CWE-610

Externally Controlled Reference to a Resource in Another Sphere

Parent: CWE-664 - Improper Control of a Resource Through its Lifetime

The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.

239 vulnerabilities with CWE-610

CVE-2019-7290 CRITICAL

Shortcuts < 2.1.3 - Sandbox Restriction Bypass

CVSS 10.0

CVE-2019-3996 MEDIUM

elog < 3.1.4-57bea22 - Unauthenticated HTTP Request Smuggling via Crafted POST Requests

CVSS 6.5

CVE-2019-15744 LOW

Sony Xperia XZs - Privilege Escalation

CVSS 3.3

CVE-2019-15743 MEDIUM

Sony Xperia Touch - Privilege Escalation

CVSS 5.5

CVE-2019-15475 MEDIUM

Xiaomi Mi A3 Firmware - Unauthorized Microphone Audio Recording via Confused Deputy Attack

CVSS 5.5

CVE-2019-15474 MEDIUM

Xiaomi Cepheus Android - Info Disclosure

CVSS 5.5

CVE-2019-15473 MEDIUM

Xiaomi Mi A2 Lite - Privilege Escalation

CVSS 5.5

CVE-2019-15472 MEDIUM

Xiaomi Mi A2 Lite - Info Disclosure

CVSS 5.5

CVE-2019-15468 MEDIUM

Xiaomi Mi A2 Lite - Confused Deputy

CVSS 5.5

CVE-2019-15467 LOW

Xiaomi Mi Mix 2S Firmware - Unauthorized Wireless Settings Modification via Confused Deputy Attack

CVSS 3.3

CVE-2019-15466 LOW

Xiaomi Redmi 6 Pro - Confused Deputy

CVSS 3.3

CVE-2019-15429 HIGH

Panasonic ELUGA_I9 - Command Injection

CVSS 7.8

CVE-2019-15428 LOW

Xiaomi Mi Note 2 - Unauthorized Access

CVSS 3.3

CVE-2019-15427 LOW

Xiaomi Mi Mix <6.0.1 - Info Disclosure

CVSS 3.3

CVE-2019-15426 LOW

Xiaomi 5S Plus Firmware - Unauthorized Wireless Settings Modification via Confused Deputy Attack

CVSS 3.3

CVE-2019-15425 LOW

Kata M4s Firmware - Unauthorized Wireless Settings Modification via Confused Deputy Attack

CVSS 3.3

CVE-2019-15424 LOW

Doogee BL5000 Firmware - Unauthorized Wireless Settings Modification via Confused Deputy Attack

CVSS 3.3

CVE-2019-15423 LOW

Bluboo S1 Firmware - Unauthorized Wireless Settings Modification via Confused Deputy Attack

CVSS 3.3

CVE-2019-15422 LOW

Doogee Mix Firmware - Unauthorized Wireless Settings Modification via Confused Deputy Attack

CVSS 3.3

CVE-2019-15421 LOW

Blackview BV7000_Pro - Confused Deputy

CVSS 3.3

CVE-2019-15420 LOW

Blackview BV9000Pro-F - Confused Deputy

CVSS 3.3

CVE-2019-15419 HIGH

Asus ASUS_X015_1 - Command Injection

CVSS 7.8

CVE-2019-15418 HIGH

Asus ASUS_X00K_1 - Command Injection

CVSS 7.8

CVE-2019-15415 LOW

Xiaomi Redmi 5 Firmware - Unauthorized Wireless Settings Modification via Confused Deputy Attack

CVSS 3.3

CVE-2019-15405 HIGH

Asus ASUS_X00K_1 - Command Injection

CVSS 7.8

Details

Vulnerabilities 239

Links