CWE-669 · Access Control
Incorrect Resource Transfer Between Spheres
112CVEs
SortMost likely exploited
112 CVEs with CWE-669 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-31431In CISA KEVExploitedcrypto: algif_aead - Revert to operating out-of-placeLinux · Linux · CVSS 7.8 · 2026-04-22 | 7.8 | 98% | 2026-04-22 |
| CVE-2026-111793In CISA KEVExploitedOpenwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to…Openwave Messaging (Ireland) Limited · Webtop Media Transcoder · CVSS 4.3 · 2026-10-16 | 4.3 | 0.6% | 2026-10-16 |
| CVE-2025-63387CheckDify v1.9.1 - Broken Access ControlDify · Dify · CVSS 4.3 · 2025-12-18 | 4.3 | 19% | 2025-12-18 |
| CVE-2002-0055SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfe…Microsoft · Windows 2000 · 2002-06-25 | – | 38% | 2002-06-25 |
| CVE-2026-25253OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a toke…OpenClaw · OpenClaw · CVSS 8.8 · 2026-02-01 | 8.8 | 32% | 2026-02-01 |
| CVE-2020-1048Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.8 · 2020-05-21 | 7.8 | 17% | 2020-05-21 |
| CVE-2020-6862V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could log in directly to obtain page information without entering a…ZTE Corporation · F6x2W · 2020-01-17 | – | 6.3% | 2020-01-17 |
| CVE-2021-301202FA bypass in Kaseya VSA <= v9.5.6Kaseya · Vsa · CVSS 9.9 · 2021-07-09 | 9.9 | 5.7% | 2021-07-09 |
| CVE-2016-5062The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code b…Aternity · Aternity · 2016-09-29 | – | 3.9% | 2016-09-29 |
| CVE-2020-15257containerd-shim API Exposed to Host Network Containerscontainerd · containerd · CVSS 5.2 · 2020-12-01 | 5.2 | 3.1% | 2020-12-01 |
| CVE-2004-0872Opera does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote at…Opera · Opera Browser · 2005-02-13 | – | 2.7% | 2005-02-13 |
| CVE-2019-11875In AutomateAppCore.dll in Blue Prism Robotic Process Automation 6.4.0.8445, a vulnerability in access control can be exploited to escalate privileges. The vulnerability allows for…Blueprism · Robotic Process Automation · 2019-05-24 | – | 2.2% | 2019-05-24 |
| CVE-2018-17791Newgen OmniFlow Intelligent Business Process Suite (iBPS) 7.0 has an "improper server side validation" vulnerability where client-side validations are tampered, and inappropriate…Newgensoft · Omniflow Intelligent Business Process Suite · 2019-08-21 | – | 1.9% | 2019-08-21 |
| CVE-2012-2979FreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process (SIGSEGV) and cause a denial of service in the NSD server.nsd3 · nsd3 · 2019-11-01 | – | 1.7% | 2019-11-01 |
| CVE-2020-15892An issue was discovered in apply.cgi on D-Link DAP-1520 devices before 1.10b04Beta02. Whenever a user performs a login action from the web interface, the request values are being…Dlink · Dap-1520 Firmware · 2020-07-22 | – | 1.6% | 2020-07-22 |
| CVE-2020-5800The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally ha…Eat Spray Love Project · Eat Spray Love · 2020-12-07 | – | 1.6% | 2020-12-07 |
| CVE-2021-45891An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4., that allows attackers to escalate privileges within the application, since all permission checks are done client-side…Zauner · Arc · 2022-04-05 | – | 1.4% | 2022-04-05 |
| CVE-2019-1020011SmokeDetector intentionally does automatic deployments of updated copies of SmokeDetector without server operator authority.SmokeDetector · SmokeDetector · CVSS 9 · 2019-07-29 | 9.0 | 1.3% | 2019-07-29 |
| CVE-2020-25917Stratodesk NoTouch Center before 4.4.68 is affected by: Incorrect Access Control. A low privileged user on the platform, for example a user with "helpdesk" privileges, can perform…Stratodesk · Notouch Center · 2020-12-26 | – | 1.3% | 2020-12-26 |
| CVE-2019-13263D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP Request is sent to th…Dlink · Dir-825/ac G1 Firmware · 2019-08-27 | – | 1.2% | 2019-08-27 |
| CVE-2025-67895Apache Airflow Providers Edge3: Edge3 Worker RPC RCE on Airflow 2Apache Software Foundation · Apache Airflow Providers Edge3 · CVSS 9.8 · 2025-12-17 | 9.8 | 1.2% | 2025-12-17 |
| CVE-2024-37891Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3urllib3 · urllib3 · CVSS 4.4 · 2024-06-17 | 4.4 | 1.1% | 2024-06-17 |
| CVE-2019-13266TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP…Tp-Link · Archer C3200 V1 Firmware · 2019-08-27 | – | 1.0% | 2019-08-27 |
| CVE-2021-22806A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data exfiltration and unauthorized access when accessing a malicious website. Affected…Schneider-Electric · spaceLYnk (V2.6.1 and prior), Wiser for KNX (V2.6.1 and prior), fellerLYnk (V2.… · 2022-02-11 | – | 1.0% | 2022-02-11 |
| CVE-2020-10778In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled attribute from the fields since there is no server-side vali…Redhat · CloudForms · 2020-08-11 | – | 0.9% | 2020-08-11 |
