CWE-829
Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.
298 vulnerabilities with CWE-829
CVE-2019-10248
HIGH
Eclipse Vorto <0.11 - Info Disclosure
CVSS 8.1
CVE-2019-10240
HIGH
Eclipse hawkBit < 0.3.0M2 - Cleartext Transmission of Sensitive Information via Maven Build Artifacts
CVSS 8.1
CVE-2019-9829
HIGH
Maccms 10 - Remote Code Execution via Template Cache File Inclusion
CVSS 8.8
CVE-2018-17246
CRITICAL
Kibana <6.4.3, 5.6.13 - Code Injection
CVSS 9.8
CVE-2018-12120
HIGH
Node.js 6.0.0-6.14.9 - Remote Code Execution via Debugger Port
CVSS 8.1
CVE-2018-18387
HIGH
playSMS < 1.4.2 - Privilege Escalation via Daemon Abuse
CVSS 8.8
CVE-2018-15486
CRITICAL
KONE Group Controller <4.6.5 - Local File Inclusion
CVSS 9.1
CVE-2018-8351
MEDIUM
Microsoft Browser < - Info Disclosure
CVSS 6.5
CVE-2018-1000502
HIGH
MyBB < 1.8.15 - Authenticated Local File Inclusion via Task Manager
CVSS 7.2
CVE-2018-11040
HIGH
Spring Framework <5.0.7 & <4.3.18 - XSS
CVSS 7.5
CVE-2018-1122
HIGH
procps-ng <3.3.15 - Privilege Escalation
CVSS 7.3
CVE-2018-7422
HIGH
Site Editor < 1.1.1 - Local File Inclusion via ajax_path Parameter
CVSS 7.5
CVE-2017-5397
CRITICAL
Firefox < 51.0.3 - Untrusted Library Loading via World-Writable Cache Directory
CVSS 9.8
CVE-2017-14095
HIGH
Trend Micro Smart Protection Server <3.2 - RCE
CVSS 8.1
CVE-2017-1376
CRITICAL
IBM Operations Analytics Predictive Insights - Privilege Escalation via J9 VM Class Verifier Bypass
CVSS 9.8
CVE-2017-6381
HIGH
Drupal < 8.2.2 - Remote Code Execution via Third-Party Development Library
CVSS 8.1
CVE-2013-3321
HIGH
NetApp OnCommand System Manager <2.1 - File Inclusion
CVSS 7.5
CVE-2013-4582
MEDIUM
GitLab <5.4.2, <6.2.4, <6.2.1 - Info Disclosure
CVSS 6.5
CVE-2013-1945
LOW
ruby193 - Inclusion of Functionality from Untrusted Control Sphere via LD_LIBRARY_PATH
CVSS 3.3
CVE-2012-4919
CRITICAL
Gallery Plugin1.4 for WordPress - RCE
CVSS 9.8
CVE-2010-2076
CRITICAL
Apache CXF 2.0.6-2.0.12, 2.1.x < 2.1.10, 2.2.x < 2.2.9 - XML External Entity Injection via SOAP DTD Processing
CVSS 9.8
CVE-2004-0285
CRITICAL
AllMyGuests AllMyLinks AllMyVisitors - Remote File Inclusion via _AMVconfig[cfg_serverpath] Parameter
CVSS 9.8
CVE-2004-0030
CRITICAL
phpgedview 2.61 - Remote File Inclusion via PGV_BASE_DIRECTORY Parameter
CVSS 9.8
Details
Vulnerabilities
298