CWE-693 · Protection Mechanism Failure (page 6)
Page 6 of 8 — CVEs classified under CWE-693, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-33903 | Medium | 5.9 | 2024-04-29 | In CARLA through 0.9.15.2, the collision sensor mishandles some situations involving pedestrians or bicycles, in part because the collision sensor function is… |
CVE-2024-33883 | Medium | 4.0 | 2024-04-28 | The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certain pollution protection. |
CVE-2022-48611 | High | 7.8 | 2024-04-26 | A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges. |
CVE-2024-29988 | High | 8.8 | 2024-04-09 | SmartScreen Prompt Security Feature Bypass Vulnerability |
CVE-2024-28921 | Medium | 6.7 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-28920 | High | 7.8 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-28919 | Medium | 6.7 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-28903 | Medium | 6.7 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-26250 | Medium | 6.7 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-20669 | Medium | 6.7 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-20665 | Medium | 6.1 | 2024-04-09 | BitLocker Security Feature Bypass Vulnerability |
CVE-2024-30370 | Medium | 4.3 | 2024-04-02 | RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-Of-The-Web protection mechanism on affected i… |
CVE-2024-28248 | High | 7.2 | 2024-03-18 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.13.9 and prior to versions 1.13.13, 1.14.8, an… |
CVE-2024-26163 | Medium | 4.7 | 2024-03-14 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2024-24562 | Medium | 5.4 | 2024-03-14 | vantage6-UI is the official user interface for the vantage6 server. In affected versions a number of security headers are not set. This issue has been addresse… |
CVE-2023-42938 | High | 7.8 | 2024-03-14 | A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.13.1 for Windows. A local attacker may be able to elevate their privileges. |
CVE-2023-39368 | Medium | 6.5 | 2024-03-14 | Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to potentially enable denial of service via n… |
CVE-2023-22655 | Medium | 6.1 | 2024-03-14 | Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to… |
CVE-2024-0681 | Medium | 5.3 | 2024-03-13 | The Page Restriction WordPress (WP) – Protect WP Pages/Post plugin for WordPress is vulnerable to information disclosure in all versions up to, and including… |
CVE-2024-23284 | Medium | 6.5 | 2024-03-08 | A logic issue was addressed with improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS S… |
CVE-2024-25091 | Critical | 9.1 | 2024-03-01 | Protection mechanism failure issue exists in RevoWorks SCVX prior to scvimage4.10.21_1013 (when using 'VirusChecker' or 'ThreatChecker' feature) and RevoWorks… |
CVE-2024-0682 | Medium | 5.3 | 2024-02-28 | The Page Restrict plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 2.5.5. This is due to the plugin not prope… |
CVE-2024-0680 | Medium | 5.3 | 2024-02-28 | The WP Private Content Plus plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 3.6. This is due to the plugin n… |
CVE-2024-21423 | Medium | 4.8 | 2024-02-23 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
CVE-2024-1671 | Medium | 6.5 | 2024-02-21 | Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafte… |
CVE-2023-52378 | Critical | 9.8 | 2024-02-18 | Vulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerability may cause features to perform abnorm… |
CVE-2024-20923 | Low | 3.1 | 2024-02-17 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are… |
CVE-2024-0029 | High | 7.8 | 2024-02-16 | In multiple files, there is a possible way to capture the device screen when disallowed by device policy due to a logic error in the code. This could lead to l… |
CVE-2024-0014 | High | 7.8 | 2024-02-16 | In startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config update due to a logic error. This could lead to local escalation o… |
CVE-2022-48219 | Medium | 6.4 | 2024-02-14 | Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass… |
CVE-2023-32644 | Medium | 4.3 | 2024-02-14 | Protection mechanism failure for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user t… |
CVE-2023-25945 | Medium | 6.7 | 2024-02-14 | Protection mechanism failure in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2024-21412 | High | 8.1 | 2024-02-13 | Internet Shortcut Files Security Feature Bypass Vulnerability |
CVE-2024-20673 | High | 7.8 | 2024-02-13 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-25744 | High | 8.8 | 2024-02-12 | In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is related to arch/x86/coco/tdx/tdx.c and arch/x… |
