CWE-668: Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using...5.9 Medium
- google android, samsung mobile devices +1 moreAn improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows...4.0 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 Medium
- tp-link archer ax10 firmwareA denial-of-service attack in WPA2, and WPA3-SAE authentication methods in TP-Link AX10v1 before...7.5 High
- esri arcgis enterprise, arcgis server +1 moreAn information disclosure vulnerability5.3 Medium
- johnson controls entrapass, johnsoncontrols kantech entrapass +1 moreEntrapass8.3 High
- kaseya unitrends backupAn issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The apache user could...6.5 Medium
- kaseya unitrends backupAn issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Samba file...6.5 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a Jupyter...5.4 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 could be vulnerable to client side vulnerabilties due to a...5.3 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the application...2.7 Low
- thinkupapp thinkup** UNSUPPORTED WHEN ASSIGNED ** ThinkUp 2.0-beta.10 is affected by a path manipulation...9.8 Critical
- crafter software cms, craftercms crafter cms +1 moreTransmission of Private Resources into a New Sphere ('Resource Leak') and Exposure of Resource to Wrong Sphere in Crafter Search8.1 High
- crafter software cms, craftercms crafter cms +1 moreTransmission of Private Resources into a New Sphere ('Resource Leak') in Crafter Engine5.9 Medium
- google androidIn gadget_dev_desc_UDC_show of configfs.c, there is a possible disclosure of kernel heap memory...4.1 Medium
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-201537251References: N/A7.5 High
- google androidIn requestRouteToHostAddress of ConnectivityService.java, there is a possible way to determine...3.3 Low
- google androidIn hasGrantedPolicy of DevicePolicyManagerService.java, there is a possible information...5.5 Medium
- google androidIn getOrganizationNameForUser of DevicePolicyManagerService.java, there is a possible...3.3 Low
- google androidIn getSerialForPackage of DeviceIdentifiersPolicyService.java, there is a possible way to...3.3 Low
- google androidIn code generated by BuildParcelFields of generate_cpp.cpp, there is a possible way for a crafted...5.5 Medium
- business-dna solutions gmbh topeaseUnauthorized Menu Item Access in TopEase4.3 Medium
- keepalived, fedoraproject fedora +1 moreIn Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message...5.4 Medium
- ubiquiti inc unifi protect application, ui unifi protect +1 moreA Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application Version 1...8.8 High
- zoom controllers for zoom rooms, hybrid mmr, hybrid zproxy +38 more +40 moreProcess memory exposure in Zoom Client and other products5.3 Medium
- wpwave hide my wp, hide my wp (wordpress plugin) +1 moreWordPress Hide My WP premium plugin <= 6.2.3 - Unauthenticated Plugin Deactivation vulnerability6.5 Medium
- bitdefender endpoint security tools for linux, endpoint security tools, gravityzone +1 more +3 moreImproper Access Control vulnerability in the patchesUpdate API9.0 Critical
- microsoft azure active directory, azure automation, azure migrate +2 more +4 moreAzure Active Directory Information Disclosure Vulnerability8.1 High
- google chrome, debian linux +1 moreInsufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a...4.3 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle Insecure direct object reference (IDOR) in a calendar web service5.3 Medium
- open-xchange ox app suiteOX App Suite 7.10.5 allows Information Exposure because a caching mechanism can caused a Modified...4.3 Medium
- open-xchange ox app suiteOX App Suite through 7.10.5 has Incorrect Access Control for retrieval of session information via...5.3 Medium
- dell networking os10Dell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure...3.3 Low
- philips mri 1.5t, mri 3t, mri 1.5t firmware +1 more +3 morePhilips MRI 1.5T and 3T Information Exposure5.9 Medium
- beyondtrust privilege management for windowsBeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory...7.8 High
- apache ozoneUnauthenticated access to Ozone Recon HTTP endpoints5.3 Medium
- apache ozoneMissing authentication/authorization on internal RPC endpoints9.1 Critical
- amd 3rd gen amd epyc™, epyc 7003 firmware, epyc 72f3 firmware +18 more +20 moreInsufficient validation of guest context in the SNP Firmware could lead to a potential loss of...5.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7251 firmware +57 more +59 morePSP protection against improperly configured side channels may lead to potential information...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +144 more +146 morePossible information exposure and denial of service due to NAS not dropping messages when...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreMicrosoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will...6.5 Medium
- height8tech h8 ssrmsInsecure direct object reference (IDOR) vulnerability in ICREM H8 SSRMS allows attackers to...6.5 Medium
- vivo jovi smart sceneBroken Access Control Vulnerability in Jovi Smart Scene5.5 Medium
- microsoft azure real time operating systemAzure RTOS Information Disclosure Vulnerability3.3 Low
- microsoft azure rtos, azure real time operating system +1 moreAzure RTOS Information Disclosure Vulnerability3.3 Low
- jetbrains teamcityIn JetBrains TeamCity before 2021.1, information disclosure via the Docker Registry connection...7.5 High
- ibm qradar network securityIBM QRadar Network Security 5.4.0 and 5.5.0 could allow a remote attacker to obtain sensitive...5.9 Medium
- gitlabIn all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook...3.7 Low
- fortinet fortimanagerAn exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in...5.2 Medium
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-195580473References: N/A7.5 High
- Show moreLoading…