# CWE-693. Every Advisory and CVE whose sources give the weakness CWE-693, newest first. ## Records, newest first (an older page) - [Code Integrity Guard Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-43585.md) `CVE-2024-43585` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-693 - [Windows Scripting Engine Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-43584.md) `CVE-2024-43584` · CVE record: Microsoft Windows 11 version 21H2 and 4 more · CVSS 7.7 High · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-693 - [BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-43513.md) `CVE-2024-43513` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-693 - [Cisco Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerability](https://agentprime.io/advisories/CVE-2024-20438.md) `CVE-2024-20438` · CVE record: Cisco Cisco Data Center Network Manager · CVSS 6.3 Medium · Not analysed yet · Published 2 Oct 2024 · Tags: CWE-693 - [@backstage/plugin-techdocs-backend vulnerable to circumvention of cross site scripting protection](https://agentprime.io/advisories/GHSA-5j94-f3mf-8685.md) `GHSA-5j94-f3mf-8685`, `CVE-2024-46976` · npm `@backstage/plugin-techdocs-backend`: affected `<1.10.13`, fixed in `1.10.13` · CVSS 6.5 Medium · Not analysed yet · Published 17 Sept 2024 · Tags: Cross-site scripting (XSS), CWE-693 - [Mattermost Desktop App fails to sufficiently configure Electron Fuses](https://agentprime.io/advisories/GHSA-xgq9-7gw6-jr5r.md) `GHSA-xgq9-7gw6-jr5r`, `BIT-mattermost-2024-45835`, `CVE-2024-45835` · npm `mattermost-desktop`: affected `<5.9.0`, fixed in `5.9.0` · CVSS 2.5 Low · Not analysed yet · Published 16 Sept 2024 · Tags: CWE-693 - [Mobile password gets saved in dictionary under conditions](https://agentprime.io/advisories/CVE-2024-45833.md) `CVE-2024-45833` · CVE record: Mattermost Mattermost · CVSS 4.5 Medium · Not analysed yet · Published 16 Sept 2024 · Tags: CWE-693 - [Windows Mark of the Web Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-43487.md) `CVE-2024-43487` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-693 - [Microsoft Publisher Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-38226.md) `CVE-2024-38226` · CVE record: Microsoft Microsoft Office 2019 and 2 more · CVSS 7.3 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-693 - [Windows Mark of the Web Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-38217.md) `CVE-2024-38217` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.4 Medium · Critical (KEV) · In CISA KEV · EPSS 0.10 · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-693 - [Twig has a possible sandbox bypass](https://agentprime.io/advisories/GHSA-6j75-5wfj-gh66.md) `GHSA-6j75-5wfj-gh66`, `CVE-2024-45411`, `PKSA-6319-ffpf-gx66` · Packagist `twig/twig`: affected `>=1.0.0, <1.44.8 || >=2.0.0, <2.16.1 || >=3.0.0, <3.11.1 || >=3.12.0, <3.14.0`, fixed in `1.44.8`, `2.16.1`, `3.11.1`, `3.14.0` · CVSS 8.6 High · Not analysed yet · Published 9 Sept 2024 · Tags: CWE-693 - [WP Cerber Security <= 9.4 - IP Protection Bypass](https://agentprime.io/advisories/CVE-2022-4100.md) `CVE-2022-4100` · CVE record: gioni WP Cerber Security, Anti-spam & Malware Scan · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2024 · Tags: CWE-693 - [Mattermost allows remote/synthetic users to create sessions, reset passwords in github.com/mattermost/mattermost-server](https://agentprime.io/advisories/GHSA-c6vp-jjgv-38wj.md) `GHSA-c6vp-jjgv-38wj`, `CVE-2024-39836`, `GO-2024-3096` · Go `github.com/mattermost/mattermost-server` and 3 more: affected `>=9.5.0+incompatible, <9.5.8+incompatible || >=9.8.0+incompatible, <9.8.3+incompatible || >=9.9.0+incompatible, <9.9.2+incompatible || >=9.10.0+incompatible, <9.10.1+incompatible`, fixed in `9.5.8+incompatible`, `9.8.3+incompatible`, `9.9.2+incompatible`, `9.10.1+incompatible` · CVSS 4.8 Medium · Not analysed yet · Published 30 Aug 2024 · Tags: CWE-693 - [Cisco NX-OS Software Python Parser Escape Vulnerability](https://agentprime.io/advisories/CVE-2024-20284.md) `CVE-2024-20284` · CVE record: Cisco Cisco NX-OS Software · CVSS 5.3 Medium · Not analysed yet · Published 28 Aug 2024 · Tags: CWE-693 - [Cisco NX-OS Software Python Parser Escape Vulnerability](https://agentprime.io/advisories/CVE-2024-20286.md) `CVE-2024-20286` · CVE record: Cisco Cisco NX-OS Software · CVSS 5.3 Medium · Not analysed yet · Published 28 Aug 2024 · Tags: CWE-693 - [Protection mechanism failure in Intel(R) Ethernet Network Controllers and Adapters E810 Series](https://agentprime.io/advisories/CVE-2024-23499.md) `CVE-2024-23499` · CVE record: Intel(R) Ethernet Network Controllers and Adapters E810 Series · CVSS 7.0 High · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-693 - [Protection mechanism failure in Intel(R) Ethernet Network Controllers and Adapters E810 Series](https://agentprime.io/advisories/CVE-2024-24983.md) `CVE-2024-24983` · CVE record: Intel(R) Ethernet Network Controllers and Adapters E810 Series · CVSS 7.0 High · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-693 - [Protection mechanism failure in 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors](https://agentprime.io/advisories/CVE-2024-24980.md) `CVE-2024-24980` · CVE record: 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors · CVSS 6.9 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-693 - [Windows SmartScreen Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-38180.md) `CVE-2024-38180` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Aug 2024 · Tags: CWE-693 - [Windows Mark of the Web Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-38213.md) `CVE-2024-38213` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Critical (KEV) · In CISA KEV · EPSS 0.14 · Not analysed yet · Published 13 Aug 2024 · Tags: CWE-693 - [Protection mechanism failure in NVIDIA Mellanox OS and others](https://agentprime.io/advisories/CVE-2024-0101.md) `CVE-2024-0101` · CVE record: NVIDIA Mellanox OS and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Aug 2024 · Tags: CWE-693 - [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2023-42918.md) `CVE-2023-42918` · CVE record: Apple macOS · CVSS 8.6 High · Not analysed yet · Published 29 Jul 2024 · Tags: CWE-693 - [Openfind Mail2000 - HttpOnly flag bypass](https://agentprime.io/advisories/CVE-2024-6741.md) `CVE-2024-6741` · CVE record: Openfind Mail2000 V7.0 and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 15 Jul 2024 · Tags: CWE-693 - [Azure CycleCloud Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-38092.md) `CVE-2024-38092` · CVE record: Microsoft Azure CycleCloud 7.9.10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-693 - [Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-38070.md) `CVE-2024-38070` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-693 - [BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-38058.md) `CVE-2024-38058` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-693 - [\[CVE-2024-39599\] Protection Mechanism Failure in SAP NetWeaver Application Server for ABAP and ABAP Platform](https://agentprime.io/advisories/CVE-2024-39599.md) `CVE-2024-39599` · CVE record: SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform · CVSS 4.7 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-693 - [An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component.](https://agentprime.io/advisories/CVE-2024-27713.md) `CVE-2024-27713` · CVE record · CVSS 8.8 High · Not analysed yet · Published 5 Jul 2024 · Tags: CWE-693 - [Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.](https://agentprime.io/advisories/CVE-2024-29510.md) `CVE-2024-29510` · CVE record · CVSS 6.3 Medium · EPSS 0.28 · Not analysed yet · Published 3 Jul 2024 · Tags: CWE-693 - [events2 