CWE-669 · Incorrect Resource Transfer Between Spheres (page 2)
Page 2 of 2 — CVEs classified under CWE-669, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-14013 | Medium | 5.6 | 2017-10-17 | A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The log out function in the applic… |
CVE-2016-5062 | Critical | 9.8 | 2016-09-29 | The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute a… |
CVE-2004-0872 | | 2004-09-16 | Opera does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which c… | |
CVE-2002-0055 | | 2002-03-08 | SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a ma… |