Vulnerabilities > Exposure of Resource to Wrong Sphere

DATE CVE VULNERABILITY TITLE RISK
2021-03-24 CVE-2021-1423 Exposure of Resource to Wrong Sphere vulnerability in Cisco products
A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points (AP) could allow an authenticated, local attacker to overwrite files in the flash memory of the device.
local
low complexity
cisco CWE-668
4.4
2021-03-10 CVE-2021-21334 Exposure of Resource to Wrong Sphere vulnerability in multiple products
In containerd (an industry-standard container runtime) before versions 1.3.10 and 1.4.4, containers launched through containerd's CRI implementation (through Kubernetes, crictl, or any other pod/container client that uses the containerd CRI service) that share the same image may receive incorrect environment variables, including values that are defined for other containers.
network
high complexity
linuxfoundation fedoraproject CWE-668
6.3
2021-02-26 CVE-2021-23958 Exposure of Resource to Wrong Sphere vulnerability in Mozilla Firefox
The browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information.
network
mozilla CWE-668
4.3
2021-02-19 CVE-2020-36252 Exposure of Resource to Wrong Sphere vulnerability in Owncloud
ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version of any file by sending a request for a predictable ID number.
low complexity
owncloud CWE-668
2.7
2021-02-16 CVE-2021-27236 Exposure of Resource to Wrong Sphere vulnerability in Mutare Voice 3.0.0/3.2.6/3.3.7
An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8.
network
low complexity
mutare CWE-668
7.5
2021-02-04 CVE-2020-27872 Exposure of Resource to Wrong Sphere vulnerability in Netgear products
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers.
low complexity
netgear CWE-668
5.8
2021-01-28 CVE-2020-26272 Exposure of Resource to Wrong Sphere vulnerability in Electronjs Electron
The Electron framework lets you write cross-platform desktop applications using JavaScript, HTML and CSS.
network
low complexity
electronjs CWE-668
6.4
2021-01-08 CVE-2020-26186 Exposure of Resource to Wrong Sphere vulnerability in Dell Inspiron 5675 Firmware
Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability.
local
low complexity
dell CWE-668
7.2
2020-12-09 CVE-2020-26261 Exposure of Resource to Wrong Sphere vulnerability in Jupyterhub Systemdspawner
jupyterhub-systemdspawner enables JupyterHub to spawn single-user notebook servers using systemd.
3.3
2020-11-24 CVE-2015-9550 Exposure of Resource to Wrong Sphere vulnerability in Totolink products
An issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1-B20150708.1646 devices.
network
low complexity
totolink CWE-668
5.0