CWE-669: Incorrect Resource Transfer Between Spheres
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- bulwarkmail webmailRoundcube: Bypass of remote image blocking via crafted BODY background attribute5.3 Medium
- bulwarkmail webmailRoundcube Webmail: Insufficient CSS sanitization in HTML e-mail messages5.4 Medium
- codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +13 more +15 moreCODESYS Control Boot Application Replacement Enables Code Execution8.8 High
- danny-avila librechatIn LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API.6.3 Medium
- gnu inetutilstelnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from...3.4 Low
- openstack nova, red hat openstack platform 13 (queens), openstack platform 16.2 +4 more +6 moreOpenStack Nova calls qemu-img without format restrictions for resize8.2 High
- openclawOpenClaw/Clawdbot has 1-Click RCE via Authentication Token Exfiltration From gatewayUrl8.8 High
- difyDify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send...4.3 Medium
- apache software foundation airflow providers edge3, apache apache-airflow-providers-edge3 +1 moreApache Airflow Providers Edge3: Edge3 Worker RPC RCE on Airflow 29.8 Critical
- mercku m6aMercku M6a devices through 2.1.0 allow root TELNET logins via the web admin password.8.0 High
- restaurant brands international assistant platform, rbi restaurant brands international assistant +1 moreThe Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows remote...5.0 Medium
- sonarqubeIn SonarQube before 25.6, 2025.3 Commercial, and 2025.1.3 LTA, authenticated low-privileged users...4.3 Medium
- eken video doorbell t6The EKEN video doorbell T6 BT60PLUS_MAIN_V1.0_GC1084_20230531 periodically sends debug logs to...3.5 Low
- purevpnPureVPN client applications on Linux through September 2025 mishandle firewalling. They flush the...3.7 Low
- purevpnPureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside...3.7 Low
- clickstudios passwordstateClick Studios Passwordstate before 9.9 Build 9972 has a potential authentication bypass for...3.2 Low
- gnu guixIn guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to...5.7 Medium
- one identity oneloginIn One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps...7.7 High
- plex media serverPlex Media Server (PMS) versions 1.41.7.x through 1.42.0.x are affected by an unspecified...8.5 High
- r-lib ghThe gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the...3.2 Low
- wordpressWordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft posts...3.7 Low
- qbittorrentqBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL...4.0 Medium
- sma www.sunnyportal.comSMA: Sunny Portal demo system privilege escalation8.6 High
- misskey summaly@misskey-dev/summaly Redirect Filter Bypass2.1 Low
youtube-dlPyPIyoutube-dl vulnerable to file system modification and RCE through improper file-extension sanitization7.8 High- j’s communication co., ltd. revoworks browser, revoworks scvx +1 moreIncorrect resource transfer between spheres issue exists in RevoWorks SCVX and RevoWorks Browser. If exploited, malicious files may be downloaded to the system where using the product.2.7 Low
- linux, linux kernel +1 mores390/pkey: Use kfree_sensitive() to fix Coccinelle warnings4.1 Medium
- yt-dlp, ytdl-org youtube-dl +1 moreyt-dlp and youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization7.8 High
- python urllib3, debian linux, netapp active iq unified manager +2 moreProxy-Authorization request header isn't stripped during cross-origin redirects in urllib34.4 Medium
- xmlunit for javaXMLUnit for Java has Insecure Defaults when Processing XSLT Stylesheets4.0 Medium
- mobyExternal DNS requests from 'internal' networks could lead to data exfiltration5.9 Medium
- home-assistant core, home-assistant +1 moreLocal-only webhooks externally accessible via SniTun in Home Assistant Core5.3 Medium
- huawei emui, harmonyos +1 moreBroadcast permission control vulnerability in the Bluetooth module.Successful exploitation of...7.5 High
- huawei emui, harmonyos +1 moreBroadcast permission control vulnerability in the Bluetooth module.Successful exploitation of...7.5 High
- samsung exynos 5123 firmware, exynos 5300 firmware +1 moreAn issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300....7.5 High
- samsung exynos 5123 firmware, exynos 5300 firmware +1 moreAn issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300....9.1 Critical
- tigergraphAn issue was discovered in TigerGraph Enterprise Free Edition 3.x. Data loading jobs in...6.5 Medium
- elrond go, elrondnetwork elrond-go +1 moreElrond go Processing: fallback search of SCRs when not found in the main cache7.2 High
- corebos, tsolucio tsolucio/corebos +1 morePHP Remote File Inclusion in tsolucio/corebos9.8 Critical
- parse-community parse-serverParse Server subject to Incorrect Resource Transfer Between Spheres4.3 Medium
- dell unisphere for powermax, evasa provider virtual appliance, powermax os +5 more +7 moreUnisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An...6.3 Medium
- openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 moreCross chain utilities for Arbitrum L2 see EOA calls as cross chain calls5.3 Medium
- schneider electric wiser smart, schneider-electric wiser smart eer21000 firmware, wiser smart eer21001 firmware +2 moreA CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could allow...8.2 High
- zauner arcAn issue was discovered in Softwarebuero Zauner ARC 4.2.0.4., that allows attackers to escalate...8.8 High
- schneider-electric fellerlynk firmware, spacelynk firmware, wiser for knx firmware +2 moreA CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data...7.5 High
- dell unisphere for powermax, powermax os, solutions enabler +4 more +6 moreUnisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability....6.3 Medium
- cisco unified contact center domain manager, unified contact center management portal, unified contact center express +2 moreCisco Unified Contact Center Management Portal and Unified Contact Center Domain Manager Privilege Escalation Vulnerability9.6 Critical
- publify project publify, publify core core +1 morePublify - Improper Authorization Leads to Guest Signup Restriction Bypass6.5 Medium
- hmplugin hm multiple rolesHM Multiple Roles < 1.3 - Arbitrary Role Change8.8 High
- helmholz myrex24, myrex24.virtual, mb connect line mbconnect24 +1 more +3 morePassword policy evasion in products of MB connect line and Helmholz4.3 Medium
- Show moreLoading…