CWE-693

Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

675 vulnerabilities with CWE-693
CVE-2022-33631 HIGH
Microsoft Excel - Privilege Escalation
CVSS 7.3
CVE-2022-31479 CRITICAL
HID Mercury Intelligent Controllers <1.302-1.296 - Code Injection
CVSS 9.6
CVE-2022-26774 HIGH
iTunes <12.12.4 - Privilege Escalation
CVSS 7.8
CVE-2022-20805 MEDIUM
Cisco Umbrella Secure Web Gateway - Authenticated SSL Decryption Bypass via TLS SNI Extension
CVSS 4.1
CVE-2022-20738 MEDIUM
Cisco Umbrella Secure Web Gateway - Unauthenticated File Inspection Bypass via Crafted Payload
CVSS 5.8
CVE-2022-21283 MEDIUM
Oracle GraalVM 20.3.4, 21.3.0 & Java SE 11.0.13, 17.0.1 - Partial DoS via Multiple Protocols
CVSS 5.3
CVE-2022-22152 HIGH
Juniper Networks Contrail Service Orchestration - Info Disclosure
CVSS 7.7
CVE-2021-1494 MEDIUM
Cisco Firepower Threat Defense Software - Unauthenticated File Policy Bypass via HTTP Header Handling
CVSS 5.8
CVE-2021-31982 HIGH
Microsoft Edge Chromium < 91.0.864.37 - Security Feature Bypass
CVSS 8.8
CVE-2021-26355 MEDIUM
AMD EPYC 7003 Firmware < milanpi-sp3_1.0.0.7 - Denial of Service via SMU Message Port Register Access
CVSS 5.5
CVE-2021-31608 MEDIUM
Proofpoint Enterprise Protection <18.8.0 - Auth Bypass
CVSS 4.3
CVE-2021-33081 HIGH
Intel SSD Firmware - Information Disclosure via Protection Mechanism Failure
CVSS 7.9
CVE-2021-33079 MEDIUM
Intel SSD Firmware - Information Disclosure via Protection Mechanism Failure
CVSS 4.1
CVE-2021-32960 HIGH
Rockwellautomation Factorytalk Services Platform < 6.11.00 - Incorrect Authorization
CVSS 8.5
CVE-2021-27497 MEDIUM
Philips Vue PACS <12.2 - Info Disclosure
CVSS 6.5
CVE-2021-36310 MEDIUM
Dell Networking OS10 10.4.3.x 10.5.0.x 10.5.1.x 10.5.2.x - Authenticated Denial of Service via API Service
CVSS 4.9
CVE-2021-35556 MEDIUM
Java SE and GraalVM - Partial Denial of Service in Swing
CVSS 5.3
CVE-2021-31386 MEDIUM
Juniper Networks Junos OS <12.3R12-S20, <15.1R7-S11, <18.3R3-S6, <1...
CVSS 5.3
CVE-2021-31362 MEDIUM
Junos OS Multiple Versions - Unauthenticated DoS via Spoofed IS-IS Hello PDU
CVSS 6.5
CVE-2021-1616 MEDIUM
Cisco IOS XE < 17.6.1 - Unauthenticated NAT ALG Bypass via H.323 Traffic
CVSS 4.7
CVE-2021-32835 CRITICAL
Eclipse Keti - Post-Authentication Remote Code Execution via Sandbox Escape
CVSS 9.9
CVE-2021-3453 MEDIUM
Lenovo Notebook, ThinkPad, and Desktop Systems - BIOS Module Protection Bypass
CVSS 6.8
CVE-2021-32729 LOW
XWiki Platform <12.6.88-13.0 - Auth Bypass
CVSS 2.0
CVE-2021-1517 MEDIUM
Cisco Webex Meetings and Webex Meetings Server - Security Protection Bypass via Multimedia Viewer Feature
CVSS 5.0
CVE-2021-27245 HIGH
TP-Link Archer A7 <V5_210125-V5_200220 - Firewall Bypass
CVSS 8.1
Details
Vulnerabilities 675