Incorrect Resource Transfer Between Spheres

The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

CVEs (105)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-0042 1Juniper 1Identity Management Service Jun 17, 2026 Apr 10, 2019 N/A· v4 4.2 MEDIUM· v3 1.9 LOW· v2 Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 may send an incorrect message to associated SRX services gateways. This may allow an attacker with physical access to an existing domain conn...Show more Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 may send an incorrect message to associated SRX services gateways. This may allow an attacker with physical access to an existing domain connected Windows system to bypass SRX firewall policies, or trigger a Denial of Service (DoS) condition for the network.Show less
CVE-2017-14013 1Prominent 1Multiflex M10a Controller Firmware May 13, 2026 Oct 17, 2017 N/A· v4 5.6 MEDIUM· v3 6.8 MEDIUM· v2 A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The log out function in the application removes the user's session only on the client side. Thi...Show more A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The log out function in the application removes the user's session only on the client side. This may allow an attacker to bypass protection mechanisms, gain privileges, or assume the identity of an authenticated user.Show less
CVE-2016-5062 1Aternity 1Aternity May 6, 2026 Sep 29, 2016 N/A· v4 9.8 CRITICAL· v3 9.3 HIGH· v2 The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code by registering MBeans.
CVE-2004-0872 1Opera 1Opera Browser Apr 16, 2026 Sep 16, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Opera does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unau...Show more Opera does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."Show less
CVE-2002-0055 1Microsoft 3Exchange Server Windows 2000Windows Xp Apr 16, 2026 Mar 8, 2002 N/A· v4 N/A· v3 5.0 MEDIUM· v2 SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer (BDAT) request.

Previous 1 2 3 4 56