Vulnerabilities > Exposure of Resource to Wrong Sphere

DATE CVE VULNERABILITY TITLE RISK
2021-03-24 CVE-2021-1423 Exposure of Resource to Wrong Sphere vulnerability in Cisco products
A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points (AP) could allow an authenticated, local attacker to overwrite files in the flash memory of the device.
local
low complexity
cisco CWE-668
4.4
2021-03-10 CVE-2021-21334 Exposure of Resource to Wrong Sphere vulnerability in multiple products
In containerd (an industry-standard container runtime) before versions 1.3.10 and 1.4.4, containers launched through containerd's CRI implementation (through Kubernetes, crictl, or any other pod/container client that uses the containerd CRI service) that share the same image may receive incorrect environment variables, including values that are defined for other containers.
network
high complexity
linuxfoundation fedoraproject CWE-668
6.3
2021-02-26 CVE-2021-23958 Exposure of Resource to Wrong Sphere vulnerability in Mozilla Firefox
The browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information.
network
low complexity
mozilla CWE-668
6.5
2021-02-16 CVE-2021-27236 Exposure of Resource to Wrong Sphere vulnerability in Mutare Voice 3.0.0/3.2.6/3.3.7
An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8.
network
low complexity
mutare CWE-668
critical
9.8
2021-02-04 CVE-2020-27872 Exposure of Resource to Wrong Sphere vulnerability in Netgear products
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers.
low complexity
netgear CWE-668
8.8
2021-01-28 CVE-2020-26272 Exposure of Resource to Wrong Sphere vulnerability in Electronjs Electron
The Electron framework lets you write cross-platform desktop applications using JavaScript, HTML and CSS.
network
low complexity
electronjs CWE-668
6.5
2021-01-08 CVE-2020-26186 Exposure of Resource to Wrong Sphere vulnerability in Dell Inspiron 5675 Firmware
Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability.
low complexity
dell CWE-668
6.8
2020-12-29 CVE-2020-16268 Exposure of Resource to Wrong Sphere vulnerability in 1E Client 4.1.0.267/5.0.0.745
The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevated privileges via the repair option.
network
low complexity
1e CWE-668
8.8
2020-12-09 CVE-2020-26261 Exposure of Resource to Wrong Sphere vulnerability in Jupyterhub Systemdspawner
jupyterhub-systemdspawner enables JupyterHub to spawn single-user notebook servers using systemd.
local
low complexity
jupyterhub CWE-668
7.9
2020-11-24 CVE-2015-9550 Exposure of Resource to Wrong Sphere vulnerability in Totolink products
An issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1-B20150708.1646 devices.
network
low complexity
totolink CWE-668
7.5