Advisories · Weakness
CWE-693.
Every Advisory and CVE whose sources give the weakness CWE-693, newest first.
- CVSS 5.5 Medium
Code Integrity Guard Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-693
- CVSS 7.7 High
Windows Scripting Engine Security Feature Bypass Vulnerability
- Microsoft Windows 11 version 21H2
- Microsoft Windows 11 version 22H2
- CWE-693
- CVSS 6.4 Medium
BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
- CVSS 6.3 Medium
Cisco Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerability
- Cisco Data Center Network Manager
- CWE-693
- CVSS 6.5 Medium
@backstage/plugin-techdocs-backend vulnerable to circumvention of cross site scripting protection
- Cross-site scripting (XSS)
- CWE-693
<1.10.13 · fixed in 1.10.13
GHSA-5j94-f3mf-8685 · CVE-2024-46976 - CVSS 2.5 Low
Mattermost Desktop App fails to sufficiently configure Electron Fuses
- CWE-693
<5.9.0 · fixed in 5.9.0
GHSA-xgq9-7gw6-jr5r · CVE-2024-45835 - CVSS 4.5 Medium
Mobile password gets saved in dictionary under conditions
- Mattermost
- CWE-693
- CVSS 6.5 Medium
Windows Mark of the Web Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
- CVSS 7.3 HighCritical · KEVKEV
Microsoft Publisher Security Feature Bypass Vulnerability
- Microsoft Office 2019
- Microsoft Office LTSC 2021
- CWE-693
- CVSS 5.4 MediumCritical · KEVKEV
Windows Mark of the Web Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
- CVSS 8.6 High
Twig has a possible sandbox bypass
- CWE-693
>=1.0.0, <1.44.8 || >=2.0.0, <2.16.1 || >=3.0.0, <3.11.1 || >=3.12.0, <3.14.0 · fixed in 1.44.8, 2.16.1, 3.11.1, 3.14.0
GHSA-6j75-5wfj-gh66 · CVE-2024-45411 - CVSS 5.3 Medium
WP Cerber Security <= 9.4 - IP Protection Bypass
- gioni WP Cerber Security, Anti-spam & Malware Scan
- CWE-693
- CVSS 4.8 Medium
Mattermost allows remote/synthetic users to create sessions, reset passwords in github.com/mattermost/mattermost-server
- CWE-693
>=9.5.0+incompatible, <9.5.8+incompatible || >=9.8.0+incompatible, <9.8.3+incompatible || >=9.9.0+incompatible, <9.9.2+incompatible || >=9.10.0+incompatible, <9.10.1+incompatible · fixed in 9.5.8+incompatible, 9.8.3+incompatible, 9.9.2+incompatible, 9.10.1+incompatible
GHSA-c6vp-jjgv-38wj · CVE-2024-39836 - CVSS 5.3 Medium
Cisco NX-OS Software Python Parser Escape Vulnerability
- Cisco NX-OS Software
- CWE-693
- CVSS 5.3 Medium
Cisco NX-OS Software Python Parser Escape Vulnerability
- Cisco NX-OS Software
- CWE-693
- CVSS 7.0 High
Protection mechanism failure in Intel(R) Ethernet Network Controllers and Adapters E810 Series
- Intel(R) Ethernet Network Controllers and Adapters E810 Series
- CWE-693
- CVSS 7.0 High
Protection mechanism failure in Intel(R) Ethernet Network Controllers and Adapters E810 Series
- Intel(R) Ethernet Network Controllers and Adapters E810 Series
- CWE-693
- CVSS 6.9 Medium
Protection mechanism failure in 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors
- 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors
- CWE-693
- CVSS 8.8 High
Windows SmartScreen Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
- CVSS 6.5 MediumCritical · KEVKEV
Windows Mark of the Web Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
- CVSS 7.5 High
Protection mechanism failure in NVIDIA Mellanox OS and others
- NVIDIA Mellanox OS
- NVIDIA ONYX
- CWE-693
- CVSS 8.6 High
Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
- CVSS 5.8 Medium
Openfind Mail2000 - HttpOnly flag bypass
- Openfind Mail2000 V7.0
- Openfind Mail2000 V8.0
- CWE-693
- CVSS 8.8 High
Azure CycleCloud Elevation of Privilege Vulnerability
- Microsoft Azure CycleCloud 7.9.10
- Microsoft Azure CycleCloud 8.2.0
- CWE-693
- CVSS 7.8 High
Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
- CVSS 6.8 Medium
BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
- CVSS 4.7 Medium
[CVE-2024-39599] Protection Mechanism Failure in SAP NetWeaver Application Server for ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform
- CWE-693
- CVSS 8.8 High
An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component.
