CWE-610: Externally Controlled Reference to a Resource in Another Sphere
The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- asus armoury crateASUS Armoury Crate - Arbitrary File Write9.8 Critical
- wwbn avideoAn information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image...6.5 Medium
- wwbn avideoAn information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image...6.5 Medium
- wwbn avideoAn information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image...6.5 Medium
- h2o, h2oai h2oai/h2o-3 +1 moreExternal Control of File Name or Path in h2oai/h2o-39.3 Critical
- oretnom23 simple student attendance systemSourceCodester Simple Student Attendance System index.php file inclusion5.5 Medium
- google androidIn visitUris of Notification.java, there is a possible way to display images from another user...5.5 Medium
- mitsubishi electric melsoft iq appportal, motion control setting, mitsubishi electric corporation gx works3 +1 more +3 moreMalicious Code Execution Vulnerability due to External Control of File Name or Path in multiple...7.8 High
- foxit reader, foxitsoftware foxit reader +1 moreA code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356....8.8 High
- foxit reader, foxitsoftware foxit reader +1 moreAn arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit...8.8 High
- foxit reader, foxitsoftware foxit reader +1 moreAn arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit...8.8 High
- aveva application server, batch management, communication drivers pack +19 more +21 moreAVEVA Operations Control Logger External Control of File Name or Path5.5 Medium
- google androidIn FillUi of FillUi.java, there is a possible way to view another user's images due to a confused...5.5 Medium
- wago compact controller cc100, compact controller 100 firmware, edge controller +11 more +13 moreWAGO: Multiple products vulnerable to local file inclusion2.7 Low
- acronis cyber protect 17, cyber protect cloud agent, agent +2 moreLocal privilege escalation due to improper soft link handling. The following products are...5.6 Medium
- open automation software oas platformA file write vulnerability exists in the OAS Engine configuration functionality of Open...6.5 Medium
- instantsoft instantsoft/icms2, instantcms +1 moreExternal Control of System or Configuration Setting in instantsoft/icms28.8 High
- acronis cyber protect home office, true image oem +1 moreLocal privilege escalation during installation due to improper soft link handling. The following...7.3 High
- acronis cyber protect home officeLocal privilege escalation during recovery due to improper soft link handling. The following...6.7 Medium
- phoenix contact wp 6070-wvps, wp 6101-wxps, wp 6121-wxps +9 more +11 morePHOENIX CONTACT: Unauthorized read-access of root filesystem in WP 6xxx Web panels4.3 Medium
- phoenix contact wp 6070-wvps, wp 6101-wxps, wp 6121-wxps +9 more +11 morePHOENIX CONTACT: Unauthorized read-access of root filesystem in WP 6xxx Web panels4.3 Medium
- wireguardThe WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall...5.7 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Read System Files and Resources During Configuration Commit5.5 Medium
- advantech r-seenetAdvantech R-SeeNet External Control of File Name or Path8.8 High
- federicoiosue omni-notes, omninotes omni notes +1 moreUncontrolled data used in content resolution6.3 Medium
- in-totoin-toto vulnerable to Configuration Read From Local Directory5.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface4.4 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: tinymce loaders susceptible to arbitrary folder creation6.5 Medium
- oretnom23 student study center desk management system, student study center desk management system project study center desk management system +1 moreSourceCodester Student Study Center Desk Management System index.php file inclusion5.3 Medium
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5. The Save State register...7.8 High
- google androidIn toUriInner of Intent.java, there is a possible way to launch an arbitrary activity due to a...7.8 High
- google androidIn multiple functions of MediaSessionRecord.java, there is a possible Intent rebroadcast due to a...7.8 High
- fortinet fortinacA external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5,...9.8 Critical
- palo alto networks cortex xsoar, fedoraproject fedora +1 moreCortex XSOAR: Local File Disclosure Vulnerability in the Cortex XSOAR Server6.5 Medium
- debian linux, linux kernel, netapp active iq unified manager +5 more +7 moreIncorrect indirect branch prediction barrier in the Linux Kernel4.7 Medium
- siemens automation license manager v5, automation license manager v6, automation license manager +1 more +3 moreA vulnerability has been identified in Automation License Manager V5 (All versions), Automation...8.2 High
- soshtolsus wing-tightsoshtolsus wing-tight index.php file inclusion6.3 Medium
- nvidia cloud gaming, vgpu software (guest driver) - windows, nvidia cloud gaming (guest driver), virtual gpu +2 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an...8.8 High
- 3d city database ogc web feature service3D City Database OGC Web Feature Service xml external entity reference5.5 Medium
- iliasILIAS before 7.16 allows External Control of File Name or Path.6.5 Medium
- google androidIn Multiple Locations, there is a possibility to launch arbitrary protected activities due to a...7.8 High
- google androidIn onPreferenceClick of AccountTypePreferenceLoader.java, there is a possible way to retrieve...5.5 Medium
- google androidIn multiple locations of NfcService.java, there is a possible disclosure of NFC tags due to a...5.5 Medium
- siemens syngo dynamics, syngo dynamics cardiovascular imaging and information system +1 moreA vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics...7.5 High
- siemens syngo dynamics, syngo dynamics cardiovascular imaging and information system +1 moreA vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics...7.5 High
- siemens syngo dynamics, syngo dynamics cardiovascular imaging and information system +1 moreA vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics...7.5 High
- siemens syngo dynamics, syngo dynamics cardiovascular imaging and information system +1 moreA vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics...7.5 High
- siemens syngo dynamics, syngo dynamics cardiovascular imaging and information system +1 moreA vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics...7.5 High
- acronis cyber protect home officeLocal privilege escalation due to improper soft link handling. The following products are...2.2 Low
- jenkins compuware topaz for total test, jenkins project compuware topaz for total test plugin +1 moreAgent-to-controller security bypass vulnerabilities in Jenkins Compuware Topaz for Total Test Plugin5.3 Medium
- Show moreLoading…