Vulnerabilities > Exposure of Resource to Wrong Sphere

DATE CVE VULNERABILITY TITLE RISK
2023-07-14 CVE-2023-32760 Exposure of Resource to Wrong Sphere vulnerability in Archerirm Archer
An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via API calls related to data feeds and data publication.
network
low complexity
archerirm CWE-668
6.5
2023-07-13 CVE-2023-37599 Exposure of Resource to Wrong Sphere vulnerability in Issabel PBX 4.0.06
An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory
network
low complexity
issabel CWE-668
7.5
2023-07-11 CVE-2023-34119 Exposure of Resource to Wrong Sphere vulnerability in Zoom Rooms
Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.
local
low complexity
zoom CWE-668
7.8
2023-07-11 CVE-2023-31818 Exposure of Resource to Wrong Sphere vulnerability in Marukyu Line 13.4.1
An issue found in Marukyu Line v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function.
network
low complexity
marukyu CWE-668
7.5
2023-07-10 CVE-2023-30960 Exposure of Resource to Wrong Sphere vulnerability in Palantir Foundry Job-Tracker
A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to.
network
low complexity
palantir CWE-668
4.3
2023-07-10 CVE-2023-35696 Exposure of Resource to Wrong Sphere vulnerability in Sick Icr890-4 Firmware
Unauthenticated endpoints in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive information about the device via HTTP requests.
network
low complexity
sick CWE-668
7.5
2023-07-10 CVE-2023-3270 Exposure of Resource to Wrong Sphere vulnerability in Sick Icr890-4 Firmware
Exposure of Sensitive Information to an Unauthorized Actor in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive information about the system.
network
low complexity
sick CWE-668
7.5
2023-07-06 CVE-2023-3456 Exposure of Resource to Wrong Sphere vulnerability in Huawei Emui and Harmonyos
Vulnerability of kernel raw address leakage in the hang detector module.
network
low complexity
huawei CWE-668
5.3
2023-07-05 CVE-2023-3455 Exposure of Resource to Wrong Sphere vulnerability in Huawei Emui and Harmonyos
Key management vulnerability on system.
network
low complexity
huawei CWE-668
critical
9.1
2023-06-30 CVE-2023-32613 Exposure of Resource to Wrong Sphere vulnerability in Wavlink Wl-Wn531Ax2 Firmware
Exposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow a network-adjacent attacker to use functions originally available after login without logging in.
low complexity
wavlink CWE-668
8.1