Violation of Secure Design Principles
CWE-657
The product violates well-established principles for secure design.
We track 9 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.3.
Latest Violation of Secure Design Principles vulnerabilities
- 8.6 High severity
Audition: Violation of Secure Design Principles
Audition is affected by a Violation of Secure Design Principles vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue r
- 8.8 High severity
Audition: Violation of Secure Design Principles
Audition is affected by a Violation of Secure Design Principles vulnerability that could result in privilege escalation. A low-privileged attacker could leverage this vulnerability to gain elevated access. Exploitation of this issue does not require user inter
- 8.6 High severity
After Effects: Violation of Secure Design Principles
After Effects is affected by a Violation of Secure Design Principles vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this is
- 7.5 High severity
Adobe Campaign Classic: Violation of Secure Design Principles
Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Explo
- 9.9 Critical severity
praisonaiagents: Violation of Secure Design Principles
PraisonAI is a multi-agent teams system. Prior to 1.5.115, execute_code() in praisonaiagents.tools.python_tools defaults to sandbox_mode="sandbox", which runs user code in a subprocess wrapped with a restricted __builtins__ dict and an AST-based blocklist. The
- 7.5 High severity
HarmonyOS: Insertion of Sensitive Information into Log File
Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 8.1 High severity
opencti: Improper Access Control
OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functionality, an authenticated attacker with low privileges can gain ad
- 7.5 High severity
HarmonyOS: Violation of Secure Design Principles
Vulnerability of defects introduced in the design process in the hwnff module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.8 High severity
Acrobat Reader: Violation of Secure Design Principles
Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Violation of Secure Design Principles vulnerability that could result in arbitrary code execution in the context of the current user by bypassing the API