CWE-668 · Exposure of Resource to Wrong Sphere (page 7)
Page 7 of 8 — CVEs classified under CWE-668, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-5422 | Medium | 6.5 | 2020-10-02 | BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any… |
CVE-2020-16247 | Medium | 6.8 | 2020-09-18 | Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, exposes a resource to the wrong control sphere, providing unintended actors with inappro… |
CVE-2020-25040 | High | 8.8 | 2020-09-16 | Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit container build operations, a different vulner… |
CVE-2020-25039 | High | 8.1 | 2020-09-16 | Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execution. |
CVE-2020-16212 | Medium | 6.8 | 2020-09-11 | In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the product exposes a resource to the wrong control sphere, providing unintended actors wit… |
CVE-2020-5386 | High | 7.5 | 2020-09-02 | Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT (Directory Tab… |
CVE-2020-25073 | Medium | 5.3 | 2020-09-02 | FreedomBox through 20.13 allows remote attackers to obtain sensitive information from the /server-status page of the Apache HTTP Server, because a connection f… |
CVE-2020-13946 | Medium | 5.9 | 2020-09-01 | In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassa… |
CVE-2020-13472 | Medium | 4.6 | 2020-08-31 | The flash memory readout protection in Gigadevice GD32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the DMA m… |
CVE-2020-13470 | Medium | 4.6 | 2020-08-31 | Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible bonding wires and de-obfuscation of the… |
CVE-2020-13469 | Medium | 4.6 | 2020-08-31 | The flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU. |
CVE-2020-11934 | Medium | 5.9 | 2020-07-29 | It was discovered that snapctl user-open allowed altering the $XDG_DATA_DIRS environment variable when calling the system xdg-open. OpenURL() in usersession/us… |
CVE-2020-15816 | High | 8.8 | 2020-07-17 | In Western Digital WD Discovery before 4.0.251.0, a malicious application running with standard user permissions could potentially execute code in the applicat… |
CVE-2020-14064 | Medium | 6.5 | 2020-07-15 | IceWarp Email Server 12.3.0.1 has Incorrect Access Control for user accounts. |
CVE-2020-12020 | Medium | 6.1 | 2020-06-29 | Baxter ExactaMix EM 2400 Versions 1.10, 1.11, and 1.13 and ExactaMix EM1200 Versions 1.1, 1.2, and 1.4 does not restrict non administrative users from gaining… |
CVE-2020-10271 | Critical | 9.8 | 2020-06-24 | MiR100, MiR200 and other MiR robots use the Robot Operating System (ROS) default packages exposing the computational graph to all network interfaces, wireless… |
CVE-2019-20853 | Critical | 9.8 | 2020-06-19 | An issue was discovered in Mattermost Packages before 5.16.3. A Droplet could allow Internet access to a service that has a remote code execution problem. |
CVE-2020-9291 | Medium | 6.3 | 2020-06-01 | An Insecure Temporary File vulnerability in FortiClient for Windows 6.2.1 and below may allow a local user to gain elevated privileges via exhausting the pool… |
CVE-2020-6774 | Critical | 9.3 | 2020-05-27 | Improper Access Control in the Kiosk Mode functionality of Bosch Recording Station allows a local unauthenticated attacker to escape from the Kiosk Mode and ac… |
CVE-2020-6490 | Medium | 4.3 | 2020-05-21 | Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin… |
CVE-2020-13240 | Medium | 5.4 | 2020-05-20 | The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded files to have insecure file extensions… |
CVE-2020-11931 | Low | 3.3 | 2020-05-15 | An Ubuntu-specific modification to Pulseaudio to provide security mediation for Snap-packaged applications was found to have a bypass of intended access restri… |
CVE-2020-1945 | Medium | 6.3 | 2020-05-14 | Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and… |
CVE-2020-12687 | Medium | 6.5 | 2020-05-07 | An issue was discovered in Serpico before 1.3.3. The /admin/attacments_backup endpoint can be requested by non-admin authenticated users. This means that an at… |
CVE-2020-3315 | Medium | 5.3 | 2020-05-06 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the config… |
CVE-2020-12142 | Medium | 4.8 | 2020-05-05 | 1. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, wi… |
CVE-2020-5887 | Critical | 9.1 | 2020-04-30 | On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, BIG-IP Virtual Edition (VE) may expose a mechanism for remote attackers to access local daem… |
CVE-2020-6442 | Medium | 4.3 | 2020-04-13 | Inappropriate implementation in cache in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2020-11610 | High | 8.8 | 2020-04-07 | An issue was discovered in xdLocalStorage through 2.0.5. The postData() function in xdLocalStoragePostMessageApi.js specifies the wildcard (*) as the targetOri… |
CVE-2020-11582 | High | 8.8 | 2020-04-06 | An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06. The applet in tncc.jar, executed on macOS, Linux, and Solaris clients wh… |
