CWE-706: Use of Incorrectly-Resolved Name or Reference
The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- corazawaf corazaOWASP Coraza WAF has parser confusion which leads to wrong URI in `REQUEST_FILENAME`5.4 Medium
- apache tomcat, debian linux, netapp bootstrap os +2 moreApache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT9.8 Critical
- addonmaster post grid masterWordPress Post Grid Master plugin <= 3.4.12 - Local File Inclusion vulnerability6.5 Medium
- No product listedZenitel AlphaWeb XE v11.2.3.10 was discovered to contain a local file inclusion vulnerability via...4.9 Medium
- phpgurukul online birth certificate systemAn insecure direct object reference (IDOR) vulnerability was discovered in PHPGurukul Online...4.3 Medium
- cool plugins cryptocurrency widgets for elementorWordPress Cryptocurrency Widgets For Elementor plugin <= 1.6.4 - Local File Inclusion vulnerability8.1 High
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server has incomplete sanitization of SVG files allows to embed other images into previews5.7 Medium
- sigstore gitsignUse of incorrect Rekor entries during verification in gitsign1.8 Low
- byron gitoxidegix-path uses local config across repos when it is the highest scope2.5 Low
- @clerk nuxtRemote code execution via the browser when running the test locally in nuxt8.8 High
- pytorch serve, torchserve +1 moreTorchServe bypass allowed_urls configuration9.8 Critical
- qodeinteractive qi addons for elementorQi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Local File Inclusion7.5 High
- denoPrivate npm registry support used scope auth token for downloading tarballs7.6 High
- logpoint saml authenticationAn issue was discovered in Logpoint SAML Authentication before 6.0.3. An attacker can place a crafted filename in the state field of a SAML SSO-URL response, and the file corresponding to this filenam…5.3 Medium
- linux, linux kernel +1 moreftrace: Do not blindly read the ip address in ftrace_bug()5.5 Medium
- linux, linux kernel +1 moreIB/mlx5: Fix initializing CQ fragments buffer7.8 High
- avast premium securityAvast Premium Security Sandbox Protection Link Following Privilege Escalation Vulnerability7.8 High
- directusDirectus MySQL accent insensitive email matching8.2 High
- jhpyle docassembleDocassemble unauthorized access through URL manipulation7.5 High
- joinmastodon mastodonMastodon Invalid Domain Name Normalization vulnerability7.4 High
- vitejs viteVite Server Options (server.fs.deny) can be bypassed using double forward-slash (//)7.5 High
- dlink dir-300 firmwareD-Link DIR-300 firmware <=REVA1.06 and <=REVB2.06 is vulnerable to File inclusion via /model...9.8 Critical
- nextcloud server, kiteworks security-advisories +1 morePotential share collision for recipients when caching is enabled in nextcloud server5.5 Medium
- lambdaisland uri`authority-regex` returns the wrong authority in lambdaisland/uri5.4 Medium
- debian linux, linuxfoundation runc, redhat enterprise linux +1 more +3 moreOpencontainers runc Incorrect Authorization vulnerability7.0 High
- asus rt-ac68u firmwareIncorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version...9.1 Critical
- technitium dns serverAn issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of...9.8 Critical
- technitium dns serverAn issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of...9.8 Critical
- tauriTauri Filesystem Scope can be Partially Bypassed2.6 Low
- cellinx nvt - ip ptz camera, nvt - ip ptz camera firmware +1 moreCellinx NVT – IP PTZ Camera local file inclusion7.6 High
- parse-community parse-serverInvalid file request can crashe parse-server7.5 High
- wow-estore herd effects, wow-company herd effects (wordpress plugin) +1 moreWordPress Herd Effects plugin <= 5.2 - Local File Inclusion (LFI) vulnerability6.8 Medium
- wow-estore popup box, wow-company popup box (wordpress plugin) +1 moreWordPress Popup Box plugin <= 2.1.2 - Authenticated Local File Inclusion (LFI) vulnerability6.8 Medium
- haxx curl, netapp active iq unified manager, bh500s firmware +14 more +16 moreA use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when...8.1 High
- nvidia omniverse nucleus, omniverse cache +1 moreNVIDIA Omniverse Nucleus and Cache contain a vulnerability in its configuration of OpenSSL, where...6.6 Medium
- microweber whmcs, microweber-dev microweber-dev/whmcs plugin +1 moreImproper Resolution of Path Equivalence in microweber-dev/whmcs_plugin7.4 High
- auerswald comfortel 1400 ip firmware, comfortel 2600 ip firmware, comfortel 3600 ip firmware +2 moreAuerswald COMfortel 1400 IP and 2600 IP before 2.8G devices allow Authentication Bypass via the ...7.5 High
- zoho manageengine, zohocorp manageengine adselfservice plus +1 moreZoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API...9.8 Critical
- istioFragments in Path May Lead to Authorization Policy Bypass8.1 High
- larvata flygoLarvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-44.3 Medium
- larvata flygoLarvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-38.8 High
- larvata flygoLarvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-24.3 Medium
- larvata flygoLarvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-15.4 Medium
- cszcms csz cmsCSZ CMS 1.2.9 is vulnerable to Arbitrary File Deletion. This occurs in PHP when the unlink()...9.1 Critical
- haxx libcurl, debian linux, fedoraproject fedora +33 more +35 morelibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...3.7 Low
- phone shop sales management system project shop sales management systemSourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object...4.3 Medium
- istioIstio Authorization Bypass Vulnerability6.5 Medium
- fire.ly sparkFirely/Incendi Spark before 1.5.5-r4 lacks Content-Disposition headers in certain situations,...6.1 Medium
- chamiloA remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input...7.2 High
- konghq kong gatewayAn improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.0.0...7.5 High
- Show moreLoading…