Vulnerabilities > Exposure of Resource to Wrong Sphere

DATE CVE VULNERABILITY TITLE RISK
2023-12-12 CVE-2023-41120 Exposure of Resource to Wrong Sphere vulnerability in Enterprisedb Postgres Advanced Server
An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0.
network
low complexity
enterprisedb CWE-668
6.5
2023-12-04 CVE-2023-42715 Exposure of Resource to Wrong Sphere vulnerability in Google Android 11.0/12.0
In telephony service, there is a possible missing permission check.
local
low complexity
google CWE-668
5.5
2023-12-04 CVE-2023-42716 Exposure of Resource to Wrong Sphere vulnerability in Google Android 11.0/12.0
In telephony service, there is a possible missing permission check.
network
low complexity
google CWE-668
7.5
2023-12-04 CVE-2023-42717 Exposure of Resource to Wrong Sphere vulnerability in Google Android 11.0/12.0
In telephony service, there is a possible missing permission check.
network
low complexity
google CWE-668
7.5
2023-12-04 CVE-2023-42718 Exposure of Resource to Wrong Sphere vulnerability in Google Android 11.0/12.0/13.0
In dialer, there is a possible way to write permission usage records of an app due to a missing permission check.
local
low complexity
google CWE-668
5.5
2023-11-23 CVE-2023-41786 Exposure of Resource to Wrong Sphere vulnerability in Artica Pandora FMS
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pandora FMS on all allows File Discovery.
network
low complexity
artica CWE-668
6.5
2023-11-20 CVE-2023-36013 Exposure of Resource to Wrong Sphere vulnerability in Microsoft Powershell
PowerShell Information Disclosure Vulnerability
network
low complexity
microsoft CWE-668
6.5
2023-11-14 CVE-2023-36043 Exposure of Resource to Wrong Sphere vulnerability in Microsoft System Center Operations Manager 2016/2019/2022
Open Management Infrastructure Information Disclosure Vulnerability
local
low complexity
microsoft CWE-668
6.5
2023-11-09 CVE-2023-5542 Exposure of Resource to Wrong Sphere vulnerability in multiple products
Students in "Only see own membership" groups could see other students in the group, which should be hidden.
network
low complexity
moodle fedoraproject CWE-668
4.3
2023-11-09 CVE-2023-5545 Exposure of Resource to Wrong Sphere vulnerability in multiple products
H5P metadata automatically populated the author with the user's username, which could be sensitive information.
network
low complexity
moodle fedoraproject CWE-668
5.3