CWE-610: Externally Controlled Reference to a Resource in Another Sphere
The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- doogee bl5000 firmwareThe Doogee BL5000 Android device with a build fingerprint of DOOGEE/BL5000/BL5000:7.0/NRD90M...3.3 Low
- bluboo s1 project blueboo s1 firmwareThe Bluboo Bluboo_S1 Android device with a build fingerprint of BLUBOO/Bluboo_S1/Bluboo_S1:7.0...3.3 Low
- doogee mix firmwareThe Doogee Mix Android device with a build fingerprint of DOOGEE/MIX/MIX:7.0/NRD90M/1495809471...3.3 Low
- blackview bv7000 pro firmwareThe Blackview BV7000_Pro Android device with a build fingerprint of Blackview/BV7000_Pro...3.3 Low
- blackview bv9000pro-f firmwareThe Blackview BV9000Pro-F Android device with a build fingerprint of Blackview/BV9000Pro-F...3.3 Low
- asus x105d firmwareThe Asus ASUS_X015_1 Android device with a build fingerprint of asus/CN_X015/ASUS_X015_1:7.0...7.8 High
- asus pegasus 4 max firmware, pegasus 4a firmware +1 moreThe Asus ASUS_X00K_1 Android device with a build fingerprint of asus/CN_X00K/ASUS_X00K_1:7.0...7.8 High
- mi redmi 5 firmwareThe Xiaomi Redmi 5 Android device with a build fingerprint of xiaomi/vince/vince:7.1.2/N2G47H/V9...3.3 Low
- asus pegasus 4 max firmware, pegasus 4a firmware +1 moreThe Asus ASUS_X00K_1 Android device with a build fingerprint of asus/CN_X00K/ASUS_X00K_1:7.0...7.8 High
- asus zenfone 5 selfie firmwareThe Asus ZenFone 5 Selfie Android device with a build fingerprint of asus/WW_Phone/ASUS_X017D_1:7...7.8 High
- asus zenfone live \(l1\) firmwareThe Asus ZenFone Live Android device with a build fingerprint of asus/WW_Phone/ASUS_X00LD_3:7.1.1...3.3 Low
- sony xperia xzs firmwareThe Sony Xperia Xperia XZs Android device with a build fingerprint of Sony/keyaki_softbank...3.3 Low
- wago pfc firmwareInformation Disclosure is possible on WAGO Series PFC100 and PFC200 devices before FW12 due to...5.8 Medium
- google androidIn AOSP Email, there is a possible information disclosure due to a confused deputy. This could...3.3 Low
- google androidIn the Package Manager service, there is a possible information disclosure due to a confused...3.3 Low
- google androidIn the Activity Manager service, there is a possible information disclosure due to a confused...3.3 Low
- schneider electric modbus serial driver (for 64-bit windows os:v3.17 ie 37 and prior , for 32-bit windows os:v2.17 ie 27 and prior, and as part of the driver suite version:v14.12 and prior), schneider-electric driver suite, modbus serial driver +2 moreAn Externally Controlled Reference to a Resource (CWE-610) vulnerability exists in Schneider...4.9 Medium
- androidIn package installer in Android-8.0, Android-8.1 and Android-9, there is a possible bypass of the...7.8 High
- shopwareShopware XXE Vulnerability6.5 Medium
- mozilla firefox, firefox esr +1 moreManually dragging and dropping an Outlook email message into the browser will trigger a page...5.3 Medium
- safe-eval project safe-eval, hackerone safe-eval node module +1 moreSandbox Breakout in safe-eval10.0 Critical
- psftp psftpdThe PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default. These can be...4.3 Medium
- microsoft windows 10, windows 8.1, windows rt 8.1 +3 more +5 moreAn elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1,...5.5 Medium