CWE-693: Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeInappropriate implementation in FedCM in Google Chrome prior to 151.0.7922.72 allowed a remote...6.5 Medium
- google chromeInappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a...9.6 Critical
- google chromeInappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a...9.6 Critical
- google chromeInappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed...8.8 High
- google chromeInappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed...9.6 Critical
- google chromeInappropriate implementation in HTML in Google Chrome prior to 151.0.7922.72 allowed a remote...6.5 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...9.6 Critical
- google chromeInappropriate implementation in SiteIsolation in Google Chrome prior to 151.0.7922.72 allowed a...4.2 Medium
- flytohub flyto-coreFlyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted8.6 High
github.com/tinfoil-factory/netfoilGonetfoil: Incorrect block responses could lead to localhost traffic7.4 High- apple macosA file quarantine bypass was addressed with additional checks. This issue is fixed in macOS...5.5 Medium
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS...5.5 Medium
- apple macosA file quarantine bypass was addressed with additional checks. This issue is fixed in macOS...5.5 Medium
- apple macosA logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7...7.8 High
- apple ipados, macos, safari +5 more +7 moreA permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6,...6.5 Medium
- apache wicketApache Wicket: leaked and missing CSP headers6.5 Medium
hubuum_clientcrates.ioHubuum client library (Rust): Configured custom transports may be bypassed, exposing credentials and network traffic6.3 Medium- No product listedAn issue in ZipGenius Team ZipGenius v.6.3.2.3116 and before allows a remote attacker to escalate...8.8 High
- No product listedAn issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to...9.8 Critical
zpaqfranzopenSUSEAn issue in Franco Corbelli ZPAQFRANZ v.61.3 and before allows a remote attacker to escalate...8.8 High- No product listedBandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vulnerability allows...5.4 Medium
- No product listedAn issue in Milos Paripovic OneCommander v.3.96.0.0 allows a remote attacker to execute arbitrary...8.8 High
- No product listedAn issue in OhSoft CoffeeZip v4.8.0.0 allows attackers to execute arbitrary code via downloading...8.8 High
- No product listedAn issue in NCH Software ExpressZip v11.29 allows attackers to execute arbitrary code via...8.8 High
- oracle corporation java se, oracle jdk, jre +2 moreVulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is...3.1 Low
- oracle corporation java se, oracle jdk, jre +2 moreVulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is...3.1 Low
- hclsoftware intelliops event managementHCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing3.1 Low
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Service Workers component9.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Networking component9.1 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security component9.1 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Enterprise Policies component9.1 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape in the DOM: Networking component9.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Networking component9.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Service Workers component9.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Networking component9.1 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the PDF Viewer component9.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Networking component9.1 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Disability Access APIs component9.8 Critical
- dell thinos 10Dell ThinOS 10, versions prior to 2605_10.2100 contain a Protection Mechanism Failure...6.1 Medium
- mervinpraison praisonaiPraisonAI before 4.6.78 Remote Code Execution via Broken AST Sandbox7.0 High
- microsoft visual studio 2022 version 17.12, visual studio 2022 version 17.14, visual studio 2026 version 18.7 +2 more +4 moreVisual Studio Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows BitLocker Security Feature Bypass Vulnerability6.1 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Event Logging Service Information Disclosure Vulnerability6.5 Medium
- mosaxiv clawletmosaxiv clawlet exec Safety Guard tool_exec.go guardExecCommand protection mechanism5.3 Medium
- lamaalrajih kicad-mcplamaalrajih kicad-mcp path_validator.py protection mechanism4.8 Medium
- mervinpraison praisonaiPraisonAI before 4.6.78 Prompt Injection Defense Bypass8.7 High
safeinstall-clinpmSafeInstall agent guard shell parsing can miss raw package execution8.8 High- mervinpraison praisonaiPraisonAI before 1.6.78 Remote Code Execution via tools.py8.5 High
- mervinpraison praisonaiPraisonAI before 4.6.78 Allowlist Bypass via find -exec8.7 High
- mervinpraison praisonaiPraisonAI before 4.6.78 Prompt Injection Defense Bypass6.9 Medium
- Show moreLoading…