Advisories · Weakness
CWE-657.
Every Advisory and CVE whose sources give the weakness CWE-657, newest first.
- CVSS 7.5 High
Adobe Campaign Classic (ACC) | Violation of Secure Design Principles (CWE-657)
- Adobe Campaign Classic
- CWE-657
- CVSS 10.0 CriticalCritical · CVSS 9+
PraisonAI has sandbox escape via exception frame traversal in `execute_code` (subprocess mode)
- CWE-657
- CWE-693
<1.5.115 · fixed in 1.5.115
GHSA-qf73-2hrx-xprp · CVE-2026-39888 - CVSS 4.0 Medium
Acrobat Reader | Violation of Secure Design Principles (CWE-657)
- Adobe Acrobat Reader
- CWE-657
- CVSS 6.3 Medium
OpenCTI is an open-source cyber threat intelligence platform. In versions starting from 6.4.8 to before 6.4.10, the allow/deny lists can be bypassed, allowing a user to change attributes that are i...
- Broken access control
- CWE-657
>=6.4.9, <6.4.11 · fixed in 6.4.11
GHSA-8262-pw2q-5qc3 · CVE-2025-24887 - CVSS 6.6 Medium
Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- CWE-657
- CVSS 6.5 Medium
ci solution CI-Out-of-Office Manager through 6.0.0.77 uses a Hard-coded Cryptographic Key.
- Hard-coded credentials
- CWE-657
- CVSS 8.3 High
OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functiona...
- Broken access control
- CWE-657
<5.12.32 · fixed in 5.12.32
GHSA-qx4j-f4f2-vjw9 · CVE-2024-26139 - CVSS 5.5 Medium
Passbolt Api Tabnabbing when opening URI with menu "Open URI in a new tab"
- CWE-657
<2.11.0 · fixed in 2.11.0
GHSA-qm5v-pj64-852j - CVSS 7.5 High
Vulnerability of defects introduced in the design process in the hwnff module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-657
- CVSS 7.8 High
ZDI-CAN-20712: Adobe Acrobat Blacklist Bypass Design flaw
- Adobe Acrobat Reader
- CWE-657
- CVSS 5.3 Medium
AEM Violation of Secure Design Principles Security feature bypass
- Adobe Experience Manager
- CWE-657
- CVSS 7.5 High
Magento Violation of Secure Design Principles vulnerability in RMA PDF filename formats
- CWE-657
<2.3.7 || >=2.4.0, <2.4.2-p1 · fixed in 2.3.7, 2.4.2-p1
GHSA-7gh6-f4jh-3crq · CVE-2021-28583 - CVSS 6.3 Medium
Adobe Acrobat Reader DC CSP Bypass Leads To Privilege Escalation
- Adobe Acrobat Reader
- CWE-657
- CVSS 2.5 Low
Adobe Acrobat Reader Missing Custom Protocols in Warning Message Prompts
- Adobe Acrobat Reader
- CWE-657
- CVSS 5.4 Medium
Adobe Connect Violation of Secure Design Principles Vulnerability Can Lead To Editing Or Deleting Recordings
- Adobe Connect
- CWE-657
- CVSS 5.9 Medium
Multiple soundness issues in cgc
- CWE-657
<=0.4.0 · no fixed version yet
GHSA-f3mq-99jr-ww4r · CVE-2020-36466 -
fake-static allows converting any reference into a `'static` reference
- CWE-657
<=0.1.0 · no fixed version yet
GHSA-8xw8-mmqv-frqq -
Nextcloud Server: A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1…
- Nextcloud Server
- CWE-657
-
Violation of Secure Design Principles in the iOS App 2.23.0 causes the app to leak its login and token to other Nextcloud services when search e.g. for federated users or registering for push notific…
- Nextcloud iOS
- CWE-657
- CVSS 7.8 High
Junos OS: Insecure management daemon (MGD) configuration may allow local privilege escalation
- Juniper Networks Junos OS
- CWE-657
-
A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices.
- Zynq UltraScale+ SoC
- CWE-657
-
Schneider Electric Modicon Modbus Protocol: A Violation of Secure Design Principles issue was discovered in Schneider Electric…
- Schneider Electric Modicon Modbus Protocol
- CWE-657