TYPO3 extension insecure direct object reference (IDOR) vulnerability](https://agentprime.io/advisories/GHSA-cchp-3rq6-69wj.md) `GHSA-cchp-3rq6-69wj`, `CVE-2024-38874`, `PKSA-zq5r-mdpd-2ycp` · Packagist `jweiland/events2`: affected `<8.3.8 || >=9.0.0, <9.0.6`, fixed in `8.3.8`, `9.0.6` · CVSS 5.4 Medium · Not analysed yet · Published 21 Jun 2024 · Tags: Broken access control, CWE-693 - [Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability](https://agentprime.io/advisories/CVE-2024-6153.md) `CVE-2024-6153` · CVE record: Parallels Desktop · CVSS 7.8 High · Not analysed yet · Published 20 Jun 2024 · Tags: CWE-693 - [Mattermost Desktop App allows for bypassing TCC restrictions on macOS](https://agentprime.io/advisories/GHSA-xgqm-wp7w-mgg2.md) `GHSA-xgqm-wp7w-mgg2`, `CVE-2024-36287` · npm `mattermost-desktop`: affected `<5.8.0`, fixed in `5.8.0` · CVSS 3.8 Low · Not analysed yet · Published 14 Jun 2024 · Tags: CWE-693 - [Mattermost Desktop App Remote Code Execution](https://agentprime.io/advisories/GHSA-hvxg-77mg-vrvp.md) `GHSA-hvxg-77mg-vrvp`, `CVE-2024-37182` · npm `mattermost-desktop`: affected `<5.8.0`, fixed in `5.8.0` · CVSS 4.7 Medium · Not analysed yet · Published 14 Jun 2024 · Tags: CWE-693 - [Dropbox Desktop Folder Sharing Mark-of-the-Web Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-5924.md) `CVE-2024-5924` · CVE record: Dropbox Dropbox Desktop · CVSS 8.8 High · Not analysed yet · Published 13 Jun 2024 · Tags: CWE-693 - [Visual Studio Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-30052.md) `CVE-2024-30052` · CVE record: Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 11 Jun 2024 · Tags: CWE-693 - [Protection mechanism failure in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2024-5691.md) `CVE-2024-5691` · CVE record: Mozilla Firefox and 2 more · CVSS 4.7 Medium · Not analysed yet · Published 11 Jun 2024 · Tags: CWE-693 - [x86: Incorrect logic for BTC/SRSO mitigations](https://agentprime.io/advisories/CVE-2024-31142.md) `CVE-2024-31142` · CVE record: Xen Xen · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.17 · Not analysed yet · Published 16 May 2024 · Tags: CWE-693 - [Microsoft Bing Search Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-30041.md) `CVE-2024-30041` · CVE record: Microsoft Microsoft Bing Search for iOS · CVSS 5.4 Medium · Not analysed yet · Published 14 May 2024 · Tags: CWE-693 - [Windows Mark of the Web Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-30050.md) `CVE-2024-30050` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.4 Medium · EPSS 0.11 · Not analysed yet · Published 14 May 2024 · Tags: CWE-693 - [Jenkins Script Security Plugin has sandbox bypass vulnerability involving crafted constructor bodies](https://agentprime.io/advisories/GHSA-v63g-v339-2673.md) `GHSA-v63g-v339-2673`, `CVE-2024-34144` · Maven `org.jenkins-ci.plugins:script-security`: affected `<1336.vf33a`, fixed in `1336.vf33a` · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.48 · Not analysed yet · Published 2 May 2024 · Tags: CWE-693 - [In CARLA through 0.9.15.2, the collision sensor mishandles some situations involving pedestrians or bicycles, in part because the collision sensor function is not exposed to the Blueprint library.](https://agentprime.io/advisories/CVE-2024-33903.md) `CVE-2024-33903` · CVE record · CVSS 5.9 Medium · Not analysed yet · Published 29 Apr 2024 · Tags: CWE-693 - [ejs lacks certain pollution protection](https://agentprime.io/advisories/GHSA-ghr5-ch3p-vcr6.md) `GHSA-ghr5-ch3p-vcr6`, `CVE-2024-33883` · npm `ejs`: affected `<3.1.10`, fixed in `3.1.10` · CVSS 4.0 Medium · Not analysed yet · Published 28 Apr 2024 · Tags: Prototype pollution, CWE-693 - [Protection mechanism failure in Apple iTunes for Windows](https://agentprime.io/advisories/CVE-2022-48611.md) `CVE-2022-48611` · CVE record: Apple iTunes for Windows · CVSS 