Lucene search
+L

2076 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•8 views

CVE-2026-21387: Protection Mechanism Failure

Protection mechanism failure for some IntelR LLM Library for PyTorch within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...

5.4CVSS5.8AI score0.00161EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•7 views

CVE-2026-39452: Protection Mechanism Failure

Protection mechanism failure for some IntelR Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. Thi...

7.3CVSS5.8AI score0.00332EPSS
SaveExploits1References3
GithubExploit
GithubExploit
•added 2026/08/10 2:48 p.m.•46 views

Exploit for Protection Mechanism Failure in Microsoft

cve-id Donate Support the maintenance of this project wit...

8.7CVSS7.7AI score0.04028EPSS
SaveExploits30
Snyk
Snyk
•added 2026/08/06 9:02 p.m.•136 views

Protection Mechanism Failure

Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Protection Mechanism Failure through the SecurityPolicy process. An attacker can execute arbitrary code on the server by rendering a malicious Twig template after authenticating to the contro...

8.8CVSS6.5AI score0.00786EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•8 views

CVE-2024-6832: Protection Mechanism Failure

The account locking mechanism fails to trigger when secondary user stores are inaccessible. The software does not maintain a consistent state for account locking if it cannot reach all configured user stores, allowing an attacker to repeatedly attempt authentication with invalid credentials witho...

7.5CVSS5.9AI score0.00413EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•6 views

CVE-2026-13342: Protection Mechanism Failure

The Security Optimizer WordPress plugin from 1.5.8 to 1.6.4 does not correctly validate requests to its optional IP-based login restriction feature, allowing the restriction to be bypassed so that unauthenticated requests from non-allowlisted IP addresses can reach and use the login form, defeati...

5.3CVSS5.8AI score0.00347EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/05 12:00 a.m.•12 views

CVE-2026-70608: Protection Mechanism Failure

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.3, and 42.0.1, a sandboxed iframe without the allow-popups keyword could still open a new window or trigger setWindowOpenHandler with no user interaction because...

7.2CVSS5.9AI score0.00431EPSS
SaveExploits0References10
Amazon
Amazon
•added 2026/08/04 12:00 a.m.•16 views

Important: dotnet8.0

Issue Overview: Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. CVE-2026-47300 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

9.8CVSS7.6AI score0.04017EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/30 12:00 a.m.•5 views

CVE-2026-17659: Protection Mechanism Failure

Inappropriate implementation in SiteIsolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

4.2CVSS5.7AI score0.00205EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/07/29 5:03 p.m.•10 views

Protection Mechanism Failure

Overview Affected versions of this package are vulnerable to Protection Mechanism Failure due to the use of 0.0.0.0 instead of NXDOMAIN in block responses. An attacker can cause unintended network traffic to be sent to localhost by triggering blocked DNS queries. Remediation Upgrade...

7.4CVSS5.9AI score
SaveExploits0References2
NVD
NVD
•added 2026/07/27 5:16 p.m.•23 views

CVE-2026-66391

Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 through 10.9.0. Users are recommended to upgrade to version 10.10.0, which fixes the issue...

6.5CVSS0.00637EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/27 4:45 p.m.•54 views

CVE-2026-66391 Apache Wicket: leaked and missing CSP headers

Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 through 10.9.0. Users are recommended to upgrade to version 10.10.0, which fixes the issue...

0.00637EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/27 4:45 p.m.•22 views

CVE-2026-66391

Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 through 10.9.0. Users are recommended to upgrade to version 10.10.0, which fixes the issue...

5.8AI score0.00637EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2026/07/27 4:45 p.m.•8 views

CVE-2026-66391

Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 through 10.9.0. Users are recommended to upgrade to version 10.10.0, which fixes the issue...

6.9CVSS5.8AI score0.00637EPSS
SaveExploits0References2
osv-bit
osv-bit
•added 2026/07/27 5:40 a.m.•20 views

BIT-DOTNET-SDK-2026-50646 .NET Framework Remote Code Execution Vulnerability

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...

7.8CVSS7.4AI score0.04017EPSS
SaveExploits0References2
osv-bit
osv-bit
•added 2026/07/27 5:40 a.m.•25 views

BIT-DOTNET-2026-50646 .NET Framework Remote Code Execution Vulnerability

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...

7.8CVSS7.4AI score0.04017EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/27 12:00 a.m.•7 views

CVE-2026-66391: Use of Insufficiently Random Values

Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 through 10.9.0. Users are recommended to upgrade to version 10.10.0, which fixes the issue...

6.5CVSS5.8AI score0.00637EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/27 12:00 a.m.•2 views

CVE-2026-28912: Protection Mechanism Failure

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.7, macOS Tahoe 26.6. A user may be able to elevate privileges...

7.8CVSS5.8AI score0.00173EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/07/27 12:00 a.m.•34 views

PT-2026-65064

Name of the Vulnerable Software and Affected Versions Apache Wicket versions 9.0.0 through 9.23.0 Apache Wicket versions 10.0.0 through 10.9.0 Description Apache Wicket contains a protection mechanism failure resulting from the use of insufficiently random values. Recommendations Upgrade to versi...

6.5CVSS5.7AI score0.00637EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/27 12:00 a.m.•35 views

PT-2026-65027

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...

7.8CVSS7.4AI score0.04017EPSS
SaveExploits0References3
Rows per page
Query Builder