CWE-693: Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
From the CWE List. © The MITRE Corporation.
Newest
- 1panel-dev maxkbMaxKB: Sandbox Result Validation Bypass via Tool Output Spoofing3.1 Low
- 1panel-dev maxkbMaxKB: Sandbox escape via ctypes and unhooked SYS_pkey_mprotect6.3 Medium
- 1panel-dev maxkbMaxKB: Sandbox escape via LD_PRELOAD bypass6.3 Medium
- imagemagickImageMagick: Heap-use-after-free via XMP profile could result in a crash when printing values5.5 Medium
- mervinpraison praisonaiPraisonAI has Improper Control of Generation of Code ('Code Injection') and Protection Mechanism Failure in praisonai8.6 High
- google chromePolicy bypass in ServiceWorkers in Google Chrome prior to 147.0.7727.55 allowed a remote attacker...4.3 Medium
- google chromePolicy bypass in IFrameSandbox in Google Chrome prior to 147.0.7727.55 allowed a remote attacker...6.5 Medium
- google chromePolicy bypass in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to...4.3 Medium
- google chromePolicy bypass in Audio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who...6.1 Medium
- mervinpraison praisonaiagents, praison praisonai +1 morePraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode)10.0 Critical
- scoder lupa, red hat openshift ai (rhoai), satellite 6.18 +2 moreLupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattr7.9 High
- directusDirectus is Missing Cross-Origin Opener Policy8.7 High
- nyariv sandboxjsSandboxJS: Sandbox integrity escape10.0 Critical
- mervinpraison praisonai, praison praisonaiagents +1 morePraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code10.0 Critical
- fccview cronmastercronmaster: Middleware authentication bypass enabling unauthorized page access and server-action execution8.3 High
- google chromeInsufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed a...6.5 Medium
- mock business::onlinepayment::storedtransaction, business\ +1 moreBusiness::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key9.1 Critical
- vllm, red hat ai inference server, ai inference server 3.2 +5 more +7 morevLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-out8.8 High
- openclawOpenClaw < 2026.3.22 - Environment Variable Override Bypass via Inconsistent Sanitization7.7 High
- hackerbay oneuptimeOneUptime has sandbox escape in Synthetic Monitor Playwright runtime allows project members to execute arbitrary commands on Probe10.0 Critical
@grackle-ai/servernpm@grackle-ai/server has Missing Content-Security-Policy and X-Frame-Options Headers5.3 Medium- apple macosAn access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS...7.5 High
- apple ipados, macos, safari +5 more +7 moreThis issue was addressed through improved state management. This issue is fixed in Safari 26.4,...6.5 Medium
- scribanScriban before 7.0.0 MemberFilter Bypass via TemplateContext Cache9.3 Critical
- pinchtabA PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution6.1 Medium
- google chromeInappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote...8.8 High
- step-security harden-runnerEgress Policy Bypass via DNS over HTTPS (DoH) in Harden-Runner (Community Tier)4.6 Medium
- step-security harden-runnerEgress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)4.6 Medium
- linuxfoundation onnx, red hat openshift ai (rhoai), openshift ai 2.25 +2 moreONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack8.6 High
- hcl aionHCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment4.7 Medium
- veeam software appliance, backup \& replication +1 moreA vulnerability allowing an authenticated user with the Backup Administrator role to perform...9.1 Critical
- veeam backup and replication, backup \& replication +1 moreA vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on...10.0 Critical
- veeam backup and replication, backup \& replication +1 moreA vulnerability allowing an authenticated domain user to bypass restrictions and manipulate...8.8 High
kora-libcrates.iokora-lib: Unrecognized Instruction Types Create Empty Stubs That Bypass Fee Payer Policy6.9 Medium- whyour qinglongwhyour qinglong API express.ts protection mechanism5.3 Medium
- parse-community parse-serverParse Server has denylist `requestKeywordDenylist` keyword scan bypass through nested object placement6.9 Medium
- openclawOpenClaw < 2026.3.7 - Sandbox Escape via /acp spawn Command5.8 Medium
- cloudfoundry foundation uaa, cloudfoundry cf-deployment, uaa-release +2 moreUAA User Token Revocation logic error6.5 Medium
ficklingPyPIFickling has `always_check_safety()` bypass: pickle.loads and _pickle.loads remain unhooked8.9 HighopenclawnpmOpenClaw's tools.exec.safeBins generic fallback allowed interpreter-style inline payload execution in allowlist mode2.3 Low- mmaitre314 picklescanpicklescan - Remote Code Execution via Unblocked Standard Library Modules9.3 Critical
- mmaitre314 picklescanpicklescan - Universal Blocklist Bypass via pkgutil.resolve_name10.0 Critical
- openclawOpenClaw < 2026.2.21 - OS-level Sandbox Bypass via --no-sandbox Flag4.8 Medium
- weintek easyweb, cmt-3072xh2 firmware +1 moreAn authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2...9.8 Critical
- openclawOpenClaw - Sandbox Network Isolation Bypass via docker.network=container Parameter9.3 Critical
- google androidIn broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch...8.8 High
- google androidIn loadDataAndPostValue of multiple files, there is a possible way to obscure permission usage...8.4 High
- google androidIn multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to...8.4 High
- cgm clininetLack of HTTP Response Headers5.3 Medium
- google androidIn oobconfig, there is a possible bypass of carrier restrictions due to a logic error. This could...8.4 High
- Show moreLoading…