CVE-2024-0809 | Medium | 4.3 | 2024-01-24 | Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML p… |
CVE-2024-0804 | High | 7.5 | 2024-01-24 | Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to leak cross-origin data via a crafted HT… |
CVE-2024-0747 | Medium | 6.5 | 2024-01-23 | When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy… |
CVE-2024-20926 | Medium | 5.9 | 2024-01-16 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting). Supported ver… |
CVE-2023-51748 | High | 8.8 | 2024-01-11 | ScaleFusion 10.5.2 does not properly limit users to the Edge application because Ctrl-O and Ctrl-S can be used. This is fixed in 10.5.7 by preventing the launc… |
CVE-2023-20573 | Low | 3.2 | 2024-01-11 | A privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests potentially resulting in guests not receiving expected debug information. |
CVE-2023-4466 | Low | 2.7 | 2023-12-29 | A vulnerability has been found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60 and classified as problematic. Affected by this vulnerability is an unknown fun… |
CVE-2014-125107 | Medium | 4.3 | 2023-12-19 | A vulnerability was found in Corveda PHPSandbox 1.3.4 and classified as critical. Affected by this issue is some unknown functionality of the component String… |
CVE-2023-31273 | Critical | 10.0 | 2023-11-14 | Protection mechanism failure in some Intel DCM software before version 5.2 may allow an unauthenticated user to potentially enable escalation of privilege via… |
CVE-2023-27383 | Medium | 6.8 | 2023-11-14 | Protection mechanism failure in some Intel(R) oneAPI HPC Toolkit 2023.1 and Intel(R)MPI Library software before version 2021.9 may allow a privileged user to p… |
CVE-2023-25080 | Medium | 5.3 | 2023-11-14 | Protection mechanism failure in some Intel(R) Distribution of OpenVINO toolkit software before version 2023.0.0 may allow an authenticated user to potentially… |
CVE-2023-5875 | Low | 3.7 | 2023-11-02 | Mattermost Desktop fails to correctly handle permissions or prompt the user for consent on certain sensitive ones allowing media exploitation from a malicious… |
CVE-2023-5557 | High | 7.5 | 2023-10-13 | A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute code outside the sandbox if the tracker-… |
CVE-2023-45132 | Critical | 9.1 | 2023-10-11 | NAXSI is an open-source maintenance web application firewall (WAF) for NGINX. An issue present starting in version 1.3 and prior to version 1.6 allows someone… |
CVE-2023-45372 | Medium | 5.3 | 2023-10-09 | An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merg… |
CVE-2023-34984 | High | 7.5 | 2023-09-13 | A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6 through 6.3.23 allows attacker to exec… |
CVE-2023-4039 | Medium | 4.8 | 2023-09-13 | **DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow… |
CVE-2023-41319 | High | 8.8 | 2023-09-06 | Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of pri… |
CVE-2023-32493 | High | 7.3 | 2023-08-16 | Dell PowerScale OneFS, 9.5.0.x, contains a protection mechanism bypass vulnerability. An unprivileged, remote attacker could potentially exploit this vulnerab… |
CVE-2023-32006 | High | 8.8 | 2023-08-15 | The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. … |
CVE-2023-34427 | Medium | 5.3 | 2023-08-11 | Protection mechanism failure in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to… |
CVE-2022-46329 | High | 8.2 | 2023-08-11 | Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via loca… |
CVE-2022-41984 | Medium | 4.4 | 2023-08-11 | Protection mechanism failure for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2022 and December of 2022 may allow… |
CVE-2023-38157 | Medium | 6.5 | 2023-08-07 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2023-35352 | High | 7.5 | 2023-07-11 | Windows Remote Desktop Security Feature Bypass Vulnerability |
CVE-2023-33150 | Critical | 9.6 | 2023-07-11 | Microsoft Office Security Feature Bypass Vulnerability |
CVE-2023-3089 | High | 7.0 | 2023-07-05 | A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic m… |
CVE-2021-31982 | High | 8.8 | 2023-07-01 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2023-30757 | Medium | 6.2 | 2023-06-13 | A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal)… |
CVE-2023-30851 | Low | 2.6 | 2023-05-25 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. This issue only impacts users who have a HTTP policy that applies to… |
CVE-2022-41979 | Medium | 5.4 | 2023-05-10 | Protection mechanism failure in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2023-29354 | Medium | 4.7 | 2023-05-05 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2023-28286 | Medium | 6.1 | 2023-04-27 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2023-28284 | Medium | 4.3 | 2023-04-11 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2023-21024 | High | 7.8 | 2023-03-24 | In maybeFinish of FallbackHome.java, there is a possible delay of lockdown screen due to logic error. This could lead to local escalation of privilege with no… |
