CWE-693 · 768 kayıt
Protection Mechanism Failure
Bu sınıftaki CVE’ler
768 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
99Hemen | CVE-2013-2465Silahlaştırılmış | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlieroracle · jre · CWE-693 | Kritik9,8 | KEV | %98,8 | 18 Haz 2013 |
98Hemen | CVE-2019-1003030Silahlaştırılmış | A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/wojenkins · pipeline\ · CWE-693 | Kritik9,9 | KEV | %96,9 | 8 Mar 2019 |
92Hemen | CVE-2024-21412Silahlaştırılmış | Internet Shortcut Files Security Feature Bypass Vulnerabilitymicrosoft · windows 10 1809 · CWE-693 | Yüksek8,1 | KEV | %99,4 | 13 Şub 2024 |
91Hemen | CVE-2025-40536Silahlaştırılmış | SolarWinds Web Help Desk Security Control Bypass Vulnerabilitysolarwinds · web help desk · CWE-693 | Kritik9,8 | KEV | %73,6 | 28 Oca 2026 |
78Bu hafta | CVE-2013-0431Silahlaştırılmış | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-oracle · jre · CWE-693 | Orta5,3 | KEV | %90,2 | 31 Oca 2013 |
78Bu hafta | CVE-2025-0411Silahlaştırılmış | 7-Zip Mark-of-the-Web Bypass Vulnerability7-zip · 7-zip · CWE-693 | Yüksek7,0 | KEV | %67,1 | 25 Oca 2025 |
78Bu hafta | CVE-2024-29988Silahlaştırılmış | SmartScreen Prompt Security Feature Bypass Vulnerabilitymicrosoft · windows 10 1809 · CWE-693 | Yüksek8,8 | KEV | %44,9 | 9 Nis 2024 |
72Bu hafta | CVE-2026-21510Silahlaştırılmış | Windows Shell Security Feature Bypass Vulnerabilitymicrosoft · windows 10 1607 · CWE-693 | Yüksek8,8 | KEV | %24,2 | 10 Şub 2026 |
70Bu hafta | CVE-2026-21513Silahlaştırılmış | MSHTML Framework Security Feature Bypass Vulnerabilitymicrosoft · windows 10 1607 · CWE-693 | Yüksek8,8 | KEV | %15,6 | 10 Şub 2026 |
60Bu hafta | CVE-2024-38213Silahlaştırılmış | Windows Mark of the Web Security Feature Bypass Vulnerabilitymicrosoft · windows 10 1507 · CWE-693 | Orta6,5 | KEV | %13,6 | 13 Ağu 2024 |
60Bu hafta | CVE-2024-38226Silahlaştırılmış | Microsoft Publisher Security Feature Bypass Vulnerabilitymicrosoft · office 2019 · CWE-693 | Yüksek7,3 | KEV | %2,7 | 10 Eyl 2024 |
54Planlayın | CVE-2024-38217Silahlaştırılmış | Windows Mark of the Web Security Feature Bypass Vulnerabilitymicrosoft · windows 10 1507 · CWE-693 | Orta5,4 | KEV | %10,0 | 10 Eyl 2024 |
53Planlayın | CVE-2024-34144Kavram kanıtı | A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allowsjenkins · script security · CWE-693 | Kritik9,8 | — | %48,1 | 2 May 2024 |
48Planlayın | CVE-2026-32202Silahlaştırılmış | Windows Shell Spoofing Vulnerabilitymicrosoft · windows 10 1607 · CWE-693 | Orta4,3 | KEV | %4,9 | 14 Nis 2026 |
43Planlayın | CVE-2025-68668İstismar yok | n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Noden8n · n8n · CWE-693 | Kritik9,9 | — | %13,2 | 26 Ara 2025 |
42Planlayın | CVE-2022-32845İstismar yok | This issue was addressed with improved checks.apple · ipados · CWE-693 | Kritik10,0 | — | %5,4 | 23 Eyl 2022 |
41Planlayın | CVE-2017-3197İstismar yok | GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protectiongigabyte · gb-bsi7h-6500 firmware · CWE-693 | Kritik9,8 | — | %5,6 | 9 Tem 2018 |
41Planlayın | CVE-2022-35978Kavram kanıtı | Lua sandbox escape from mod in Minetestminetest · minetest · CWE-693 | Kritik10,0 | — | %2,9 | 15 Ağu 2022 |
40Planlayın | CVE-2021-32835İstismar yok | Groovy Sandbox escape in Eclipse Ketieclipse · keti · CWE-693 | Kritik9,9 | — | %4,6 | 8 Eyl 2021 |
40Planlayın | CVE-2018-9318İstismar yok | The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a rbmw · telematics control unit firmware · CWE-693 | Kritik9,8 | — | %4,3 | 31 May 2018 |
40Planlayın | CVE-2018-9311İstismar yok | The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a rbmw · telematics control unit firmware · CWE-693 | Kritik9,8 | — | %4,0 | 31 May 2018 |
40Planlayın | CVE-2020-10887İstismar yok | This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers.tp-link · ac1750 firmware · CWE-693 | Kritik9,8 | — | %3,7 | 25 Mar 2020 |
40Planlayın | CVE-2022-31479İstismar yok | Remote Code Execution via command injection of the hostnamehidglobal · lp1501 firmware · CWE-693 | Kritik9,8 | — | %2,4 | 6 Haz 2022 |
40Planlayın | CVE-2017-8864İstismar yok | Client-side enforcement using JavaScript of server-side security options on the Cohu 3960HD allows an attacker to manipulate options sent tocohuhd · 3960hd firmware · CWE-693 | Kritik9,8 | — | %2,3 | 22 Kas 2017 |
