Lucene search
+L

41 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•1 views

CVE-2026-59835: Exposure of Resource to Wrong Sphere

A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an unauthenticated attacker to access the VNC server of VMs performing scanning via network requests...

8.6CVSS5.8AI score0.00395EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/11 12:00 a.m.•2 views

CVE-2026-34094: Exposure of Resource to Wrong Sphere

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Page/Article.Php. This issue affects MediaWiki: from before 1.43.7, 1.44.4, 1.45.2...

3.8CVSS5.8AI score0.00233EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/03/17 12:46 p.m.•12 views

Exposure of Resource to Wrong Sphere

Overview apache-airflow-providers-amazon is a Provider for Apache Airflow. Implements apache-airflow-providers-amazon package Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere due to improper handling of the session token cookie path. An attacker can gain...

9.3CVSS5.8AI score0.00756EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•1 views

CVE-2025-25176: Exposure of Resource to Wrong Sphere

Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in the non-secure environment of a platform...

9.1CVSS5.8AI score0.00351EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2020-26568

Malware in sbrugna...

8.1CVSS8AI score0.01256EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/07/11 11:09 a.m.•18 views

CVE-2025-6788

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram resources to the wrong control sphere, providing other authenticated users with potentially inappropriate access to TGML diagrams...

5.3CVSS6.2AI score0.00277EPSS
SaveExploits0References1
F5 Networks
F5 Networks
•added 2024/11/21 1:46 a.m.•26 views

K000148650: Intel processor vulnerabilities CVE-2024-22185 and CVE-2024-24985

Security Advisory Description CVE-2024-22185 Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2024-24985 Exposure of resource to wrong sphere in some IntelR processor...

8.5CVSS6.7AI score0.00169EPSS
SaveExploits0
OSV
OSV
•added 2024/07/11 5:15 p.m.•14 views

CVE-2024-39553

An Exposure of Resource to Wrong Sphere vulnerability in the sampling service of Juniper Networks Junos OS Evolved allows an unauthenticated network-based attacker to send arbitrary data to the device, which leads msvcsd process to crash with limited availability impacting Denial of Service DoS a...

6.9CVSS5.9AI score0.00398EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/11 12:00 a.m.•0 views

CVE-2024-39553: Exposure of Resource to Wrong Sphere

An Exposure of Resource to Wrong Sphere vulnerability in the sampling service of Juniper Networks Junos OS Evolved allows an unauthenticated network-based attacker to send arbitrary data to the device, which leads msvcsd process to crash with limited availability impacting Denial of Service DoS a...

6.9CVSS6.7AI score0.00398EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/12 12:00 a.m.•0 views

CVE-2024-21605: Exposure of Resource to Wrong Sphere

An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX 300 Series allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. Specific valid link-local traffic is not blocked on ports in STP blocked state bu...

7.1CVSS5.8AI score0.00295EPSS
SaveExploits0References2
Veracode
Veracode
•added 2024/04/10 6:59 a.m.•18 views

Exposure Of Resource To Wrong Sphere

dirac is vulnerable to Exposure of Resource to Wrong Sphere. The vulnerability is due to the proxy generation process in ProxyFile.py, which allows unauthorized users on the same machine to read the proxy file allowing them to perform any action possible with the original proxy...

8.1CVSS6.9AI score0.00319EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/29 12:00 a.m.•0 views

CVE-2023-7204: Exposure of Resource to Wrong Sphere

The WP STAGING WordPress Backup plugin before 3.2.0 allows access to cache files during the cloning process which provides...

7.5CVSS5.8AI score0.00644EPSS
SaveExploits2References2
NVD
NVD
•added 2024/01/12 1:15 a.m.•38 views

CVE-2024-21597

An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass the intended access restrictions. In an Abstracted Fabric AF scenario if routing-instances RI are...

7.5CVSS6AI score0.00375EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/01/12 12:53 a.m.•7 views

CVE-2024-21597 Junos OS: MX Series: In an AF scenario traffic can bypass configured lo0 firewall filters

An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass the intended access restrictions. In an Abstracted Fabric AF scenario if routing-instances RI are...

5.3CVSS6AI score0.00375EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/12 12:00 a.m.•0 views

CVE-2024-21597: Exposure of Resource to Wrong Sphere

An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass the intended access restrictions. In an Abstracted Fabric AF scenario if routing-instances RI are...

7.5CVSS7.2AI score0.00375EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/01/10 12:00 a.m.•13 views

PT-2024-1131 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on MX Series versions earlier than 20.4R3-S9 Juniper Networks Junos OS on MX Series version 21.2 versions earlier than 21.2R3-S3 Juniper Networks Junos OS on MX Series version 21.4 versions earlier than 21.4R3-S5...

7.8CVSS7.4AI score0.00375EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/22 12:00 a.m.•0 views

CVE-2023-43784: Exposure of Resource to Wrong Sphere

Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat...

7.5CVSS7.2AI score0.00565EPSS
SaveExploits0References2
NVD
NVD
•added 2023/07/25 8:15 a.m.•34 views

CVE-2023-34189

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0. The attacker could use general users to delete and update the process, which only the admin can operate occurrences. Users are advised to...

6.5CVSS6.4AI score0.01286EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/07/03 12:00 a.m.•78 views

JVN#64316789: Multiple vulnerabilities in SoftEther VPN and PacketiX VPN

SoftEther VPN provided by University of Tsukuba SoftEther VPN Project and PacketiX VPN provided by SoftEther Corporation contain multiple vulnerabilities listed below in VPN Client function, and Dynamic DNS Client function included in the VPN server. Heap-based buffer overflow CWE-122 -...

9CVSS7.5AI score0.01543EPSS
SaveExploits6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/30 12:00 a.m.•1 views

CVE-2023-32613: Exposure of Resource to Wrong Sphere

Exposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow a network-adjacent attacker to use functions originally available after login without logging in...

8.1CVSS7.1AI score0.00287EPSS
SaveExploits0References2
Rows per page
Query Builder