CVE-2020-10867 | Critical | 9.8 | 2020-04-01 | An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to b… |
CVE-2019-14905 | Medium | 5.6 | 2020-03-31 | A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy… |
CVE-2020-10238 | High | 7.5 | 2020-03-16 | An issue was discovered in Joomla! before 3.9.16. Various actions in com_templates lack the required ACL checks, leading to various potential attack vectors. |
CVE-2019-5159 | High | 7.8 | 2020-03-11 | An exploitable improper input validation vulnerability exists in the firmware update functionality of WAGO e!COCKPIT automation software v1.6.0.7. A specially… |
CVE-2020-1981 | High | 7.0 | 2020-03-11 | A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation. This issue allows a local attacker who bypassed the restricted shel… |
CVE-2019-10805 | High | 7.5 | 2020-02-28 | valib through 2.0.0 allows Internal Property Tampering. A maliciously crafted JavaScript object can bypass several inspection functions provided by valib. Vali… |
CVE-2019-10790 | High | 7.5 | 2020-02-17 | taffydb npm module, vulnerable in all versions up to and including 2.7.3, allows attackers to forge adding additional properties into user-input processed by t… |
CVE-2020-8449 | High | 7.5 | 2020-02-04 | An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests in unexpected ways to access server res… |
CVE-2020-8121 | High | 8.1 | 2020-02-04 | A bug in Nextcloud Server 14.0.4 could expose more data in reshared link shares than intended by the sharer. |
CVE-2020-7912 | Medium | 5.3 | 2020-01-30 | In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups. |
CVE-2019-4633 | Medium | 4.3 | 2020-01-28 | IBM Security Secret Server 10.7 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 170007. |
CVE-2019-10781 | Critical | 9.8 | 2020-01-22 | In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspecto… |
CVE-2019-3682 | High | 8.4 | 2020-01-17 | The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1_ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node. |
CVE-2019-20149 | High | 7.5 | 2019-12-30 | ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'construc… |
CVE-2012-5639 | Medium | 6.5 | 2019-12-20 | LibreOffice and OpenOffice automatically open embedded content |
CVE-2019-8779 | Critical | 10.0 | 2019-12-18 | A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions. This issue is fixed in iOS… |
CVE-2014-2387 | Medium | 4.4 | 2019-12-13 | Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities |
CVE-2019-13927 | Medium | 5.3 | 2019-12-12 | A vulnerability has been identified in Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D with Desigo PX Web modules PXA40-W0, PXA40… |
CVE-2013-2183 | High | 7.1 | 2019-12-10 | Monkey HTTP Daemon has local security bypass |
CVE-2013-0163 | Medium | 5.5 | 2019-12-05 | OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook which could facilitate DoS |
CVE-2019-15689 | Medium | 6.7 | 2019-12-02 | Kaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud prior to version 2020 patch E have bug that allows… |
CVE-2019-19015 | Critical | 9.8 | 2019-12-02 | An issue was discovered in TitanHQ WebTitan before 5.18. The proxy service (which is typically exposed to all users) allows connections to the internal Postgre… |
CVE-2019-16387 | High | 8.1 | 2019-11-26 | PEGA Platform 8.3.0 is vulnerable to a direct prweb/sso/random_token/!STANDARD?pyActivity=Data-Admin-DB-Name.DBSchema_ListDatabases request while using a low-p… |
CVE-2019-16241 | Medium | 6.8 | 2019-11-26 | On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by creating a special file within the /data/local/tmp/ directory. The System… |
CVE-2019-16541 | Critical | 9.9 | 2019-11-21 | Jenkins JIRA Plugin 3.0.10 and earlier does not declare the correct (folder) scope for per-folder Jira site definitions, allowing users to select and use crede… |
CVE-2014-0023 | High | 7.8 | 2019-11-15 | OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution |
CVE-2019-15350 | High | 7.8 | 2019-11-14 | The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform a… |
CVE-2019-15349 | High | 7.8 | 2019-11-14 | The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform… |
CVE-2019-15346 | High | 7.8 | 2019-11-14 | The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed p… |
CVE-2019-15345 | High | 7.8 | 2019-11-14 | The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed plat… |
CVE-2019-15341 | High | 7.8 | 2019-11-14 | The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys contains a pre-installe… |
CVE-2019-18954 | Medium | 5.3 | 2019-11-14 | Pomelo v2.2.5 allows external control of critical state data. A malicious user input can corrupt arbitrary methods and attributes in template/game-server/app/s… |
CVE-2008-7291 | Critical | 9.8 | 2019-11-08 | gri before 2.12.18 generates temporary files in an insecure way. |
CVE-2007-3915 | Critical | 9.1 | 2019-11-07 | Mondo 2.24 has insecure handling of temporary files. |
CVE-2013-4374 | High | 7.1 | 2019-11-04 | An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files. |
