CWE-668: Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows GDI+ Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows GDI Information Disclosure Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows GDI+ Information Disclosure Vulnerability7.5 High
- ibm engineering workflow management, rational team concert +1 moreIBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6...4.3 Medium
- philips engage, engage software +1 moreICSMA-22-006-01 Philips Engage Software2.6 Low
- huawei harmonyosThe distributed data service component has a vulnerability in data access control. Successful...7.5 High
- fastlinemedia beaver builderIn Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection...5.3 Medium
- fastlinemedia beaver themerIn Beaver Themer, attackers can bypass conditional logic controls (for hiding content) when...5.3 Medium
- bookstackapp bookstack, bookstackapp/bookstack +1 moreImproper Access Control in bookstackapp/bookstack4.3 Medium
- apache kylinMysql JDBC Connector Deserialize RCE6.5 Medium
- huawei emui, harmonyos, magic ui +2 moreThere is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this...7.5 High
- huawei harmonyosHisuite module has a External Control of System or Configuration Setting vulnerability.Successful...5.3 Medium
- huawei harmonyosTelephony application has a Exposure of Sensitive Information to an Unauthorized Actor...5.3 Medium
- huawei harmonyosMyHuawei-App has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability...7.5 High
- huawei harmonyosPassword vault has a External Control of System or Configuration Setting vulnerability.Successful...7.5 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, qca6390 firmware +56 more +58 moreImproper access control while doing XPU re-configuration dynamically can lead to unauthorized...9.3 Critical
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm qca6391 firmware, qcm6490 firmware +28 more +30 moreImproper handling of resource allocation in virtual machines can lead to information exposure in...6.5 Medium
- biostar racing gt evoAn issue was discovered in BS_RCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity...7.8 High
- google androidIn gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory...5.5 Medium
- google androidIn StatusBar.java, there is a possible disclosure of notification content on the lockscreen due...3.3 Low
- emuse eservices / envoice, emuse - eservices \/ envoice project - eservices \/ envoice +1 moreEmuse - eServices / eNvoice Exposure Of Private Personal Information6.1 Medium
- jeecgAn arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files...7.5 High
- netgear rbk352 firmware, rbr350 firmware, rbs350 firmware +2 moreCertain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This...8.4 High
- apple ios, macos, tvos +2 more +4 moreThis issue was addressed with a new entitlement. This issue is fixed in macOS Mojave 10.14.6,...5.5 Medium
- sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 moreAn Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted...7.5 High
- lantronix premierwave 2050 firmwareA local file inclusion vulnerability exists in the Web Manager Applications and FsBrowse...4.9 Medium
- zohocorp manageengine pam360Zoho ManageEngine PAM360 before build 5303 allows attackers to modify a few aspects of...9.8 Critical
- zohocorp manageengine access manager plusZoho ManageEngine Access Manager Plus before 4203 allows anyone to view a few data elements (e.g....9.8 Critical
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...5.3 Medium
- atomixMalicious Atomix node queries expose sensitive information6.5 Medium
- wisc htcondorAn issue was discovered in HTCondor before 8.8.15, 9.0.x before 9.0.4, and 9.1.x before 9.1.2....8.1 High
- knime serverKNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the...2.9 Low
- golang go, debian linux +1 moreGo before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file...4.8 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreWindows Encrypting File System (EFS) Elevation of Privilege Vulnerability7.5 High
- microsoft defender for iotMicrosoft Defender for IoT Information Disclosure Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +16 more +18 moreStorage Spaces Controller Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +16 more +18 moreStorage Spaces Controller Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreWindows Common Log File System Driver Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreMicrosoft Message Queuing Information Disclosure Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreMicrosoft Local Security Authority (LSA) Server Information Disclosure Vulnerability6.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2013 service pack 1 +5 more +7 moreVisual Basic for Applications Information Disclosure Vulnerability5.5 Medium
- bopsoft listaryAn issue was discovered in Listary through 6. An attacker can create a \\.\pipe\Listary...7.3 High
- siemens sipass integrated v2.76, sipass integrated v2.80, sipass integrated v2.85 +4 more +6 moreA vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated...9.8 Critical
- siemens sipass integrated v2.76, sipass integrated v2.80, sipass integrated v2.85 +4 more +6 moreA vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated...9.1 Critical
- siemens sipass integrated v2.76, sipass integrated v2.80, sipass integrated v2.85 +4 more +6 moreA vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated...7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote...6.5 Medium
- gitlabImproper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from...5.3 Medium
- dart software development kit, google llc dart sdk +1 moreDart - Publishing to third-party package repositories may expose pub.dev credentials8.8 High
- ibm db2, db2 for linux, unix and windows, netapp oncommand insight +2 moreIBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to...6.5 Medium
- Show moreLoading…