CWE-668 · Exposure of Resource to Wrong Sphere (page 7)
Page 7 of 8 — CVEs classified under CWE-668, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-6774 | Critical | 9.3 | 2020-05-27 | Improper Access Control in the Kiosk Mode functionality of Bosch Recording Station allows a local unauthenticated attacker to escape from the Kiosk Mode and ac… |
CVE-2020-6490 | Medium | 4.3 | 2020-05-21 | Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin… |
CVE-2020-13240 | Medium | 5.4 | 2020-05-20 | The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded files to have insecure file extensions… |
CVE-2020-11931 | Low | 3.3 | 2020-05-15 | An Ubuntu-specific modification to Pulseaudio to provide security mediation for Snap-packaged applications was found to have a bypass of intended access restri… |
CVE-2020-1945 | Medium | 6.3 | 2020-05-14 | Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and… |
CVE-2020-12687 | Medium | 6.5 | 2020-05-07 | An issue was discovered in Serpico before 1.3.3. The /admin/attacments_backup endpoint can be requested by non-admin authenticated users. This means that an at… |
CVE-2020-3315 | Medium | 5.3 | 2020-05-06 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the config… |
CVE-2020-12142 | Medium | 4.8 | 2020-05-05 | 1. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, wi… |
CVE-2020-5887 | Critical | 9.1 | 2020-04-30 | On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, BIG-IP Virtual Edition (VE) may expose a mechanism for remote attackers to access local daem… |
CVE-2020-6442 | Medium | 4.3 | 2020-04-13 | Inappropriate implementation in cache in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2020-11610 | High | 8.8 | 2020-04-07 | An issue was discovered in xdLocalStorage through 2.0.5. The postData() function in xdLocalStoragePostMessageApi.js specifies the wildcard (*) as the targetOri… |
CVE-2020-11582 | High | 8.8 | 2020-04-06 | An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06. The applet in tncc.jar, executed on macOS, Linux, and Solaris clients wh… |
CVE-2020-10867 | Critical | 9.8 | 2020-04-01 | An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to b… |
CVE-2019-14905 | Medium | 5.6 | 2020-03-31 | A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy… |
CVE-2020-10238 | High | 7.5 | 2020-03-16 | An issue was discovered in Joomla! before 3.9.16. Various actions in com_templates lack the required ACL checks, leading to various potential attack vectors. |
CVE-2019-5159 | High | 7.8 | 2020-03-11 | An exploitable improper input validation vulnerability exists in the firmware update functionality of WAGO e!COCKPIT automation software v1.6.0.7. A specially… |
CVE-2020-1981 | High | 7.0 | 2020-03-11 | A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation. This issue allows a local attacker who bypassed the restricted shel… |
CVE-2019-10805 | High | 7.5 | 2020-02-28 | valib through 2.0.0 allows Internal Property Tampering. A maliciously crafted JavaScript object can bypass several inspection functions provided by valib. Vali… |
CVE-2019-10790 | High | 7.5 | 2020-02-17 | taffydb npm module, vulnerable in all versions up to and including 2.7.3, allows attackers to forge adding additional properties into user-input processed by t… |
CVE-2020-8449 | High | 7.5 | 2020-02-04 | An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests in unexpected ways to access server res… |
CVE-2020-8121 | High | 8.1 | 2020-02-04 | A bug in Nextcloud Server 14.0.4 could expose more data in reshared link shares than intended by the sharer. |
CVE-2020-7912 | Medium | 5.3 | 2020-01-30 | In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups. |
CVE-2019-4633 | Medium | 4.3 | 2020-01-28 | IBM Security Secret Server 10.7 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 170007. |
CVE-2019-10781 | Critical | 9.8 | 2020-01-22 | In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspecto… |
CVE-2019-3682 | High | 8.4 | 2020-01-17 | The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1_ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node. |
CVE-2019-20149 | High | 7.5 | 2019-12-30 | ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'construc… |
CVE-2012-5639 | Medium | 6.5 | 2019-12-20 | LibreOffice and OpenOffice automatically open embedded content |
CVE-2019-8779 | Critical | 10.0 | 2019-12-18 | A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions. This issue is fixed in iOS… |
CVE-2014-2387 | Medium | 4.4 | 2019-12-13 | Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities |
CVE-2019-13927 | Medium | 5.3 | 2019-12-12 | A vulnerability has been identified in Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D with Desigo PX Web modules PXA40-W0, PXA40… |
CVE-2013-2183 | High | 7.1 | 2019-12-10 | Monkey HTTP Daemon has local security bypass |
CVE-2013-0163 | Medium | 5.5 | 2019-12-05 | OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook which could facilitate DoS |
