CWE-693: Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
From the CWE List. © The MITRE Corporation.
Newest
- siyuan-note siyuanSiYuan: Incomplete IsSensitivePath denylist: globalCopyFiles reads home-dir credential dotfiles into the workspace4.9 Medium
- palo alto networks prisma access agentPrisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows5.8 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching4.3 Medium
- n8nn8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector7.1 High
- oasdiffoasdiff does not enforce --allow-external-refs=false on the git-revision load path (SSRF / local file read)6.0 Medium
github.com/tinfoil-factory/netfoilGonetfoil has a domain name filter bypass via multiple questions5.9 Mediumuucorecrates.iouutils coreutils: cp/install/mv/ln --suffix alone does not enable backup mode (silent data loss vs GNU)7.0 High- trailofbits ficklingFickling MLAllowlist analysis pass rendered inoperative by shared mutable state in AnalysisContext.shorten_code()8.8 High
- nousresearch hermes-agentNousResearch hermes-agent server.py shell.exec protection mechanism5.3 Medium
- cloudflare universal sslCloudflare Universal SSL automatically managed CAA RRset supersedes customer-configured CAA records7.6 High
- google chromeInappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote...7.5 High
- symfony twigTwig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`6.0 Medium
- google chromeInappropriate implementation in AI in Google Chrome prior to 150.0.7871.47 allowed a remote...8.3 High
- google chromeInappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote...9.6 Critical
- google chromeInsufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150.0.7871.47 allowed...9.6 Critical
- google chromeInappropriate implementation in WebAppInstalls in Google Chrome on Mac prior to 150.0.7871.47...9.6 Critical
- google chromeInsufficient policy enforcement in Browser in Google Chrome prior to 150.0.7871.47 allowed a...9.6 Critical
- google chromeInsufficient policy enforcement in Privacy in Google Chrome prior to 150.0.7871.47 allowed an...4.3 Medium
- google chromeInsufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed a...4.3 Medium
- google chromeInsufficient policy enforcement in Related-Website-Sets in Google Chrome prior to 150.0.7871.47...6.5 Medium
- google chromeInsufficient policy enforcement in Parser in Google Chrome prior to 150.0.7871.47 allowed a...4.3 Medium
- google chromeInsufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.47 allowed a...6.5 Medium
- google chromeInsufficient policy enforcement in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote...9.6 Critical
- google chromeInappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.47 allowed a...9.6 Critical
- google chromeInsufficient policy enforcement in USB in Google Chrome prior to 150.0.7871.47 allowed a remote...8.3 High
- google chromeInsufficient policy enforcement in WebXR in Google Chrome on Android prior to 150.0.7871.47...6.5 Medium
- google chromeInsufficient policy enforcement in DevTools in Google Chrome prior to 150.0.7871.47 allowed a...9.6 Critical
- google chromeInappropriate implementation in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47...6.5 Medium
- google chromeInsufficient policy enforcement in Isolated Web Apps in Google Chrome prior to 150.0.7871.47...6.5 Medium
- google chromeInappropriate implementation in Network in Google Chrome prior to 150.0.7871.47 allowed an...6.5 Medium
- google chromeInsufficient policy enforcement in Web Authentication (Passkeys & Security Keys) in Google Chrome...6.5 Medium
- google chromeInappropriate implementation in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote...9.6 Critical
- symfony twigTwig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`6.0 Medium
- symfony twigTwig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters7.1 High
- symfony twigTwig: Sandbox `__toString()` policy bypass via dynamic mapping keys7.1 High
- symfony twigTwig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`5.3 Medium
- openidentityplatform openamOpenAM Authenticated RCE via Groovy Sandbox Escape7.5 High
- gnome yelp, red hat enterprise linux 6, enterprise linux 7 +13 more +15 moreYelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications7.1 High
- 7-zip7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision4.8 Medium
nono-pyPyPInono-py has proxy-only network fallback bypass on older Linux kernels6.4 Medium- mattermost, mattermost server +1 moreMarkdown image rendering bypass in AI bot tool result posts in Mattermost3.5 Low
- pnpmpnpm: manifest identity spoof satisfies allowBuilds and runs attacker lifecycle7.5 High
- tryghost ghostGhost Content API filter bypass reveals private fields5.3 Medium
- fatpipe warpWarp: Env-var prefixes can lead to denylisted command autoexecution8.6 High
- jenkins script security, jenkins project script security plugin, red hat openshift developer tools and services +11 more +13 moreJenkins Script Security Plugin has a script security bypass vulnerability7.5 High
- jenkins script security, jenkins project script security plugin +1 moreJenkins Script Security Plugin sandbox bypass vulnerability8.8 High
- traefikTraefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails5.9 Medium
- microsoft .net, .net framework, .net 8.0 runtime +12 more +14 more.NET Framework Remote Code Execution Vulnerability7.8 High
- mervinpraison praisonaiPraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable8.8 High
- mervinpraison praisonaiPraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining8.8 High
- Show moreLoading…