Skip to content
OpenAdvisories

Weakness (CWE)

CWE-693: Protection Mechanism Failure

Pillar Draft Mapping discouraged

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Source: MITRE CWE-693

All Critical High Medium Low Exploited only Public exploit

1,057 results · Feed

  • Unscored —
    CVE-2018-0326

    A vulnerability in the web UI of Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to …

  • Unscored —
    CVE-2018-0250

    A vulnerability in Central Web Authentication (CWA) with FlexConnect Access Points (APs) for Cisco Aironet 1560, 1810, …

  • Unscored —
    CVE-2018-0254

    A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attac…

  • Unscored —
    CVE-2018-0244

    A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attac…

  • Unscored —
    CVE-2018-0243

    A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attac…

  • Unscored —
    CVE-2018-0198

    A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote att…

  • Unscored —
    CVE-2018-7504

    A Protection Mechanism Failure issue was discovered in OSIsoft PI Vision versions 2017 and prior. The X-XSS-Protection …

  • Unscored —
    CVE-2018-1170

    This vulnerability allows adjacent attackers to inject arbitrary Controller Area Network messages on vulnerable install…

    Volkswagen Volkswagen Customer-Link App
  • Unscored —
    CVE-2018-0138

    A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attac…

  • Unscored —
    CVE-2018-0094

    A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote…

  • Low 1.9
    CVE-2017-3893

    Incomplete vulnerability mitigations

    In BlackBerry QNX Software Development Platform (SDP) 6.6.0, the default configuration of the QNX SDP system did not in all circumstances prevent attackers from modifying the GOT or PLT tables with buffer overflow attacks.

    BlackBerry QNX Software Development Platform (QNX SDP)
  • Unscored —
    CVE-2017-10952 Public exploit

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.0.…

    Zero Day Initiative Foxit Reader
  • Unscored —
    CVE-2017-2685

    Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 (including) and 2.0.6 (excluding) and between 3.0.4.00…

  • Critical 9.9
    CVE-2012-5487

    Plone Sandbox Bypass

    The sandbox whitelisting function (allowmodule.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain privileges to bypass the Python sandbox restriction and execute arbitrary Python code via vectors related to importin…

    plone PyPI
  • Critical 9.9
    CVE-2012-5493

    Plone Sandbox Bypass

    gtbn.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain permissions to bypass the Python sandbox and execute arbitrary Python code via unspecified vectors.

    plone PyPI
  • Critical 9.8
    CVE-2013-2465 Exploited · Ransomware Public exploit EPSS 99%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

    KEV Mar 28, 2022
  • Low 3.7
    CVE-2013-0431 Exploited · Ransomware Public exploit EPSS 90%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and Op…

    KEV May 25, 2022