CVE-2019-15689 | Medium | 6.7 | 2019-12-02 | Kaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud prior to version 2020 patch E have bug that allows… |
CVE-2019-19015 | Critical | 9.8 | 2019-12-02 | An issue was discovered in TitanHQ WebTitan before 5.18. The proxy service (which is typically exposed to all users) allows connections to the internal Postgre… |
CVE-2019-16387 | High | 8.1 | 2019-11-26 | PEGA Platform 8.3.0 is vulnerable to a direct prweb/sso/random_token/!STANDARD?pyActivity=Data-Admin-DB-Name.DBSchema_ListDatabases request while using a low-p… |
CVE-2019-16241 | Medium | 6.8 | 2019-11-26 | On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by creating a special file within the /data/local/tmp/ directory. The System… |
CVE-2019-16541 | Critical | 9.9 | 2019-11-21 | Jenkins JIRA Plugin 3.0.10 and earlier does not declare the correct (folder) scope for per-folder Jira site definitions, allowing users to select and use crede… |
CVE-2014-0023 | High | 7.8 | 2019-11-15 | OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution |
CVE-2019-15350 | High | 7.8 | 2019-11-14 | The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform a… |
CVE-2019-15349 | High | 7.8 | 2019-11-14 | The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform… |
CVE-2019-15346 | High | 7.8 | 2019-11-14 | The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed p… |
CVE-2019-15345 | High | 7.8 | 2019-11-14 | The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed plat… |
CVE-2019-15341 | High | 7.8 | 2019-11-14 | The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys contains a pre-installe… |
CVE-2019-18954 | Medium | 5.3 | 2019-11-14 | Pomelo v2.2.5 allows external control of critical state data. A malicious user input can corrupt arbitrary methods and attributes in template/game-server/app/s… |
CVE-2008-7291 | Critical | 9.8 | 2019-11-08 | gri before 2.12.18 generates temporary files in an insecure way. |
CVE-2007-3915 | Critical | 9.1 | 2019-11-07 | Mondo 2.24 has insecure handling of temporary files. |
CVE-2013-4374 | High | 7.1 | 2019-11-04 | An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files. |
CVE-2013-4280 | Medium | 5.5 | 2019-11-04 | Insecure temporary file vulnerability in RedHat vsdm 4.9.6. |
CVE-2005-2351 | Medium | 5.5 | 2019-11-01 | Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files. |
CVE-2009-5042 | Critical | 9.1 | 2019-10-31 | python-docutils allows insecure usage of temporary files |
CVE-2019-4306 | Medium | 6.5 | 2019-10-29 | IBM Security Guardium Big Data Intelligence (SonarG) 4.0 specifies permissions for a security-critical resource which could lead to the exposure of sensitive i… |
CVE-2019-13546 | Medium | 6.8 | 2019-10-25 | In IntelliSpace Perinatal, Versions K and prior, a vulnerability within the IntelliSpace Perinatal application environment could enable an unauthorized attacke… |
CVE-2019-12660 | Medium | 5.5 | 2019-09-25 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to write values to the underlying memory of an affected device… |
CVE-2019-16518 | Medium | 4.3 | 2019-09-23 | An issue was discovered on Swell Kit Mod devices that use the Vandy Vape platform. An attacker may be able to trigger an unintended temperature in the victim's… |
CVE-2019-15138 | High | 7.5 | 2019-09-20 | The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/// URL. |
CVE-2016-11010 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_twocheckout payer metadata updates. |
CVE-2016-11009 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates. |
CVE-2016-11008 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal payer metadata updates. |
CVE-2016-11007 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval. |
CVE-2016-11006 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control for admin_init settings changes. |
CVE-2018-20947 | Medium | 5.5 | 2019-08-01 | cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356). |
CVE-2016-10840 | High | 8.8 | 2019-08-01 | cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication (SEC-72). |
CVE-2019-10365 | Medium | 4.3 | 2019-07-31 | Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file containing a temporary access token in the project workspace, where it could… |
CVE-2019-11728 | Medium | 4.7 | 2019-07-23 | The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content… |
CVE-2019-3970 | Medium | 5.5 | 2019-07-17 | Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database. Cavwp.exe loads Co… |
CVE-2019-13379 | High | 8.8 | 2019-07-07 | On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to adm… |
CVE-2019-9186 | Critical | 9.8 | 2019-07-03 | In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configu… |
CVE-2019-3569 | High | 7.5 | 2019-06-26 | HHVM, when used with FastCGI, would bind by default to all available interfaces. This behavior could allow a malicious individual unintended direct access to t… |
