Weakness (CWE)

CWE-693: Protection Mechanism Failure

Pillar Draft Mapping discouraged

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Source: MITRE CWE-693

All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

Medium 6.5

CVE-2026-34348 Public exploit

Windows Event Logging Service Information Disclosure Vulnerability

Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 14, 2026
Medium 5.3

CVE-2026-22013 Public exploit

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine

Apr 21, 2026
Medium 4.3

CVE-2026-32202 Exploited Public exploit EPSS 71%

Windows Shell Spoofing Vulnerability

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Alpine

Apr 14, 2026
KEV Apr 28, 2026
Medium 4.9

CVE-2026-22692 Public exploit

October CMS: Twig Sandbox Bypass via Collection Methods

October is a Content Management System (CMS) and web platform. Versions prior to 3.7.13 and versions 4.0.0 through 4.1.4 contain a sandbox bypass vulnerability in the optional Twig safe mode feature (CMS_SAFE_MODE). Certain methods on the collect() helper wer…

octobercms october october/rain Packagist

Apr 14, 2026
Medium 6.8

CVE-2026-1232 Public exploit

Anti-Tamper Bypass in BeyondTrust Privilege Management for Windows

A medium-severity vulnerability has been identified in BeyondTrust Privilege Management for Windows versions <=25.7. Under certain conditions, a local authenticated user with elevated privileges may be able to bypass the product’s anti-tamper protections, whi…

BeyondTrust Privilege management for Windows Windows

Feb 2, 2026
Medium 6.3

CVE-2025-66204 Public exploit

WBCE CMS allows brute-force protection bypass using X-Forwarded-For header

WBCE CMS is a content management system. Version 1.6.4 contains a brute-force protection bypass where an attacker can indefinitely reset the counter by modifying `X-Forwarded-For` on each request, gaining unlimited password guessing attempts, effectively bypa…

WBCE WBCE_CMS

Dec 8, 2025
Medium 6.5

CVE-2025-55886 Public exploit

An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ARD. The flaw exists in the `fe_uid` paramet…

Sep 22, 2025
Medium 6.3

CVE-2024-29510 Public exploit EPSS 28%

Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with…

ghostscript ghostscript ghostscript Debian Ubuntu Alpine

Jul 3, 2024
Medium 4.7

CVE-2024-30052 Public exploit

Visual Studio Remote Code Execution Vulnerability

Visual Studio Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)

Jun 11, 2024
Medium 4.0

CVE-2024-33883 Public exploit

ejs lacks certain pollution protection

The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certain pollution protection.

node-ejs ejs node-ejs Debian Ubuntu npm

Apr 28, 2024
Medium 5.6

CVE-2020-15215 Public exploit

Context isolation bypass in Electron

Electron before versions 11.0.0-beta.6, 10.1.2, 9.3.1 or 8.5.2 is vulnerable to a context isolation bypass. Apps using both `contextIsolation` and `sandbox: true` are affected. Apps using both `contextIsolation` and `nodeIntegrationInSubFrames: true` are affe…

electron electron electron npm

Oct 6, 2020