CWE-668: Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- talelin lin-cms-spring-bootHardcoded JWT Token in Lin CMS Spring Boot7.5 High
- wavlink wl-wn530hg4 firmwareAn access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain...7.5 High
- pexip infinityPexip Infinity 27.x before 27.2 has Improper Access Control. An attacker can sometimes join a...5.3 Medium
- montala resourcespaceIn Montala ResourceSpace through 9.8 before r19636, csv_export_results_metadata.php allows...6.5 Medium
- red hat undertow, netapp cloud secure agent, oncommand insight +3 more +5 moreUndertow vulnerable to Denial of Service (DoS) attacks7.5 High
- mattermostGuest accounts can list all public channels4.3 Medium
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of...5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +21 more +23 moreWindows Hyper-V Information Disclosure Vulnerability5.7 Medium
- microsoft azure storage blobs client library for .net, azure storage blobs client library for java, azure storage blobs client library for python +4 more +6 moreAzure Storage Library Information Disclosure Vulnerability4.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +13 more +15 moreWindows BitLocker Information Disclosure Vulnerability5.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +21 more +23 moreWindows Hyper-V Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +13 more +15 moreWindows Network File System Information Disclosure Vulnerability5.9 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Kernel Information Disclosure Vulnerability4.7 Medium
- sap business oneUnder special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker...7.5 High
- amd processors, a10-9600p firmware, a10-9630p firmware +124 more +126 moreAliases in the branch predictor may cause some AMD processors to predict the wrong branch type...6.5 Medium
- siemens sicam gridedge (classic), sicam gridedge essential arm, sicam gridedge essential gds arm +2 more +4 moreA vulnerability has been identified in SICAM GridEdge Essential ARM (All versions), SICAM...5.3 Medium
- debian linux, fedoraproject fedora, intel core i3-6100 firmware +127 more +129 moreArbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)5.6 Medium
- huawei emui, harmonyos, magic ui +2 moreVulnerability of pointers being incorrectly used during data transmission in the video framework....7.5 High
- google android, samsung mobile devices +1 moreExposure of Sensitive Information in putDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1...2.0 Low
- google android, samsung mobile devices +1 moreExposure of Sensitive Information in getDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1...2.0 Low
- google android, samsung mobile devices +1 moreExposure of Sensitive Information in Telecom application prior to SMR Jul-2022 Release 1 allows...3.3 Low
- google android, samsung mobile devices +1 moreExposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows...4.0 Medium
- google android, samsung mobile devices +1 moreExposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local...4.0 Medium
- google android, samsung mobile devices +1 moreExposure of Sensitive Information in Messaging application prior to SMR Jul-2022 Release 1 allows...4.0 Medium
- google android, samsung mobile devices +1 moreImproper access control vulnerability in sendDHCPACKBroadcast function of SemWifiApClient prior...3.3 Low
- google android, samsung mobile devices +1 moreImproper access control vulnerability in sendDHCPACKBroadcast function of SemWifiApClient prior...3.3 Low
- google android, samsung mobile devices +1 moreImproper access control vulnerability in updateLastConnectedClientInfo function of...3.3 Low
- portswigger burp suiteA URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted...4.3 Medium
- iobit advanced system careIn IOBit Advanced System Care (AscService.exe) 15, an attacker with SEImpersonatePrivilege can...7.8 High
- jfrog artifactoryJFrog Artifactory prior to version 7.31.10 and 6.23.38 is vulnerable to Sensitive Data Exposure...4.9 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreBrowse restriction bypass vulnerability in Bulletin of Cybozu Garoon allows a remote...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreAddress information disclosure vulnerability in Cybozu Garoon 4.2.0 to 5.5.1 allows a remote...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreImproper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a...5.3 Medium
- gitlabIncorrect authorization in GitLab EE affecting all versions from 10.7 prior to 14.10.5, 15.0...6.5 Medium
- redhat openshiftIn a openshift node, there is a cron job to update mcollective facts that mishandles a temporary...9.1 Critical
- ibm spectrum protect operations centerIBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14 could allow a remote attacker to...3.7 Low
- ibm jazz team serverIBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to...3.7 Low
- ibm jazz team serverIBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 allows web pages to be stored locally...4.0 Medium
- ibm jazz team serverIBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to...3.7 Low
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a low level user to obtain sensitive...4.3 Medium
- schneider electric geo scada mobileA CWE-668 Exposure of Resource to Wrong Sphere vulnerability exists that could cause users to be...4.8 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53...6.5 Medium
- ibm robotic process automationIBM Robotic Process Automation 21.0.2 could allow a local user to obtain sensitive web service...5.1 Medium
- ibm robotic process automationIBM Robotic Process Automation 20.10.0, 20.12.5, 21.0.0, 21.0.1, and 21.0.2 contains a...2.7 Low
- broadcom ca automic automationCA Automic Automation 12.2 and 12.3 contain an insecure file creation and handling vulnerability...8.8 High
- broadcom ca automic automationCA Automic Automation 12.2 and 12.3 contain an insecure memory handling vulnerability in the...7.5 High
- yandex browserLocal privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.801 allows a local,...7.8 High
- couchbase serverAn issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked...9.1 Critical
- fast food ordering system project food ordering systemFast Food Ordering System v1.0 is vulnerable to Delete any file. via /ffos/classes/Master.php?f...9.1 Critical
- wavlink wn579x3 firmwareA vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN579 X3 M79X3.V5030.180719 allows...7.5 High
- Show moreLoading…