CWE-669: Incorrect Resource Transfer Between Spheres
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- kaseya vsa2FA bypass in Kaseya VSA <= v9.5.69.9 Critical
- mozilla firefoxFirefox used to cache the last filename used for printing a file. When generating a filename for...4.3 Medium
- ivanti connect secure, pulse connect secure +1 moreA vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4...7.2 High
- dell unisphere for powermax, powermax os, solutions enabler +2 more +4 moreDell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass...8.1 High
- dell idrac9 firmware, integrated dell remote access controller (idrac) +1 moreDell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A...2.7 Low
- ibm security verify information queueIBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to impersonate another...7.5 High
- sooil anydana-a firmware, anydana-i firmware, diabecare rs firmware +2 moreIn SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control...6.5 Medium
- stratodesk notouch centerStratodesk NoTouch Center before 4.4.68 is affected by: Incorrect Access Control. A low...8.8 High
- abb ability™ symphony® plus operations, symphony \+ historian, symphony \+ operations +2 moreAuthentication Bypass in Symphony Plus9.8 Critical
- tangro business workflowIn tangro Business Workflow before 1.18.1, a user's profile contains some items that are greyed...4.3 Medium
- eat spray love project spray loveThe Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass...9.8 Critical
- containerd, debian linux, fedoraproject fedora +2 morecontainerd-shim API Exposed to Host Network Containers5.2 Medium
- [unknown] cloudformsRed Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update6.0 Medium
- dlink dap-1520 firmwareAn issue was discovered in apply.cgi on D-Link DAP-1520 devices before 1.10b04Beta02. Whenever a...9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +28 more +30 moreWindows Print Spooler Elevation of Privilege Vulnerability7.8 High
- dnnsoftware dotnetnukeDNN File Upload Vulnerability6.5 Medium
- zte corporation f6x2w, zte f6x2w firmware +1 moreV6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability....5.3 Medium
- freebsd name server daemon, nsd3 +1 moreFreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process (SIGSEGV)...7.5 High
- compal ch7465lg firmwareCompal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because...9.8 Critical
- diffplug eclipse-cdt, eclipse-groovy, eclipse-wtp +2 moreIncorrect Resource Transfer Between Spheres in eclipse-wtp5.9 Medium
- dlink dir-825\/ac g1 firmwareD-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a...8.8 High
- tp-link archer c2 v1 firmware, archer c3200 v1 firmware +1 moreTP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a...8.8 High
- newgensoft omniflow intelligent business process suiteNewgen OmniFlow Intelligent Business Process Suite (iBPS) 7.0 has an "improper server side...7.5 High
- charcoal-se smokedetectorSmokeDetector intentionally does automatic deployments of updated copies of SmokeDetector without...9.0 Critical
- eclipse buildship, the eclipse foundation eclipse buildship +1 moreIn Eclipse Buildship versions prior to 3.1.1, the build files indicate that this project is...8.1 High
- grailsIncorrect Resource Transfer Between Spheres in Grails8.1 High
- blueprism robotic process automationIn AutomateAppCore.dll in Blue Prism Robotic Process Automation 6.4.0.8445, a vulnerability in...8.8 High
- eclipse vorto, the eclipse foundation eclipse vorto +1 moreEclipse Vorto resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS8.1 High
- juniper identity management serviceIncorrect messages from Juniper Identity Management Service (JIMS) can trigger Denial of Service or firewall bypass conditions for SRX series devices5.7 Medium
- prominent multiflex m10a controller firmwareA Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX...5.6 Medium
- aternityThe web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL...9.8 Critical
- opera browserOpera does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent...5.0 Medium
- microsoft windows 2000, windows xp, exchange server +2 moreSMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote...5.0 Medium