CWE-668: Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 morenet: fix information leakage in /proc/net/ptype7.1 High
- ibm maximo application suite, maximo asset management +1 moreIBM Maximo Application Suite information disclosure3.3 Low
- schneider electric evlink home smart, schneider-electric evlink home firmware +1 moreCWE-668: Exposure of the Resource Wrong Sphere vulnerability exists that exposes a SSH interface...6.5 Medium
- kubernetes cri-o, red hat enterprise linux 8, enterprise linux 9 +8 more +10 moreCri-o: malicious container can create symlink on host8.1 High
- codesys control win (sl), development system v3, edge gateway for windows +6 more +8 moreCODESYS: Development system prone to DoS through exposure of resource to wrong sphere7.8 High
- linux, linux kernel +1 moreBluetooth: qca: fix info leak when fetching board id7.1 High
- linux, linux kernel +1 moreBluetooth: qca: fix info leak when fetching fw build id8.1 High
- linux, linux kernel +1 moretipc: fix kernel warning when sending SYN message5.5 Medium
- linux, linux kernel +1 moreipack: ipoctal: fix stack information leak7.1 High
- intel dtt softwareExposure of resource to wrong sphere in some Intel(R) DTT software installers may allow an...7.9 High
- wolfi-dev wolfictlwolfictl leaks GitHub tokens to remote non-GitHub git servers4.4 Medium
- softing secure integration serverSofting Secure Integration Server Exposure of Resource to Wrong Sphere Remote Code Execution Vulnerability6.6 Medium
- hanwha vision co., ltd. hrx-1620, hanwhavision arn-3250, hrx-1621 +15 more +17 moreusing a inappropriate encryption logic7.4 High
- mobyMoby IPv6 enabled on IPv4-only network interfaces4.7 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX 300 Series: Specific link local traffic causes a control plane overload7.1 High
- diracgrid diracDIRAC: Unauthorized users can read proxy contents during generation8.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +10 more +12 morePcp: exposure of the redis server backend allows remote command execution via pmproxy8.8 High
- vantage6 vantage6-uiSecurity headers not set in vantage6-UI5.4 Medium
- fortra filecatalyst, filecatalyst workflow +1 moreRemote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 1149.8 Critical
- apache airflowApache Airflow: Dag Code and Import Error Permissions Ignored5.9 Medium
- linux, linux kernel +1 moremm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_target_ids_write()'5.5 Medium
- linux, linux kernel +1 morebinder: fix async_free_space accounting for empty parcels5.5 Medium
- linux, linux kernel +1 morefs/mount_setattr: always cleanup mount_kattr5.5 Medium
- linux, linux kernel +1 morelocking/qrwlock: Fix ordering in queued_write_lock_slowpath()7.8 High
- linux, linux kernel +1 moredmaengine: idxd: fix wq cleanup of WQCFG registers5.5 Medium
- linux, linux kernel +1 moreHID: usbhid: fix info leak in hid_submit_ctrl5.5 Medium
- amitzy molongui authorship, molongui authorship – author boxes, guest authors & co-authors for wordpress +1 moreAuthor Box, Guest Author and Co-Authors for Your Posts – Molongui <= 4.7.4 - Information Exposure via ma_debug5.3 Medium
- ibm powerscIBM PowerSC information disclosure3.7 Low
- linuxfoundation runc, fedoraproject fedora, red hat ocp-tools-4.15-rhel-8 +26 more +28 morerunc container breakout through process.cwd trickery and leaked fds8.6 High
- unknown wp staging wordpress backup plugin, wp-staging wp staging +1 moreWP STAGING WordPress Backup Plugin < 3.2.0 - Unauthorized Sensitive Data Exposure7.5 High
- gitlabMissing Authorization in GitLab6.6 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: In an AF scenario traffic can bypass configured lo0 firewall filters5.3 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreKernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft Local Security Authority Subsystem Service Information Disclosure Vulnerability5.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +19 more +21 moreWindows CoreMessaging Information Disclosure Vulnerability5.5 Medium
- apache airflowApache Airflow: Improper access control to DAG resources4.3 Medium
- ubuntu budgie budgie extrasbudgie-extras vulnerabilities6.0 Medium
- ubuntu budgie budgie extrasbudgie-extras vulnerabilities6.0 Medium
- ubuntu budgie budgie extrasbudgie-extras vulnerabilities6.0 Medium
- ubuntu budgie budgie extrasbudgie-extras vulnerabilities6.0 Medium
- ubuntu budgie budgie extrasbudgie-extras vulnerabilities6.0 Medium
- ubuntu budgie budgie extrasbudgie-extras vulnerabilities6.0 Medium
- enterprisedb postgres advanced serverAn issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x...6.5 Medium
- senec storage box v1, enbw senec storage box firmware, senec storage box v2 +1 more +3 moreSENEC Storage Box V1,V2 and V3 accidentially expose a management interface7.2 High
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn dialer, there is a possible way to write permission usage records of an app due to a missing...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn telephony service, there is a possible missing permission check. This could lead to remote...7.5 High
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn telephony service, there is a possible missing permission check. This could lead to remote...7.5 High
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn telephony service, there is a possible missing permission check. This could lead to local...5.5 Medium
- artica pandora fms, pandora fms fms +1 moreDatabase backups availability by low-privileged users6.8 Medium
- microsoft powershell, powershell 7.2, powershell 7.3 +1 more +3 morePowerShell Information Disclosure Vulnerability6.5 Medium
- Show moreLoading…