CWE-706: Use of Incorrectly-Resolved Name or Reference
The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- ibm cloud apm, cloud application performance management +1 moreThe IBM Cloud APM 8.1.4 server will issue a DNS request to resolve any hostname specified in the...4.9 Medium
- helmholz myrex24, myrex24.virtual, mbconnectline mbconnect24 +1 more +3 moreLocal file inclusion vulnerability in products of MB connect line and Helmholz5.3 Medium
- newbee-mall project newbee-mallnewbee-mall all versions are affected by incorrect access control to remotely gain privileges...9.8 Critical
- apache tomcat, debian linux, oracle agile product lifecycle management +2 moreApache Tomcat information disclosure5.9 Medium
- mediawikiAn issue was discovered in the CasAuth extension for MediaWiki through 1.35.1. Due to improper...7.5 High
- microsoft git credential manager core, git-credential-manager-core +1 moreRemote Code Execution in Git Credential Manager Core7.3 High
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Wiki was...4.3 Medium
- obstack project obstackUnaligned references in Obstack7.5 High
- mobileiron core, monitor and reporting database, sentry +2 more +4 moreMobileIron Core and Connector before 10.3.0.4, 10.4.x before 10.4.0.4, 10.5.x before 10.5.1.1, 10...9.8 Critical
- libgit2, debian linux +1 moreAn issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. checkout.c mishandles...9.8 Critical
- libgit2, debian linux +1 moreAn issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. path.c mishandles...9.8 Critical
- meetecho janusAn issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't...9.8 Critical
- debian linux, linuxfoundation runc, canonical ubuntu linux +2 more +4 moreopencontainers runc contains procfs race condition with a shared volume mount7.0 High
- gencat portal d\'acces a la universitatThe Java API in Generalitat de Catalunya accesuniversitat.gencat.cat 1.7.5 allows remote...4.3 Medium
- microsoft visual studio 2017, visual studio 2017 version 15.9 (includes 15.1 - 15.8), visual studio 2019 +2 more +4 moreA tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive...7.5 High
- kentico xperienceKentico before 12.0.50 allows file uploads in which the Content-Type header is inconsistent with...5.4 Medium
- wbce cmsA file-rename filter bypass exists in admin/media/rename.php in WBCE CMS 1.4.0 and earlier. This...7.2 High
- envoyproxy envoyEnvoyProxy Envoy Missing HTTP URL path normalization6.5 Medium
- canonical ubuntu server, ubuntu linux +1 moreA security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic...5.1 Medium
- apache http server, canonical ubuntu linux, debian linux +2 more +4 moreA vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a...5.3 Medium
- ofcms project ofcmsAn issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code...7.2 High
- wtcms project wtcmsAn issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by...9.8 Critical
- zohocorp manageengine servicedesk plusAn Insecure Direct Object Reference (IDOR) vulnerability exists in Zoho ManageEngine ServiceDesk...9.8 Critical
- mywebsqlMyWebSQL 3.7 has a remote code execution (RCE) vulnerability after an attacker writes shell code...9.8 Critical
- dedecmsuploads/include/dialog/select_soft.php in DedeCMS V57_UTF8_SP2 allows remote attackers to execute...8.8 High
- microsoft windows 10, windows 10 servers, windows server 2016 +1 more +3 moreAn elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly...7.8 High
- gnupg, canonical ubuntu linux, debian linux +6 more +8 moremainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and...7.5 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreMaking URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0...4.3 Medium
- cisco amp for endpoints, advanced malware protection for endpoints +1 moreA vulnerability in the file type detection mechanism of the Cisco Advanced Malware Protection ...5.8 Medium