CVE-2019-12929 | Critical | 9.8 | 2019-06-24 | The QMP guest_exec command in QEMU 4.0.0 and earlier is prone to OS command injection, which allows the attacker to achieve code execution, denial of service… |
CVE-2019-12928 | Critical | 9.8 | 2019-06-24 | The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution, de… |
CVE-2019-1848 | Critical | 9.3 | 2019-06-20 | A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, adjacent attacker to bypass authentication and access critic… |
CVE-2019-12904 | Medium | 5.9 | 2019-06-20 | In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other proce… |
CVE-2019-12875 | Medium | 6.5 | 2019-06-18 | Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance… |
CVE-2019-12274 | High | 8.8 | 2019-06-06 | In Rancher 1 and 2 through 2.2.3, unprivileged users (if allowed to deploy nodes) can gain admin access to the Rancher management plane because node driver opt… |
CVE-2018-4048 | High | 7.8 | 2019-05-30 | An exploitable local privilege elevation vulnerability exists in the file system permissions of the `Temp` directory in GOG Galaxy 1.2.48.36 (Windows 64-bit In… |
CVE-2018-7846 | Critical | 9.8 | 2019-05-22 | A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and… |
CVE-2018-20321 | High | 8.8 | 2019-04-10 | An issue was discovered in Rancher 2 through 2.1.5. Any project member with access to the default namespace can mount the netes-default service account in a po… |
CVE-2018-18068 | Critical | 9.8 | 2019-04-04 | The ARM-based hardware debugging feature on Raspberry Pi 3 module B+ and possibly other devices allows non-secure EL1 code to read/write any EL3 (the highest p… |
CVE-2019-8934 | Low | 3.3 | 2019-03-21 | hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/device-tree/model syst… |
CVE-2018-20237 | Medium | 6.5 | 2019-02-13 | Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted page via the word export feature. |
CVE-2019-8308 | High | 8.2 | 2019-02-12 | Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script sandbox, which allows attackers to modify a host-side executabl… |
CVE-2018-1840 | Medium | 6.0 | 2018-12-03 | IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain elevated privileges on the system, caused when a security domain is configur… |
CVE-2018-15591 | High | 7.8 | 2018-10-15 | An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can bypass Application Whitelisting rest… |
CVE-2018-8040 | Medium | 5.3 | 2018-08-29 | Pages that are rendered using the ESI plugin can have access to the cookie header when the plugin is configured not to allow access. This affects Apache Traffi… |
CVE-2017-12576 | High | 7.2 | 2018-08-24 | An issue was discovered on the PLANEX CS-QR20 1.30. A hidden and undocumented management page allows an attacker to execute arbitrary code on the device when t… |
CVE-2018-7073 | Medium | 5.5 | 2018-08-06 | A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24. |
CVE-2018-7072 | Critical | 9.8 | 2018-08-06 | A remote bypass of security restrictions vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24. |
CVE-2018-8861 | High | 8.7 | 2018-05-04 | Vulnerabilities within the Philips Brilliance CT kiosk environment (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance i… |
CVE-2018-10361 | High | 7.8 | 2018-04-25 | An issue was discovered in KTextEditor 5.34.0 through 5.45.0. Insecure handling of temporary files in the KTextEditor's kauth_ktexteditor_helper service (as ut… |
CVE-2017-0367 | High | 8.8 | 2018-04-13 | Mediawiki before 1.28.1 / 1.27.2 contains an unsafe use of temporary directory, where having LocalisationCache directory default to system tmp directory is ins… |
CVE-2017-18129 | Critical | 9.8 | 2018-04-11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, SD 845, MSM8996, MSM8998, it is pos… |
CVE-2017-18073 | High | 7.5 | 2018-04-11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/S… |
CVE-2018-7479 | Medium | 5.3 | 2018-02-26 | YzmCMS 3.6 allows remote attackers to discover the full path via a direct request to application/install/templates/s1.php. |
CVE-2018-6910 | High | 7.5 | 2018-02-13 | DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/inc_archives_functions.php. |
CVE-2018-6880 | Medium | 5.3 | 2018-02-12 | EmpireCMS 6.6 through 7.2 allows remote attackers to discover the full path via an array value for a parameter to class/connect.php. |
CVE-2017-15393 | High | 8.8 | 2018-02-07 | Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to obtain access to remote debugg… |
CVE-2017-16610 | Critical | 9.8 | 2018-01-23 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required… |
CVE-2017-16606 | High | 8.8 | 2018-01-23 | This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.73… |
CVE-2017-16605 | Medium | 6.5 | 2018-01-23 | This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. A… |
CVE-2017-16604 | Medium | 6.5 | 2018-01-23 | This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. A… |