CWE-669 · Incorrect Resource Transfer Between Spheres (page 2)
Page 2 of 2 — CVEs classified under CWE-669, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-5800 | Critical | 9.8 | 2020-12-07 | The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they w… |
CVE-2020-15257 | Medium | 5.2 | 2020-12-01 | containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the con… |
CVE-2020-10778 | Medium | 6.0 | 2020-08-11 | In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled attribute from the fields since there is… |
CVE-2020-15892 | Critical | 9.8 | 2020-07-22 | An issue was discovered in apply.cgi on D-Link DAP-1520 devices before 1.10b04Beta02. Whenever a user performs a login action from the web interface, the reque… |
CVE-2020-1048 | High | 7.8 | 2020-05-21 | An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who s… |
CVE-2020-5188 | Medium | 6.5 | 2020-02-24 | DNN (formerly DotNetNuke) through 9.4.4 has Insecure Permissions. |
CVE-2020-6862 | Medium | 5.3 | 2020-01-17 | V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could log in directly to obtain page informatio… |
CVE-2012-2979 | High | 7.5 | 2019-11-01 | FreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process (SIGSEGV) and cause a denial of service in the NSD server. |
CVE-2019-13025 | Critical | 9.8 | 2019-10-02 | Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Validation. The attacker can send a malicious… |
CVE-2019-10753 | Medium | 5.9 | 2019-09-05 | In all versions prior to version 3.9.6 for eclipse-wtp, all versions prior to version 9.4.4 for eclipse-cdt, and all versions prior to version 3.0.1 for eclips… |
CVE-2019-13266 | High | 8.8 | 2019-08-27 | TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the… |
CVE-2019-13263 | High | 8.8 | 2019-08-27 | D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP R… |
CVE-2018-17791 | High | 7.5 | 2019-08-21 | Newgen OmniFlow Intelligent Business Process Suite (iBPS) 7.0 has an "improper server side validation" vulnerability where client-side validations are tampered… |
CVE-2019-1020011 | High | 7.2 | 2019-07-29 | SmokeDetector intentionally does automatic deployments of updated copies of SmokeDetector without server operator authority. |
CVE-2019-11770 | High | 8.1 | 2019-06-14 | In Eclipse Buildship versions prior to 3.1.1, the build files indicate that this project is resolving dependencies over HTTP instead of HTTPS. Any of these art… |
CVE-2019-11875 | High | 8.8 | 2019-05-24 | In AutomateAppCore.dll in Blue Prism Robotic Process Automation 6.4.0.8445, a vulnerability in access control can be exploited to escalate privileges. The vuln… |
CVE-2019-10248 | High | 8.1 | 2019-04-22 | Eclipse Vorto versions prior to 0.11 resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS. Any of these dependent artifacts could ha… |
CVE-2019-0042 | Medium | 4.2 | 2019-04-10 | Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 may send an incorrect message to associated SRX services gateways. This may allo… |
CVE-2017-14013 | Medium | 5.6 | 2017-10-17 | A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The log out function in the applic… |
CVE-2016-5062 | Critical | 9.8 | 2016-09-29 | The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute a… |
CVE-2004-0872 | | 2004-09-16 | Opera does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which c… | |
CVE-2002-0055 | | 2002-03-08 | SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a ma… |