CWE-693: Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
From the CWE List. © The MITRE Corporation.
Newest
- apple macosA parsing issue in the handling of directory paths was addressed with improved path validation....7.8 High
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2,...7.8 High
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2,...7.8 High
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2,...7.8 High
- apple ipados, macos, safari +3 more +5 moreThis issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27.2, iOS...10.0 Critical
- imagemagickImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete Fix1.8 Low
- baserproject basercmsbaserCMS: Public Web API mail-form submission bypasses image CAPTCHA5.3 Medium
- cozmoslabs profile builderProfile Builder 4.0.0 - 4.0.4 - Subscriber+ Comment reCAPTCHA Bypass4.3 Medium
- authlibAuthlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts2.6 Low
- cure53 dompurifyDOMPurify before 3.4.17 XSS via SMIL attributeName Guard Bypass in XHTML Mode5.1 Medium
- splunk soarProtection Mechanism Failure in Splunk SOAR9.8 Critical
- splunk enterpriseSecurity Hardening in Splunk Enterprise - October 20269.8 Critical
- getsentry sentry-javascriptSentry-Javascript: Middleware Bypass when using Tunnel route9.1 Critical
- oracle corporation graalvm enterprise edition, java se, javafx +2 moreVulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of...3.1 Low
- orphan-oss ognlOGNL stricter-invocation block list bypass via java.lang.reflect reflection proxies5.6 Medium
- bandisoft bandizipBandisoft Bandizip before 7.47 Mark-of-the-Web Bypass for PowerShell Scripts4.8 Medium
- apple xcodeThis issue was addressed by enforcing library validation on the affected binaries. This issue is...8.8 High
- dolibarrDolibarr CSP document.php protection mechanism5.3 Medium
- radare2radareorg radare2 HTTP Sandbox Policy rtr_http.inc.c r_core_cmd_str_pipe protection mechanism6.3 Medium
- dicklesworthstone destructive command guarddcg: Exponential-time command-substitution preprocessing lets a crafted command hang dcg and bypass the guard via hook-timeout fail-open7.1 High
- peazipIncomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmation4.6 Medium
- peazipPath traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name8.4 High
- renovatebot renovate, mend mend-renovate-ce helm chart, mend-renovate-enterprise-edition helm chart +3 more +5 moreRenovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request5.3 Medium
- openclaw clawscanOpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanism4.8 Medium
- giteaGitea required Actions check bypass through skipped workflows6.5 Medium
- red hat hardened imagesBusybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions5.5 Medium
- heymrun heymheym Python Tool Sandbox Escape8.8 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Core & HTML component9.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape in the DOM: Content Processes component9.6 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security component7.3 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the File Handling component8.3 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the File Handling component8.3 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Enterprise Policies component8.1 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Networking: HTTP component8.1 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Enterprise Policies component8.1 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security component8.1 High
- super-productivitySuper Productivity: SuperSync E2EE setup uploads and stores all user operations in plaintext before password is set5.7 Medium
- 0xjacky nginx-uiNginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context8.3 High
- 0xjacky nginx-uiNginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)8.8 High
- 0xjacky nginx-uiNginx UI: MCP `nginx_config_add` Bypasses Directive Validation — Authenticated RCE8.8 High
- zcashfoundation zebraZebra 2.3.0 before 6.4.0 Peer Ban Bypass via Exact-IP Keying6.9 Medium
- hexpm hexHex release-age cooldown is lifted package-wide when the locked release is retired7.1 High
- ibm security verify access, verify identity access, security verify access container +1 more +3 moreSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access9.1 Critical
- corazawaf corazaOWASP Coraza WAF: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass5.8 Medium
- ffmpegFFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse_playlist()5.3 Medium
- asynchttpclient async-http-clientAsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPS6.8 Medium
- splunk, splunk enterprise +1 moreProtection Mechanism Failure in Splunk Enterprise7.6 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities8.8 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities8.8 High
- corazawaf corazaOWASP Coraza WAF: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding7.2 High
- Show moreLoading…