CWE-668: Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft system center operations manager (scom) 2016, system center operations manager (scom) 2019, system center operations manager (scom) 2022 +1 more +3 moreOpen Management Infrastructure Information Disclosure Vulnerability6.5 Medium
- moodle h5p, moodle, fedoraproject extra packages for enterprise linux +1 more +3 moreMoodle: auto-populated h5p author name causes a potential information leak3.3 Low
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: students can view other users in "only see own membership" groups3.3 Low
- samsung accountUse of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung...5.5 Medium
- samsung accountUse of implicit intent for sensitive communication vulnerability in startNameValidationActivity...5.5 Medium
- samsung accountUse of implicit intent for sensitive communication vulnerability in startEmailValidationActivity...5.5 Medium
- samsung accountUse of implicit intent for sensitive communication vulnerability in...5.5 Medium
- red hat 3scale api management platform 2, redhat 3scale api management +1 more3scale-admin-portal: logged out users tokens can be accessed5.5 Medium
- moxa pt-g503 series, eds-g503 firmware +1 moreSession cookies attribute not set properly3.1 Low
- redhat insights-client, red hat enterprise linux 6, enterprise linux 7 +29 more +31 moreInsights-client: unsafe handling of temporary files and directories7.8 High
- hitachi energy mach system software, hitachienergy modular advanced control for hvdc +1 moreAuthenticated clients can read arbitrary files on the MAIN Computer system using the remote...2.7 Low
- univention corporate serverAn issue in Univention UCS v.5.0 allows a local attacker to execute arbitrary code and gain...7.9 High
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-oldcore may leak data through deleted and re-created documents6.5 Medium
- redis, debian linux, fedoraproject fedora +2 moreRedis Unix-domain socket may have be exposed with the wrong permissions for a short time window.3.6 Low
- wipotec comscaleAn issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers...9.8 Critical
- archerirm archerArcher Platform 6.x before 6.13 P2 HF2 (6.13.0.2.2) contains a sensitive information disclosure...4.3 Medium
- mantisbtDisclosure of project names to unauthorized users in MantisBT4.3 Medium
- awsm wp job openingsWP Job Openings < 3.4.3 - Sensitive Data Exposure via Directory Listing5.3 Medium
- ibm security verify governanceIBM Security Verify Governance information disclosure2.3 Low
- apache airflowApache Airflow: Improper access control to DAG resources6.5 Medium
- softether vpnAn information disclosure vulnerability exists in the CtEnumCa() functionality of SoftEther VPN 4...5.5 Medium
- huawei emui, harmonyos +1 moreBroadcast permission control vulnerability in the Bluetooth module.Successful exploitation of...5.3 Medium
- huawei harmonyosThe Bluetooth module has a vulnerability in permission control for broadcast notifications...7.5 High
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 moreMicrosoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +19 more +21 moreRemote Procedure Call Information Disclosure Vulnerability7.5 High
- sangfor next-gen application firewall, net-gen application firewall +1 moreSangfor Next-Gen Application Firewall Source Code Disclosure5.3 Medium
- google android, lg electronics v60 thin q 5g(lmv600vm) +1 moreScreen recording - Theft of arbitrary files with system privilege6.1 Medium
- google android, lg electronics v60 thin q 5g(lmv600vm) +1 moreLockScreenSettings - Theft arbitrary files with system privilege6.1 Medium
- plesk onyx** DISPUTED ** Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to...7.5 High
- falktx cadenceCadence through 0.9.2 2023-08-21 uses an Insecure /tmp/cadence-wineasio.reg Temporary File. The...7.5 High
- falktx cadenceCadence through 0.9.2 2023-08-21 uses an Insecure /tmp/.cadence-aloop-daemon.x Temporary File....5.5 Medium
- nvidia geforce now, geforce now for android mobile and tv app +1 moreNVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a...4.2 Medium
- bladex springbladeSpringBlade <=V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in...5.3 Medium
- the b members card project b members cardAn information leak in THE_B_members card v13.6.1 allows attackers to obtain the channel access...6.5 Medium
- coffee-jumbo project coffee-jumboAn information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token...6.5 Medium
- youmart-tokunaga project youmart-tokunagaAn information leak in youmart-tokunaga v13.6.1 allows attackers to obtain the channel access...6.5 Medium
- tonton-tei waiting project waitingAn information leak in TonTon-Tei_waiting Line v13.6.1 allows attackers to obtain the channel...6.5 Medium
- ykc tokushima awayokochoAn information leak in YKC Tokushima_awayokocho Line v13.6.1 allows attackers to obtain the...6.5 Medium
- cheese cafe line project cafe lineAn information leak in Cheese Cafe Line v13.6.1 allows attackers to obtain the channel access...6.5 Medium
- camp style project line project style project lineAn information leak in Camp Style Project Line v13.6.1 allows attackers to obtain the channel...6.5 Medium
- cisco jabberA vulnerability in the Extensible Messaging and Presence Protocol (XMPP) message processing...4.3 Medium
- siemens simatic pcs neo (administration console) v4.0, simatic pcs neo (administration console) v4.0 update 1, simatic pcs neo +2 moreA vulnerability has been identified in SIMATIC PCS neo (Administration Console) V4.0 (All...5.5 Medium
- microsoft word, 365 apps, 365 apps for enterprise +6 more +8 moreMicrosoft Word Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows TCP/IP Information Disclosure Vulnerability5.5 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreDHCP Server Service Information Disclosure Vulnerability5.3 Medium
- ibm aspera faspexIBM Aspera Faspex improper access control5.8 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure due to excessive collection of system information. The following...6.1 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreExcessive attack surface due to binding to an unrestricted IP address. The following products are...4.3 Medium
- techview la-5570 wireless gateway, jaycar la5570 firmware +1 moreAn issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T53, allows physical...6.8 Medium
- moxa iologik 4000 series, iologik e4200 firmware +1 moreioLogik 4000 Series: Server Banner Information Disclosure5.3 Medium
- Show moreLoading…