CVE-2013-4280 | Medium | 5.5 | 2019-11-04 | Insecure temporary file vulnerability in RedHat vsdm 4.9.6. |
CVE-2005-2351 | Medium | 5.5 | 2019-11-01 | Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files. |
CVE-2009-5042 | Critical | 9.1 | 2019-10-31 | python-docutils allows insecure usage of temporary files |
CVE-2019-4306 | Medium | 6.5 | 2019-10-29 | IBM Security Guardium Big Data Intelligence (SonarG) 4.0 specifies permissions for a security-critical resource which could lead to the exposure of sensitive i… |
CVE-2019-13546 | Medium | 6.8 | 2019-10-25 | In IntelliSpace Perinatal, Versions K and prior, a vulnerability within the IntelliSpace Perinatal application environment could enable an unauthorized attacke… |
CVE-2019-12660 | Medium | 5.5 | 2019-09-25 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to write values to the underlying memory of an affected device… |
CVE-2019-16518 | Medium | 4.3 | 2019-09-23 | An issue was discovered on Swell Kit Mod devices that use the Vandy Vape platform. An attacker may be able to trigger an unintended temperature in the victim's… |
CVE-2019-15138 | High | 7.5 | 2019-09-20 | The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/// URL. |
CVE-2016-11010 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_twocheckout payer metadata updates. |
CVE-2016-11009 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates. |
CVE-2016-11008 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal payer metadata updates. |
CVE-2016-11007 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval. |
CVE-2016-11006 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control for admin_init settings changes. |
CVE-2018-20947 | Medium | 5.5 | 2019-08-01 | cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356). |
CVE-2016-10840 | High | 8.8 | 2019-08-01 | cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication (SEC-72). |
CVE-2019-10365 | Medium | 4.3 | 2019-07-31 | Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file containing a temporary access token in the project workspace, where it could… |
CVE-2019-11728 | Medium | 4.7 | 2019-07-23 | The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content… |
CVE-2019-3970 | Medium | 5.5 | 2019-07-17 | Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database. Cavwp.exe loads Co… |
CVE-2019-13379 | High | 8.8 | 2019-07-07 | On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to adm… |
CVE-2019-9186 | Critical | 9.8 | 2019-07-03 | In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configu… |
CVE-2019-3569 | High | 7.5 | 2019-06-26 | HHVM, when used with FastCGI, would bind by default to all available interfaces. This behavior could allow a malicious individual unintended direct access to t… |
CVE-2019-12929 | Critical | 9.8 | 2019-06-24 | The QMP guest_exec command in QEMU 4.0.0 and earlier is prone to OS command injection, which allows the attacker to achieve code execution, denial of service… |
CVE-2019-12928 | Critical | 9.8 | 2019-06-24 | The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution, de… |
CVE-2019-1848 | Critical | 9.3 | 2019-06-20 | A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, adjacent attacker to bypass authentication and access critic… |
CVE-2019-12904 | Medium | 5.9 | 2019-06-20 | In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other proce… |
CVE-2019-12875 | Medium | 6.5 | 2019-06-18 | Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance… |
CVE-2019-12274 | High | 8.8 | 2019-06-06 | In Rancher 1 and 2 through 2.2.3, unprivileged users (if allowed to deploy nodes) can gain admin access to the Rancher management plane because node driver opt… |
CVE-2018-4048 | High | 7.8 | 2019-05-30 | An exploitable local privilege elevation vulnerability exists in the file system permissions of the `Temp` directory in GOG Galaxy 1.2.48.36 (Windows 64-bit In… |
CVE-2018-7846 | Critical | 9.8 | 2019-05-22 | A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and… |
CVE-2018-20321 | High | 8.8 | 2019-04-10 | An issue was discovered in Rancher 2 through 2.1.5. Any project member with access to the default namespace can mount the netes-default service account in a po… |
CVE-2018-18068 | Critical | 9.8 | 2019-04-04 | The ARM-based hardware debugging feature on Raspberry Pi 3 module B+ and possibly other devices allows non-secure EL1 code to read/write any EL3 (the highest p… |
CVE-2019-8934 | Low | 3.3 | 2019-03-21 | hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/device-tree/model syst… |
CVE-2018-20237 | Medium | 6.5 | 2019-02-13 | Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted page via the word export feature. |
CVE-2019-8308 | High | 8.2 | 2019-02-12 | Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script sandbox, which allows attackers to modify a host-side executabl… |
CVE-2018-1840 | Medium | 6.0 | 2018-12-03 | IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain elevated privileges on the system, caused when a security domain is configur… |