improved checks. This issue is fixed in Safari 16.2, tvOS 16.2,...6.5 Medium
- apple ipados, tvos, iphone os +2 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2...7.8 High
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.2,...5.5 Medium
- google androidIn various functions of ap_input_processor.c, there is a possible way to record audio during a...3.3 Low
- medtronic guardian link 2 transmitter mmt-7730 firmware, guardian link 2 transmitter mmt-7731 firmware, guardian link 2 transmitter mmt-7738 firmware +26 more +28 moreMedtronic MiniMed 600 Series Pump System Communication Issue4.8 Medium
- proofpoint enterprise protectionProofpoint Enterprise Protection before 18.8.0 allows a Bypass of a Security Control.4.3 Medium
- intel data center managerProtection mechanism failure in the Intel(R) DCM software before version 5.0 may allow an...8.8 High
- citrix application delivery controller firmware, gateway, citrix adc, gateway +2 moreUser login brute force protection functionality bypass5.3 Medium
- apple ipados, macos, tvos +2 more +4 moreA logic issue was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1...7.8 High
- apple macos, mac os x +1 moreA logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8,...7.5 High
- Show moreLoading…