CWE-610
Externally Controlled Reference to a Resource in Another Sphere
The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.
239 vulnerabilities with CWE-610
CVE-2023-35838
MEDIUM
WireGuard 0.5.3 - Privilege Escalation
CVSS 5.7
CVE-2023-37856
MEDIUM
PHOENIX CONTACT WP 6xxx - Info Disclosure
CVSS 4.3
CVE-2023-37855
MEDIUM
PHOENIX CONTACT WP 6xxx - Info Disclosure
CVSS 4.3
CVE-2023-38046
MEDIUM
Palo Alto Networks PAN-OS - Info Disclosure
CVSS 5.5
CVE-2023-3256
HIGH
Advantech R-SeeNet <2.4.22 - Info Disclosure
CVSS 8.8
CVE-2023-33188
MEDIUM
Omni-notes < 6.2.6 - Unintended File Copy via Insufficient Path Validation
CVSS 6.3
CVE-2023-32076
MEDIUM
in-toto < 1.4.0 - Configuration Manipulation via .in_totorc File
CVSS 5.5
CVE-2023-0008
MEDIUM
Palo Alto Networks PAN-OS - Info Disclosure
CVSS 4.4
CVE-2023-30943
MEDIUM
Moodle 4.1.0-4.1.2 - Unauthenticated Arbitrary Folder Creation via TinyMCE Loader
CVSS 6.5
CVE-2023-0045
MEDIUM
Linux Kernel 3.16.68-3.17 - Branch Target Injection via prctl Syscall
CVSS 4.7
CVE-2023-21097
HIGH
Android 11-13 - Local Privilege Escalation via Intent toUriInner Confused Deputy
CVSS 7.8
CVE-2023-2152
MEDIUM
SourceCodester Student Study Center Desk Management System 1.0 - Fi...
CVSS 5.3
CVE-2023-22616
HIGH
Insyde InsydeH2O 5.2-5.5 - SMRAM Corruption via IhisiSmm Driver Save State Register
CVSS 7.8
CVE-2023-20964
HIGH
Android - Intent Rebroadcast via MediaSessionRecord Confused Deputy
CVSS 7.8
CVE-2023-0003
MEDIUM
Palo Alto Networks Cortex XSOAR - Info Disclosure
CVSS 6.5
CVE-2022-23439
MEDIUM
Fortinet Products - Host Header Web Cache Poisoning
CVSS 4.7
CVE-2022-46869
HIGH
Acronis Cyber Protect Home Office <build 40278 - Privilege Escalation
CVSS 7.8
CVE-2022-46868
HIGH
Acronis Cyber Protect Home Office <40173 - Privilege Escalation
CVSS 7.8
CVE-2022-43513
HIGH
Automation License Manager - Unauth RCE
CVSS 8.2
CVE-2022-34669
HIGH
NVIDIA Virtual GPU < 11.11 and Cloud Gaming < 527.27 - Unauthenticated Arbitrary File Access
CVSS 8.8
CVE-2022-3032
MEDIUM
Thunderbird <102.2.1-<91.13.1 - XSS
CVSS 6.5
CVE-2022-20550
HIGH
Android 13 - Local Privilege Escalation via Confused Deputy in Activity Launch
CVSS 7.8
CVE-2022-20515
MEDIUM
Android 13 - Local Information Disclosure via AccountTypePreferenceLoader
CVSS 5.5
CVE-2022-20199
MEDIUM
Android 13 - Local Information Disclosure via NFC Tag Handling
CVSS 5.5
CVE-2022-45918
MEDIUM
ILIAS < 7.16 - Path Traversal
CVSS 6.5
Details
Vulnerabilities
239