CWE-669: Incorrect Resource Transfer Between Spheres
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- twilio-labs netlify-okta-auth @twilio-labs/netlify-okta-auth through 1.0.2 relies on an unverified iss claim. This affects an... 7.2 High
- yealink uvc40 e2 On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can... 6.1 Medium
- bulwarkmail webmail Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in... 6.5 Medium
- openstack cinder In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the... 4.3 Medium
- openwave messaging (ireland) limited webtop media transcoder Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to... 4.3 Medium
- wheels Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key... 8.1 High
- backdropcms backdrop Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a... 7.5 High
- openbsd openssh In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be... 2.2 Low
- openbsd openssh In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a... 2.2 Low
- nvidia virtual gpu manager NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability where an attacker could cause... 7.8 High
- pexip infinity Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation... 7.8 High
- linux, linux kernel +1 more smb/client: fix stale page cache in insert/collapse range 5.5 Medium
- patriksimek vm2 vm2 3.11.4 through 3.11.6 Sandbox Symbol Filtering Bypass 8.9 High
- cisco ise passive identity connector, identity services engine software +1 more Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilities 9.1 Critical
- oraios serena In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0.... 2.9 Low
- mediawiki proofreadpage An issue was discovered in the ProofreadPage extension for MediaWiki through 1.39.3. It leaks... 3.1 Low
- mediawiki checkuser An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. Special... 3.1 Low
- amazon ca-certificates The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2) does not... 7.5 High
- projectfloodlight floodlight Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is... 3.0 Low
- pcre pcre2 In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically... 2.9 Low
- torprject tor Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not sent, which... 6.5 Medium
- gnome libxml2 In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not... 5.6 Medium
- bulwarkmail webmail In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the modoboa driver of the password... 6.4 Medium
- bulwarkmail webmail In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url() in a FuncIRI... 5.8 Medium
- bulwarkmail webmail In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper HTML/CSS sanitization of the... 5.8 Medium
- zimbra collaboration, synacor zimbra collaboration suite +1 more In Zimbra Collaboration before 10.1.17, a local file inclusion (LFI) vulnerability exists in the... 3.1 Low
- openstack designate In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving... 6.8 Medium
- openbsd openssh In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to... 3.5 Low
- arm mbed tls In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts... 3.7 Low
- google chrome Inappropriate implementation in AI in Google Chrome prior to 150.0.7871.47 allowed a remote... 8.3 High
- openstack nova OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints 5.4 Medium
- gen digital avira password manager Avira Password Manager credential disclosure via cross-origin autofill in Firefox 7.4 High
- openstack ironic OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read... 4.9 Medium
- openstack ironic OpenStack Ironic allows Boot Script Injection 5.8 Medium
- bulwarkmail webmail Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary... 3.7 Low
- bulwarkmail webmail In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking... 6.5 Medium
- bulwarkmail webmail In Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16 and 1.7.x before 1.7.1, remote image... 6.5 Medium
- winehq wine Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several... 7.3 High
-
github.com/siderolabs/talosGo Talos Linux has a local privilege escalation from untrusted workloads 7.5 High - torproject tor Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008. 3.7 Low
- openstack ironic, red hat openshift container platform 4, openstack platform 16.2 +2 more +4 more OpenStack Ironic has an Incorrect Resource Transfer Between Spheres 7.7 High
- binsoft mpcrm, mpfaktura, mpfirma +5 more +7 more Remote Code Execution in multiple BinSoft products 4.7 Medium
- kde dolphin KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) to... 6.5 Medium
- amazon linux, linux kernel, arista cloudvision agni +142 more +144 more crypto: algif_aead - Revert to operating out-of-place 7.8 High
- ascensio onlyoffice desktopeditors In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions... 6.2 Medium
- systemd In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary... 2.9 Low
- systemd In udev in systemd before 260, local root execution can occur via malicious hardware devices and... 6.4 Medium
- bulwarkmail webmail Roundcube Webmail: Remote image blocking feature can be bypassed via SVG content in an e-mail message 5.3 Medium
- bulwarkmail webmail Roundcube Webmail: Insufficient CSS sanitization in HTML e-mail messages 5.3 Medium
- bulwarkmail webmail Roundcube Webmail: Bypass of remote image blocking via SVG content (with animate attributes) in an e-mail message 5.3 Medium
- Show olderLoading…