Vulnerabilities > Protection Mechanism Failure

DATE CVE VULNERABILITY TITLE RISK
2017-11-22 CVE-2017-8864 Protection Mechanism Failure vulnerability in Cohuhd 3960Hd Firmware
Client-side enforcement using JavaScript of server-side security options on the Cohu 3960HD allows an attacker to manipulate options sent to the camera and cause malfunction or code execution, as demonstrated by a client-side "if (!passwordsAreEqual())" test.
network
low complexity
cohuhd CWE-693
critical
 9.8
9.8
2016-09-02 CVE-2016-0772 Protection Mechanism Failure vulnerability in Python
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
network
high complexity
python CWE-693
6.5
6.5