Exposure of Resource to Wrong Sphere

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

CVEs (763)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-20694 1Microsoft 11Windows 10 1607 Windows 10 1809Windows 10 21h2+8 more Jun 17, 2026 Jan 9, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows CoreMessaging Information Disclosure Vulnerability
CVE-2024-20692 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Jan 9, 2024 N/A· v4 5.7 MEDIUM· v3 N/A· v2 Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
CVE-2023-48291 1Apache 1Airflow Jun 17, 2026 Dec 21, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG re...Show more Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn't. This is a missing fix for CVE-2023-42792 in Apache Airflow 2.7.2 Users of Apache Airflow are strongly advised to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability.Show less
CVE-2023-49347 1Ubuntubudgie 1Budgie Extras Jun 17, 2026 Dec 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to t...Show more Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may read private information from windows, present false information to users, or deny access to the application.Show less
CVE-2023-49346 1Ubuntubudgie 1Budgie Extras Jun 17, 2026 Dec 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Temporary data passed between application components by Budgie Extras WeatherShow applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to...Show more Temporary data passed between application components by Budgie Extras WeatherShow applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false information to users or deny access to the application and panel.Show less
CVE-2023-49345 1Ubuntubudgie 1Budgie Extras Jun 17, 2026 Dec 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Temporary data passed between application components by Budgie Extras Takeabreak applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to...Show more Temporary data passed between application components by Budgie Extras Takeabreak applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false information to users or deny access to the application and panel.Show less
CVE-2023-49344 1Ubuntubudgie 1Budgie Extras Jun 17, 2026 Dec 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Temporary data passed between application components by Budgie Extras Window Shuffler applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local acces...Show more Temporary data passed between application components by Budgie Extras Window Shuffler applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false information to users or deny access to the application and panel.Show less
CVE-2023-49343 1Ubuntubudgie 1Budgie Extras Jun 17, 2026 Dec 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the...Show more Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false information to users or deny access to the application and panel.Show less
CVE-2023-49342 1Ubuntubudgie 1Budgie Extras Jun 17, 2026 Dec 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Temporary data passed between application components by Budgie Extras Clockworks applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to...Show more Temporary data passed between application components by Budgie Extras Clockworks applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false information to users or deny access to the application and panel.Show less
CVE-2023-41120 1Enterprisedb 1Postgres Advanced Server Jun 17, 2026 Dec 12, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It permits an authenticated user to use DBM...Show more An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It permits an authenticated user to use DBMS_PROFILER to remove all accumulated profiling data on a system-wide basis, regardless of that user's permissions.Show less
CVE-2023-39171 1Enbw 1Senec Storage Box Firmware Jun 17, 2026 Dec 7, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 SENEC Storage Box V1,V2 and V3 accidentially expose a management UI accessible with publicly known admin credentials.
CVE-2023-42718 1Google 1Android Jun 17, 2026 Dec 4, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In dialer, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVE-2023-42717 1Google 1Android Jun 17, 2026 Dec 4, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed
CVE-2023-42716 1Google 1Android Jun 17, 2026 Dec 4, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed
CVE-2023-42715 1Google 1Android Jun 17, 2026 Dec 4, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVE-2023-41786 1Artica 1Pandora Fms Jun 17, 2026 Nov 23, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pandora FMS on all allows File Discovery. This vulnerability allows users with low privileges to download database backups. This issue affects P...Show more Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pandora FMS on all allows File Discovery. This vulnerability allows users with low privileges to download database backups. This issue affects Pandora FMS: from 700 through 772.Show less
CVE-2023-36013 1Microsoft 1Powershell Jun 17, 2026 Nov 20, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 PowerShell Information Disclosure Vulnerability
CVE-2023-36043 1Microsoft 1System Center Operations Manager Jun 17, 2026 Nov 14, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Open Management Infrastructure Information Disclosure Vulnerability
CVE-2023-5545 2Fedoraproject Moodle 3Extra Packages For Enterprise Linux FedoraMoodle Jun 17, 2026 Nov 9, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 H5P metadata automatically populated the author with the user's username, which could be sensitive information.
CVE-2023-5542 2Fedoraproject Moodle 3Extra Packages For Enterprise Linux FedoraMoodle Jun 17, 2026 Nov 9, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Students in "Only see own membership" groups could see other students in the group, which should be hidden.

Previous 1...8910...39 Next