Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2026/05/12 8:21 p.m.3 views

CVE-2026-34327

Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network...

8.2CVSS5.8AI score0.00217EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/07 8:58 p.m.3 views

CVE-2026-34327

Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network...

8.2CVSS5.8AI score0.00217EPSS
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2026/05/07 2:0 p.m.5 views

Microsoft Partner Center Spoofing Vulnerability

Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network...

8.2CVSS5.8AI score0.00217EPSS
Exploits0
NVD
NVD
added 2025/09/16 2:15 p.m.1 views

CVE-2025-8057

Authorization Bypass Through User-Controlled Key, Externally Controlled Reference to a Resource in Another Sphere, Improper Authorization vulnerability in Patika Global Technologies HumanSuite allows Exploiting Trust in Client.This issue affects HumanSuite: before 53.21.0...

6.5CVSS0.0006EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/09/03 12:0 a.m.2 views

PT-2022-4657 · Qnap · Qnap Nas +1

Name of the Vulnerable Software and Affected Versions: QNAP NAS running Photo Station versions prior to 5.2.14 QNAP NAS running Photo Station versions prior to 5.4.15 QNAP NAS running Photo Station versions prior to 5.7.18 QNAP NAS running Photo Station versions prior to 6.0.22 QNAP NAS running...

10CVSS9.6AI score0.93119EPSS
Exploits0References7
OSV
OSV
added 2021/04/30 5:29 p.m.25 views

GHSA-QGCG-P3V2-9H4P Externally Controlled Reference to a Resource in Another Sphere and Confused Deputy in Spring Cloud Netflix

Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupported versions allow applications to use the Hystrix Dashboard proxy.stream endpoint to make requests to any server reachable by the server hosting the dashboard. A malicious user, or attacker, can...

6.5CVSS6.5AI score0.92217EPSS
Exploits0References2
OSV
OSV
added 2021/04/28 8:15 a.m.0 views

CVE-2021-27648

Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essential before 1.4.8-2801 allows remote authenticated users to obtain privilege via unspecified vectors...

8.8CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2019/05/22 8:29 p.m.1 views

CVE-2018-7824

An Externally Controlled Reference to a Resource CWE-610 vulnerability exists in Schneider Electric Modbus Serial Driver For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior which could allow write acce...

4.9CVSS5.8AI score
Exploits0References1
Rows per page
Query Builder