7.8 High · Not analysed yet · Published 26 Apr 2024 · Tags: CWE-693 - [BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20665.md) `CVE-2024-20665` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-693 - [SmartScreen Prompt Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-29988.md) `CVE-2024-29988` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.45 · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-693 - [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-28903.md) `CVE-2024-28903` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-693 - [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-28919.md) `CVE-2024-28919` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-693 - [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-28921.md) `CVE-2024-28921` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-693 - [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-28920.md) `CVE-2024-28920` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-693 - [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-26250.md) `CVE-2024-26250` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-693 - [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20669.md) `CVE-2024-20669` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-693 - [RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-30370.md) `CVE-2024-30370` · CVE record: RARLAB WinRAR · CVSS 4.3 Medium · Not analysed yet · Published 2 Apr 2024 · Tags: CWE-693 - [Intermittent HTTP policy bypass](https://agentprime.io/advisories/GHSA-68mj-9pjq-mc85.md) `GHSA-68mj-9pjq-mc85`, `BIT-cilium-2024-28248`, `BIT-cilium-operator-2024-28248`, `BIT-cilium-proxy-2024-28248`, `BIT-hubble-2024-28248`, `BIT-hubble-relay-2024-28248`, `BIT-hubble-ui-2024-28248`, `BIT-hubble-ui-backend-2024-28248`, `CVE-2024-28248`, `GO-2024-2653` · Go `github.com/cilium/cilium`: affected `>=1.13.9, <1.13.13 || >=1.14.0, <1.14.8 || >=1.15.0, <1.15.2`, fixed in `1.13.13`, `1.14.8`, `1.15.2` · CVSS 7.2 High · Not analysed yet · Published 18 Mar 2024 · Tags: CWE-693 - [Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-26163.md) `CVE-2024-26163` · CVE record: Microsoft Microsoft Edge (Chromium-based) and 1 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Mar 2024 · Tags: CWE-693 - [Security headers not set in vantage6-UI](https://agentprime.io/advisories/CVE-2024-24562.md) `CVE-2024-24562` · CVE record: vantage6 vantage6-UI · CVSS 5.4 Medium · Not analysed yet · Published 14 Mar 2024 · Tags: Information disclosure, CWE-693 - [Protection mechanism failure in Apple iTunes for Windows](https://agentprime.io/advisories/CVE-2023-42938.md) `CVE-2023-42938` · CVE record: Apple iTunes for Windows · CVSS 7.8 High · Not analysed yet · Published 14 Mar 2024 · Tags: CWE-693 - [Protection mechanism failure in 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or…](https://agentprime.io/advisories/CVE-2023-22655.md) `CVE-2023-22655` · CVE record: 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX · CVSS 6.1 Medium · Not analysed yet · Published 14 Mar 2024 · Tags: CWE-693 - [Protection mechanism failure in Intel(R) Processors](https://agentprime.io/advisories/CVE-2023-39368.md) `CVE-2023-39368` · CVE record: Intel(R) Processors · CVSS 6.5 Medium · Not analysed yet · Published 14 Mar 2024 · Tags: CWE-693 - [Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.4 - Protection Mechanism Bypass](https://agentprime.io/advisories/CVE-2024-0681.md) `CVE-2024-0681` · CVE record: cyberlord92 Page and Post Restriction · CVSS 5.3 Medium · Not analysed yet · Published 13 Mar 2024 · Tags: CWE-693 - [Protection mechanism failure in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-23284.md) `CVE-2024-23284` · CVE record: Apple Safari and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Mar 2024 · Tags: CWE-693 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .