Vulnerabilities > Exposure of Resource to Wrong Sphere

DATE CVE VULNERABILITY TITLE RISK
2023-11-14 CVE-2023-36043 Exposure of Resource to Wrong Sphere vulnerability in Microsoft System Center Operations Manager 2016/2019/2022
Open Management Infrastructure Information Disclosure Vulnerability
local
low complexity
microsoft CWE-668
6.5
2023-11-09 CVE-2023-5542 Exposure of Resource to Wrong Sphere vulnerability in multiple products
Students in "Only see own membership" groups could see other students in the group, which should be hidden.
network
low complexity
moodle fedoraproject CWE-668
4.3
2023-11-09 CVE-2023-5545 Exposure of Resource to Wrong Sphere vulnerability in multiple products
H5P metadata automatically populated the author with the user's username, which could be sensitive information.
network
low complexity
moodle fedoraproject CWE-668
5.3
2023-11-07 CVE-2023-42546 Exposure of Resource to Wrong Sphere vulnerability in Samsung Account
Use of implicit intent for sensitive communication vulnerability in startAgreeToDisclaimerActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.
network
low complexity
samsung CWE-668
6.5
2023-11-07 CVE-2023-42547 Exposure of Resource to Wrong Sphere vulnerability in Samsung Account
Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.
network
low complexity
samsung CWE-668
6.5
2023-11-07 CVE-2023-42549 Exposure of Resource to Wrong Sphere vulnerability in Samsung Account
Use of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.
network
low complexity
samsung CWE-668
6.5
2023-11-07 CVE-2023-42551 Exposure of Resource to Wrong Sphere vulnerability in Samsung Account
Use of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.
network
low complexity
samsung CWE-668
6.5
2023-11-06 CVE-2023-4910 Exposure of Resource to Wrong Sphere vulnerability in Redhat 3Scale API Management 2.0
A flaw was found In 3Scale Admin Portal.
local
low complexity
redhat CWE-668
5.5
2023-11-02 CVE-2023-4217 Exposure of Resource to Wrong Sphere vulnerability in Moxa Eds-G503 Firmware
A vulnerability has been identified in PT-G503 Series versions prior to v5.2, where the session cookies attribute is not set properly in the affected application.
network
low complexity
moxa CWE-668
5.3
2023-11-01 CVE-2023-3972 Exposure of Resource to Wrong Sphere vulnerability in Redhat products
A vulnerability was found in insights-client.
local
low complexity
redhat CWE-668
7.8