- CWE-693
- CVSS 6.3 Medium
Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.
- CWE-693
- CVSS 5.4 Medium
events2 TYPO3 extension insecure direct object reference (IDOR) vulnerability
- Broken access control
- CWE-693
<8.3.8 || >=9.0.0, <9.0.6 · fixed in 8.3.8, 9.0.6
GHSA-cchp-3rq6-69wj · CVE-2024-38874 - CVSS 7.8 High
Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability
- Parallels Desktop
- CWE-693
- CVSS 3.8 Low
Mattermost Desktop App allows for bypassing TCC restrictions on macOS
- CWE-693
<5.8.0 · fixed in 5.8.0
GHSA-xgqm-wp7w-mgg2 · CVE-2024-36287 - CVSS 4.7 Medium
Mattermost Desktop App Remote Code Execution
- CWE-693
<5.8.0 · fixed in 5.8.0
GHSA-hvxg-77mg-vrvp · CVE-2024-37182 - CVSS 8.8 High
Dropbox Desktop Folder Sharing Mark-of-the-Web Bypass Vulnerability
- Dropbox Desktop
- CWE-693
- CVSS 4.7 Medium
Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- CWE-693
- CVSS 4.7 Medium
Protection mechanism failure in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-693
- CVSS 7.5 HighCritical · CVSS 7+ and EPSS
x86: Incorrect logic for BTC/SRSO mitigations
- Xen
- CWE-693
- CVSS 5.4 Medium
Microsoft Bing Search Spoofing Vulnerability
- Microsoft Bing Search for iOS
- CWE-693
- CVSS 5.4 Medium
Windows Mark of the Web Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Jenkins Script Security Plugin has sandbox bypass vulnerability involving crafted constructor bodies
- CWE-693
<1336.vf33a · fixed in 1336.vf33a
GHSA-v63g-v339-2673 · CVE-2024-34144 - CVSS 5.9 Medium
In CARLA through 0.9.15.2, the collision sensor mishandles some situations involving pedestrians or bicycles, in part because the collision sensor function is not exposed to the Blueprint library.
- CWE-693
- CVSS 4.0 Medium
ejs lacks certain pollution protection
- Prototype pollution
- CWE-693
<3.1.10 · fixed in 3.1.10
GHSA-ghr5-ch3p-vcr6 · CVE-2024-33883 - CVSS 7.8 High
Protection mechanism failure in Apple iTunes for Windows
- Apple iTunes for Windows
- CWE-693
- CVSS 6.1 Medium
BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
- CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV
SmartScreen Prompt Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
- CVSS 6.7 Medium
Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
- CVSS 6.7 Medium
Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
- CVSS 6.7 Medium
Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
- CVSS 7.8 High
Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
- CVSS 6.7 Medium
Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
- CVSS 6.7 Medium
Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
- CVSS 4.3 Medium
RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability
- RARLAB WinRAR
- CWE-693
- CVSS 7.2 High
Intermittent HTTP policy bypass
- CWE-693
>=1.13.9, <1.13.13 || >=1.14.0, <1.14.8 || >=1.15.0, <1.15.2 · fixed in 1.13.13, 1.14.8, 1.15.2
GHSA-68mj-9pjq-mc85 · CVE-2024-28248 - CVSS 4.7 Medium
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
- Microsoft Edge (Chromium-based)
- Microsoft Edge (Chromium-based) Extended Stable
- CWE-693
- CVSS 5.4 Medium
Security headers not set in vantage6-UI
- vantage6-UI
- Information disclosure
- CWE-693
- CVSS 7.8 High
Protection mechanism failure in Apple iTunes for Windows
- Apple iTunes for Windows
- CWE-693
- CVSS 6.1 Medium
Protection mechanism failure in 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or…
- 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX
- CWE-693
- CVSS 6.5 Medium
Protection mechanism failure in Intel(R) Processors
- Intel(R) Processors
- CWE-693
- CVSS 5.3 Medium
Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.4 - Protection Mechanism Bypass
- cyberlord92 Page and Post Restriction
- CWE-693
- CVSS 6.5 Medium
Protection mechanism failure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-693