CWE-693 保护机制失效 类弱点 328 条 CVE 漏洞汇总,含 AI 中文分析。
CWE-693指保护机制失效,属于安全控制缺陷。当应用缺失或错误配置防御手段时,攻击者可绕过安全限制,直接执行未授权操作或获取敏感数据。此类漏洞常因忽视特定攻击向量或机制实现不当引发。开发者需全面识别潜在威胁,确保启用并正确配置足够强度的防护机制,定期审查安全策略以消除盲区,从而有效抵御定向攻击。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-12094 | WordPress plugin OOPSpam Anti-Spam 安全漏洞 — OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) | 5.3 | Medium | 2025-10-31 |
| CVE-2025-0277 | HCL BigFix Mobile 安全漏洞 — BigFix Mobile | 6.5 | Medium | 2025-10-16 |
| CVE-2025-0276 | HCL BigFix Modern Client Management 安全漏洞 — BigFix Modern Client Management | 6.5 | Medium | 2025-10-16 |
| CVE-2025-52615 | HCL Unica Platform 安全漏洞 — Unica Platform | 3.5 | Low | 2025-10-12 |
| CVE-2025-10157 | picklescan 安全漏洞 — picklescan | 9.8AI | Critical AI | 2025-09-17 |
| CVE-2025-54917 | Microsoft MapUrlToZone 安全漏洞 — Windows 10 Version 1507 | 4.3 | Medium | 2025-09-09 |
| CVE-2025-20347 | Cisco Nexus Dashboard和Cisco Nexus Dashboard Fabric Controller 安全漏洞 — Cisco Data Center Network Manager | 5.4 | Medium | 2025-08-27 |
| CVE-2025-43728 | Dell ThinOS 10 安全漏洞 — ThinOS 10 | 9.6 | Critical | 2025-08-27 |
| CVE-2025-3770 | EDK2 安全漏洞 — EDK2 | 7.0 | High | 2025-08-07 |
| CVE-2025-8656 | Kenwood DMX958XR 安全漏洞 — DMX958XR | 4.6AI | Medium AI | 2025-08-06 |
| CVE-2025-52951 | Juniper Networks Junos OS 安全漏洞 — Junos OS | 5.8 | Medium | 2025-07-11 |
| CVE-2025-46358 | Emerson ValveLink Products 安全漏洞 — ValveLink SOLO | 7.7 | High | 2025-07-10 |
| CVE-2025-49740 | Microsoft SmartScreen 安全漏洞 — Windows 10 Version 1507 | 8.8 | High | 2025-07-08 |
| CVE-2025-48800 | Microsoft Windows BitLocker 安全漏洞 — Windows 10 Version 1507 | 6.8 | Medium | 2025-07-08 |
| CVE-2025-48003 | Microsoft Windows BitLocker 安全漏洞 — Windows 10 Version 1809 | 6.8 | Medium | 2025-07-08 |
| CVE-2025-47984 | Microsoft Windows GDI+ 安全漏洞 — Windows 10 Version 1507 | 7.5 | High | 2025-07-08 |
| CVE-2025-47159 | Microsoft Windows Virtualization-Based Security Enclave 安全漏洞 — Windows 10 Version 1507 | 7.8 | High | 2025-07-08 |
| CVE-2025-41224 | Siemens多款产品 安全漏洞 — RUGGEDCOM RMC8388 V5.X | 8.8 | High | 2025-07-08 |
| CVE-2025-49193 | SICK Field Analytics和SICK Media Server 安全漏洞 — Field Analytics | 4.2 | Medium | 2025-06-12 |
| CVE-2025-33050 | Microsoft Windows DHCP Server 安全漏洞 — Windows Server 2016 | 7.5 | High | 2025-06-10 |
| CVE-2025-32725 | Microsoft Windows DHCP Server 安全漏洞 — Windows Server 2016 | 7.5 | High | 2025-06-10 |
| CVE-2025-47160 | Microsoft Windows Shell 安全漏洞 — Windows 10 Version 1507 | 5.4 | Medium | 2025-06-10 |
| CVE-2025-46553 | summaly 安全漏洞 — summaly | 6.1AI | Medium AI | 2025-05-05 |
| CVE-2025-26637 | Microsoft Windows BitLocker 安全漏洞 — Windows 10 Version 1507 | 6.8 | Medium | 2025-04-08 |
| CVE-2025-27472 | Microsoft Windows 安全漏洞 — Windows 10 Version 1507 | 5.4 | Medium | 2025-04-08 |
| CVE-2025-21384 | Microsoft Azure Health Bot 安全漏洞 — Azure Health Bot | 8.3 | High | 2025-04-01 |
| CVE-2025-24061 | Microsoft Windows 安全漏洞 — Windows 10 Version 1507 | 7.8 | High | 2025-03-11 |
| CVE-2024-56182 | Siemens SIMATIC 缓冲区错误漏洞 — SIMATIC Field PG M5 | 8.2 | High | 2025-03-11 |
| CVE-2024-56181 | Siemens SIMATIC 缓冲区错误漏洞 — SIMATIC Field PG M5 | 8.2 | High | 2025-03-11 |
| CVE-2024-13794 | WordPress plugin WP Ghost (Hide My WP Ghost) – Security & Firewall 安全漏洞 — WP Ghost (Hide My WP Ghost) – Security & Firewall | 5.3 | Medium | 2025-02-12 |
CWE-693(保护机制失效) 是常见的弱点类别,本平台收录该类弱点关联的 328 条 CVE 漏洞。