CWE-668: Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- wavlink wn535g3 firmwareA vulnerability in live_mfg.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to...7.5 High
- wavlink wn535g3 firmwareA vulnerability in live_check.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to...7.5 High
- wavlink aerial x 1200m firmwareA vulnerability in live_check.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers...7.5 High
- wavlink aerial x 1200m firmwareA vulnerability in live_mfg.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.191012 allows attackers...7.5 High
- qualcomm, inc. snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, qca9984 firmware +26 more +28 moreRPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon...6.5 Medium
- qualcomm, inc. snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, qca9984 firmware +26 more +28 moreRPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon...6.5 Medium
- electronExposure of Resource to Wrong Sphere in Electron2.2 Low
- owncloudownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or...7.5 High
- toaruosToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management...8.8 High
- samsung mobile smart things, samsung smartthings +1 moreMissing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access...7.5 High
- samsung accountSensitive information exposure in Sign-out log in Samsung Account prior to version 13.2.00.6...4.0 Medium
- samsung accountExposure of Sensitive Information vulnerability in Samsung Account prior to version 13.2.00.6...5.5 Medium
- google android, samsung mobile devices +1 moreInformation exposure vulnerability in ScanPool prior to SMR Jun-2022 Release 1 allows local...1.9 Low
- google android, samsung mobile devices +1 moreInformation exposure vulnerability in SemIWCMonitor prior to SMR Jun-2022 Release 1 allows local...1.9 Low
- google android, samsung mobile devices +1 moreSensitive information exposure in low-battery dumpstate log prior to SMR Jun-2022 Release 1...2.2 Low
- klapp appKlapp App Authorization Credentials information disclosure4.3 Medium
- dell powerstore, powerstoreos +1 moreDell PowerStore versions 2.0.0.x, 2.0.1.x and 2.1.0.x contains an open port vulnerability. A...9.8 Critical
- google chromeInappropriate implementation in PDF in Google Chrome prior to 102.0.5005.61 allowed a remote...4.3 Medium
- google chromeInsufficient policy enforcement in COOP in Google Chrome prior to 102.0.5005.61 allowed a remote...6.5 Medium
- aveva intouch access anywhere, plant scada access anywhere +1 moreAVEVA InTouch Access Anywhere Exposure of Resource to Wrong Sphere7.4 High
- bdtask multi store inventory management systemMulti Store Inventory Management System v1.0 was discovered to contain an information disclosure...7.5 High
- gitlabMissing input masking in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6,...5.4 Medium
- ibm security identity governance and intelligence, security identity manager +1 moreIBM Security Identity Governance and Intelligence 5.2.4, 5.2.5, and 5.2.6 could allow a remote...5.3 Medium
- universis universis-studentsAn information disclosure vulnerability in UniverSIS-Students before v1.5.0 allows attackers to...6.5 Medium
- totolink a3100r firmwareAn access control issue in TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129...5.3 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information in...5.3 Medium
- hcl sametimeHCL Sametime is vulnerable to arbitrary HTTP requests6.8 Medium
- hcl sametimeHCL Sametime is vulnerable to an information disclosure5.3 Medium
- amd athlon™ series, radeon software, ryzen 3 3100 firmware +33 more +35 moreA malicious or compromised UApp or ABL could potentially change the value that the ASP uses for...4.4 Medium
- amd athlon 3050ge firmware, athlon 3150g firmware, athlon 3150ge firmware +73 more +75 moreFailure to verify the protocol in SMM may allow an attacker to control the protocol and modify...7.8 High
- amd athlon 3050ge firmware, athlon 3150g firmware, athlon 3150ge firmware +35 more +37 moreA malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an...5.5 Medium
- amd athlon 3050ge firmware, athlon 3150g firmware, athlon 3150ge firmware +62 more +64 moreAn attacker, who gained elevated privileges via some other vulnerability, may be able to read...7.1 High
- intel celeron g5205u firmware, celeron g5305u firmware, celeron g5900 firmware +456 more +458 moreSensitive information accessible by physical probing of JTAG interface for some Intel(R)...2.4 Low
- google chromeInappropriate implementation in Web Contents in Google Chrome prior to 101.0.4951.64 allowed a...4.3 Medium
- amd processors, epyc 7001 firmware, epyc 7002 firmware +97 more +99 moreAn attacker with access to a malicious hypervisor may be able to infer data values used in a SEV...6.5 Medium
- fortinet forticlient, forticlientwindows +1 moreA external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below,...8.4 High
- haxx curl, netapp clustered data ontap, h300s firmware +11 more +13 morelibcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided...5.3 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 moreWindows Clustered Shared Volume Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 moreWindows Clustered Shared Volume Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 moreWindows Clustered Shared Volume Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Graphics Component Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 moreWindows Failover Cluster Information Disclosure Vulnerability5.5 Medium
- microsoft remote desktop client for windows desktop, remote desktop client, windows 11 version 21h2 +2 more +4 moreRemote Desktop Protocol Client Information Disclosure Vulnerability6.5 Medium
- microsoft windows server, windows 10 version 1507, windows 10 version 1607 +28 more +30 moreWindows Server Service Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows WLAN AutoConfig Service Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreWindows NTFS Information Disclosure Vulnerability5.5 Medium
- microsoft remote desktop client for windows desktop, remote desktop client, windows 10 version 1507 +26 more +28 moreWindows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreWindows Graphics Component Information Disclosure Vulnerability5.5 Medium
- braveBrave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in...5.3 Medium
- keepkey firmwareIn the KeepKey firmware before 7.3.2, the bootloader can be exploited in unusual situations in...6.6 Medium
- Show moreLoading…