40Planlayın | CVE-2019-10328İstismar yok | Jenkins Pipeline Remote Loader Plugin 1.4 and earlier provided a custom whitelist for script security that allowed attackers to invoke arbitjenkins · pipeline remote loader · CWE-693 | Kritik9,9 | — | %1,9 | 31 May 2019 |
- CVE-2013-246599Hemen
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99oracle · jre18 Haz 2013
- CVE-2019-100303098Hemen
A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/wo
KritikCVSS 9,9KEVSilahlaştırılmışEPSS %97jenkins · pipeline\8 Mar 2019
- CVE-2024-2141292Hemen
Internet Shortcut Files Security Feature Bypass Vulnerability
YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %99microsoft · windows 10 180913 Şub 2024
- CVE-2025-4053691Hemen
SolarWinds Web Help Desk Security Control Bypass Vulnerability
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %74solarwinds · web help desk28 Oca 2026
- CVE-2013-043178Bu hafta
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-
OrtaCVSS 5,3KEVSilahlaştırılmışEPSS %90oracle · jre31 Oca 2013
- CVE-2025-041178Bu hafta
7-Zip Mark-of-the-Web Bypass Vulnerability
YüksekCVSS 7,0KEVSilahlaştırılmışEPSS %677-zip · 7-zip25 Oca 2025
- CVE-2024-2998878Bu hafta
SmartScreen Prompt Security Feature Bypass Vulnerability
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %45microsoft · windows 10 18099 Nis 2024
- CVE-2026-2151072Bu hafta
Windows Shell Security Feature Bypass Vulnerability
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %24microsoft · windows 10 160710 Şub 2026
- CVE-2026-2151370Bu hafta
MSHTML Framework Security Feature Bypass Vulnerability
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %16microsoft · windows 10 160710 Şub 2026
- CVE-2024-3821360Bu hafta
Windows Mark of the Web Security Feature Bypass Vulnerability
OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %14microsoft · windows 10 150713 Ağu 2024
- CVE-2024-3822660Bu hafta
Microsoft Publisher Security Feature Bypass Vulnerability
YüksekCVSS 7,3KEVSilahlaştırılmışEPSS %3microsoft · office 201910 Eyl 2024
- CVE-2024-3821754Planlayın
Windows Mark of the Web Security Feature Bypass Vulnerability
OrtaCVSS 5,4KEVSilahlaştırılmışEPSS %10microsoft · windows 10 150710 Eyl 2024
- CVE-2024-3414453Planlayın
A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows
KritikCVSS 9,8Kavram kanıtıEPSS %48jenkins · script security2 May 2024
- CVE-2026-3220248Planlayın
Windows Shell Spoofing Vulnerability
OrtaCVSS 4,3KEVSilahlaştırılmışEPSS %5microsoft · windows 10 160714 Nis 2026
- CVE-2025-6866843Planlayın
n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node
KritikCVSS 9,9İstismar yokEPSS %13n8n · n8n26 Ara 2025
- CVE-2022-3284542Planlayın
This issue was addressed with improved checks.
KritikCVSS 10,0İstismar yokEPSS %5apple · ipados23 Eyl 2022
- CVE-2017-319741Planlayın
GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protection
KritikCVSS 9,8İstismar yokEPSS %6gigabyte · gb-bsi7h-6500 firmware9 Tem 2018
- CVE-2022-3597841Planlayın
Lua sandbox escape from mod in Minetest
KritikCVSS 10,0Kavram kanıtıEPSS %3minetest · minetest15 Ağu 2022
- CVE-2021-3283540Planlayın
Groovy Sandbox escape in Eclipse Keti
KritikCVSS 9,9İstismar yokEPSS %5eclipse · keti8 Eyl 2021
- CVE-2018-931840Planlayın
The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a r
KritikCVSS 9,8İstismar yokEPSS %4bmw · telematics control unit firmware31 May 2018
- CVE-2018-931140Planlayın
The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a r
KritikCVSS 9,8İstismar yokEPSS %4bmw · telematics control unit firmware31 May 2018
- CVE-2020-1088740Planlayın
This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers.
KritikCVSS 9,8İstismar yokEPSS %4tp-link · ac1750 firmware25 Mar 2020
- CVE-2022-3147940Planlayın
Remote Code Execution via command injection of the hostname
KritikCVSS 9,8İstismar yokEPSS %2hidglobal · lp1501 firmware6 Haz 2022
- CVE-2017-886440Planlayın
Client-side enforcement using JavaScript of server-side security options on the Cohu 3960HD allows an attacker to manipulate options sent to
KritikCVSS 9,8İstismar yokEPSS %2cohuhd · 3960hd firmware22 Kas 2017
- CVE-2019-1032840Planlayın
Jenkins Pipeline Remote Loader Plugin 1.4 and earlier provided a custom whitelist for script security that allowed attackers to invoke arbit
KritikCVSS 9,9İstismar yokEPSS %2jenkins · pipeline remote loader31 May 2019