CVE-2023-0085 | Medium | 5.3 | 2023-03-02 | The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to reCaptcha Bypass in versions up to, and including, 3.2.1. This is due to insuf… |
CVE-2023-25765 | Critical | 9.9 | 2023-02-15 | In Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subject to Script Security protection, allowing attackers able t… |
CVE-2022-48290 | Critical | 9.1 | 2023-02-09 | The phone-PC collaboration module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality and integrity. |
CVE-2022-48287 | High | 7.5 | 2023-02-09 | The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data integrity. |
CVE-2023-0002 | Medium | 5.5 | 2023-02-08 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands t… |
CVE-2023-20919 | High | 7.8 | 2023-01-26 | In getStringsForPrefix of Settings.java, there is a possible prevention of package uninstallation due to a logic error in the code. This could lead to local es… |
CVE-2023-23589 | Medium | 6.5 | 2023-01-14 | The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol can be used but not the safe SOCKS4a protocol, aka TROVE-2022… |
CVE-2021-26355 | Medium | 5.5 | 2023-01-11 | Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid message port registers that could result in a potential denial-… |
CVE-2023-0141 | Medium | 4.3 | 2023-01-10 | Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (C… |
CVE-2023-0131 | Medium | 6.5 | 2023-01-10 | Inappropriate implementation in in iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to bypass file download restrictions via a… |
CVE-2022-46762 | High | 7.5 | 2023-01-06 | The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-47544 | Critical | 9.8 | 2023-01-05 | An issue was discovered in Siren Investigate before 12.1.7. Script variable whitelisting is insufficiently sandboxed. |
CVE-2022-26384 | Critical | 9.6 | 2022-12-22 | If an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code> but not <code>allow-scripts</code>, they were able to craft a l… |
CVE-2022-22761 | High | 8.8 | 2022-12-22 | Web-accessible extension pages (pages with a moz-extension:// scheme) were not correctly enforcing the frame-ancestors directive when it was used in the Web Ex… |
CVE-2022-22759 | Critical | 9.6 | 2022-12-22 | If a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently appended an element to the iframe's document that e.g. had a Java… |
CVE-2022-20562 | Low | 3.3 | 2022-12-16 | In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to… |
CVE-2022-46698 | Medium | 6.5 | 2022-12-15 | A logic issue was addressed with improved checks. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPad… |
CVE-2022-42848 | High | 7.8 | 2022-12-15 | A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, iOS 15.7.2 and iPadOS 15.7.2, tvOS 16.2. An app may be able… |
CVE-2022-42821 | Medium | 5.5 | 2022-12-15 | A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.2, macOS Big Sur 11.7.2, macOS Ventura 13. An app may bypass Gatek… |
CVE-2022-32537 | Medium | 4.8 | 2022-12-12 | A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is b… |
CVE-2021-31608 | Medium | 4.3 | 2022-11-17 | Proofpoint Enterprise Protection before 18.8.0 allows a Bypass of a Security Control. |
CVE-2022-33942 | High | 8.8 | 2022-11-11 | Protection mechanism failure in the Intel(R) DCM software before version 5.0 may allow an unauthenticated user to potentially enable escalation of privilege vi… |
CVE-2022-27516 | Medium | 5.3 | 2022-11-08 | User login brute force protection functionality bypass |
CVE-2022-42801 | High | 7.8 | 2022-11-01 | A logic issue was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and i… |
CVE-2022-32910 | High | 7.5 | 2022-11-01 | A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5, Security Update 2022-005 Catalina. An archi… |
CVE-2022-43435 | Medium | 5.3 | 2022-10-19 | Jenkins 360 FireLine Plugin 1.7.2 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived a… |
CVE-2022-43434 | Medium | 5.3 | 2022-10-19 | Jenkins NeuVector Vulnerability Scanner Plugin 1.20 and earlier programmatically disables Content-Security-Policy protection for user-generated content in work… |
CVE-2022-43433 | Medium | 4.3 | 2022-10-19 | Jenkins ScreenRecorder Plugin 0.7 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived a… |
CVE-2022-43432 | Medium | 4.3 | 2022-10-19 | Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archi… |
CVE-2022-43424 | Medium | 5.3 | 2022-10-19 | Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed, allowing… |