CWE-668: Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- anthropic claude code, anthropics claude-code +1 moreClaude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json7.7 High
- n8nn8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner7.7 High
- openclawOpenClaw/Clawdbot has 1-Click RCE via Authentication Token Exfiltration From gatewayUrl8.8 High
- honoHono has an Arbitrary Key Read in Serve static Middleware (Cloudflare Workers Adapter)6.3 Medium
- vb-audio software matrix, matrix coconut +1 moreVB-Audio Matrix Drivers Local Privilege Escalation via Kernel Memory Exposure8.5 High
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - GPU Register value contents leaked from secure workloads to non-secure world9.1 Critical
- ksenia security s.p.a. lares, kseniasecurity lares firmware +1 moreKsenia Security lares Home Automation 1.6 PIN Exposure Vulnerability9.3 Critical
- agnoAgno session state overwrites between different sessions/users7.1 High
- honeywell s35 thermal camera, s35 3m/5m/8m/pinhole/kit camera, s35 ai fisheye&dual sensor/micro dome/full color eyeball&bullet camera +2 moreInadequate access control measure allows unauthorized users to access restricted administrative functions6.8 Medium
- dlink dir-868l firmwareD-Link DIR-868L B1 router firmware version FW2.05WWB02 contains an unauthenticated OS command...9.8 Critical
- debian linux, linux kernel, siemens simatic cn 4100 +2 morearm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()7.8 High
- docker desktopDocker Desktop allows unauthenticated access to Docker Engine API from containers9.3 Critical
- linux, linux kernel +1 moredrm/imagination: Fix kernel crash when hard resetting the GPU7.1 High
- tyler technologies erp pro 9 saas, tylertech erp pro 9 +1 moreTyler Technologies ERP Pro 9 SaaS application escape5.3 Medium
- bytecodealliance webassembly micro runtime, wasm-micro-runtime +1 moreWebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified6.9 Medium
- ob oceanbase serverIn OceanBase's Oracle tenant mode, a malicious user with specific privileges can achieve...6.3 Medium
- tinasoft easycafe serverEasyCafe Server 2.2.14 Remote File Disclosure via Opcode 0x438.8 High
- schneider electric ecostruxure power monitoring expert (pme), ecostruxure power operation (epo) advanced reporting and dashboards module, ecostruxure™ power monitoring expert +1 more +3 moreCWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram...5.3 Medium
- one identity onelogin active directory connector (adc)OneLogin AD Connector Log S3 Bucket Hijack Leading to Cross-Tenant Data Leakage9.0 Critical
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - Guest VM can override its own FW VZ connection state after the FW has close it5.2 Medium
- quarkusio quarkusQuarkus potential data leak when duplicating a duplicated context6.4 Medium
- linux, linux kernel +1 moreriscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL5.5 Medium
- imanage work desktop for macCommand Injection in iManage Work Desktop for Mac's Agent Service9.3 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki allows unregistered users to see "public" messages from a closed wiki via notifications from a different wiki4.7 Medium
- linux, linux kernel +1 moreriscv: fgraph: Fix stack layout to match __arch_ftrace_regs argument of ftrace_return_to_handler7.8 High
- jupyterhub jupyter-remote-desktop-proxyJupyter Remote Desktop Proxy makes TigerVNC accessible via the network and not just via a UNIX socket as intended9.0 Critical
- mozilla firefoxIncorrect handle could lead to sandbox escapes10.0 Critical
- linux, linux kernel +1 moremedia: i2c: max9286: fix kernel oops when removing module7.1 High
- meshtastic firmwareForged packets over MQTT can show up in direct messages in Meshtastic firmware5.3 Medium
- apache cassandraApache Cassandra: unrestricted deserialization of JMX authentication credentials5.3 Medium
- red hat openshift gitops 1.14, openshift gitops 1.15, openshift gitops 1.16 +2 moreOpenshift-gitops-operator-container: namespace isolation break8.2 High
- jupyter nbgrader`frame-ancestors: self` grants all users access to formgrader in nbgrader6.9 Medium
- linux, linux kernel +1 mores390/entry: Mark IRQ entries to fix stack depot warnings7.1 High
- dell nativeedge, nativeedge orchestrator +1 moreDell NativeEdge, version(s) 2.1.0.0, contain(s) a Creation of Temporary File With Insecure...6.5 Medium
- arm cortex-a710, cortex-a77, cortex-a78 +29 more +31 moreUse of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on A77, A78, A78C,...9.8 Critical
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - PowerVR: PVRSRVAcquireProcessHandleBase can cause psProcessHandleBase reuse when PIDs are reused8.4 High
- intel 4th generation intel xeon processor scalable family, 5th generation intel xeon processor scalable family +1 moreExposure of resource to wrong sphere in some Intel(R) processors with Intel(R) ACTM may allow a...8.5 High
- twigphp twigUnguarded calls to __toString() when nesting an object into an array in Twig2.2 Low
- twigphp twigUnguarded calls to __isset() and to array-accesses when the sandbox is enabled in Twig2.2 Low
- linux, linux kernel +1 moreHID: intel-ish-hid: Fix kernel panic during warm reset7.1 High
- linux, linux kernel +1 morewifi: ath12k: change DMA direction while mapping reinjected packets8.8 High
- apache helix, apache software foundation helix front (ui), helix front\/ui\/ +2 moreApache Helix Front (UI): Helix front hard-coded secret in the express-session7.5 High
- biscuit-auth biscuitPublic key confusion in third party block in Biscuit3.0 Low
- biscuit-auth biscuit-rust, biscuitsec biscuit-auth +1 morebiscuit-rust vulnerable to public key confusion in third party block3.0 Low
- pytorch serve, torchserve +1 moreTorchServe gRPC Port Exposure8.2 High
- apache http serverApache HTTP Server: source code disclosure with handlers configured via AddType5.3 Medium
- linux, linux kernel +1 morevmci: prevent speculation leaks by sanitizing event in event_deliver()7.1 High
- juniper junos os evolvedJunos OS Evolved: Receipt of arbitrary data when sampling service is enabled, leads to partial Denial of Service (DoS).6.9 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +29 more +31 moreWindows MSHTML Platform Spoofing Vulnerability7.5 High
- cocoapods, cocoapods trunk.cocoapods.org +1 moreTrunk's 'Claim your pod' could be used to obtain un-used pods9.3 Critical
- Show moreLoading…