| CVE-2021-29960Firefox used to cache the last filename used for printing a file. When generating a filename for printing, Firefox usually suggests the web page title. The caching and suggestion…Mozilla · Firefox · 2021-06-24 | – | 0.8% | 2021-06-24 |
| CVE-2022-30236A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could allow unauthorized access when an attacker uses cross-domain attacks. Affected Products: Wis…Schneider Electric · Wiser Smart · CVSS 8.2 · 2022-06-02 | 8.2 | 0.8% | 2022-06-02 |
| CVE-2022-46173Elrond go Processing: fallback search of SCRs when not found in the main cacheElrondNetwork · elrond-go · CVSS 7.2 · 2022-12-28 | 7.2 | 0.8% | 2022-12-28 |
| CVE-2024-29018External DNS requests from 'internal' networks could lead to data exfiltrationmoby · moby · CVSS 5.9 · 2024-03-20 | 5.9 | 0.7% | 2024-03-20 |
| CVE-2019-10753In all versions prior to version 3.9.6 for eclipse-wtp, all versions prior to version 9.4.4 for eclipse-cdt, and all versions prior to version 3.0.1 for eclipse-groovy, Spotless w…Diffplug · Spotless · 2019-09-05 | – | 0.7% | 2019-09-05 |
| CVE-2023-22950An issue was discovered in TigerGraph Enterprise Free Edition 3.x. Data loading jobs in gsql_server, created by any user with designer permissions, can read sensitive data from ar…Tigergraph · Tigergraph · CVSS 6.5 · 2023-04-13 | 6.5 | 0.7% | 2023-04-13 |
| CVE-2021-34574Password policy evasion in products of MB connect line and HelmholzMB connect line · mymbCONNECT24 · CVSS 4.3 · 2021-08-02 | 4.3 | 0.7% | 2021-08-02 |
| CVE-2020-26177In tangro Business Workflow before 1.18.1, a user's profile contains some items that are greyed out and thus are not intended to be edited by regular users. However, this restrict…Tangro · Business Workflow · CVSS 4.3 · 2020-12-18 | 4.3 | 0.6% | 2020-12-18 |
| CVE-2025-34158Plex Media Server (PMS) 1.41.7.x through 1.42.0.x before 1.42.1 is affected by incorrect resource transfer between spheres because /myplex/account provides the credentials of the…Plex · Media Server · CVSS 8.5 · 2025-08-21 | 8.5 | 0.6% | 2025-08-21 |
| CVE-2022-35916Cross chain utilities for Arbitrum L2 see EOA calls as cross chain callsOpenZeppelin · openzeppelin-contracts · CVSS 5.3 · 2022-08-01 | 5.3 | 0.6% | 2022-08-01 |
| CVE-2026-48847Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session poisoning bypass.Roundcube · Webmail · CVSS 3.7 · 2026-05-25 | 3.7 | 0.6% | 2026-05-25 |
| CVE-2023-31114An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer between spheres can cause unintended querying of the SIM st…Samsung · Exynos 5123 Firmware · CVSS 9.1 · 2023-06-07 | 9.1 | 0.6% | 2023-06-07 |
| CVE-2025-62646The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows remote attackers to review the stored audio of conversations between associates and Drive Th…Restaurant Brands International · assistant platform · CVSS 5 · 2025-10-17 | 5.0 | 0.5% | 2025-10-17 |
| CVE-2026-71194In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist acros…OpenStack · Designate · CVSS 6.8 · 2026-08-12 | 6.8 | 0.5% | 2026-08-12 |
| CVE-2023-41894Local-only webhooks externally accessible via SniTun in Home Assistant Corehome-assistant · core · CVSS 5.3 · 2023-10-19 | 5.3 | 0.5% | 2023-10-19 |
| CVE-2022-39225Parse Server subject to Incorrect Resource Transfer Between Spheresparse-community · parse-server · CVSS 4.3 · 2022-09-23 | 4.3 | 0.5% | 2022-09-23 |
| CVE-2023-31115An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer between spheres can cause changes to the activation mode of…Samsung · Exynos 5123 Firmware · CVSS 7.5 · 2023-06-07 | 7.5 | 0.5% | 2023-06-07 |
| CVE-2026-75003In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url() in a FuncIRI attribute of an SVG image could evade the remote image blocking, which may lead to inform…Roundcube · Webmail · CVSS 5.8 · 2026-08-17 | 5.8 | 0.5% | 2026-08-17 |
| CVE-2026-20194Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer VulnerabilitiesCisco · Cisco Identity Services Engine Software · CVSS 9.1 · 2026-09-16 | 9.1 | 0.5% | 2026-09-16 |
| CVE-2025-54310qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL. This affects rsswidget.cpp and searchjobwidget.cpp.qBittorrent · qBittorrent · CVSS 4 · 2025-07-18 | 4.0 | 0.5% | 2025-07-18 |
| CVE-2026-92952vm2 3.11.4 through 3.11.6 Sandbox Symbol Filtering Bypasspatriksimek · vm2 · CVSS 6.8 · 2026-09-17 | 6.8 | 0.5% | 2026-09-17 |
| CVE-2025-41660CODESYS Control Boot Application Replacement Enables Code ExecutionCODESYS · CODESYS Control RTE (SL) · CVSS 8.8 · 2026-03-24 | 8.8 | 0.5% | 2026-03-24 |
| CVE-2021-20411IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to impersonate another user on the system due to incorrectly updating the session identifier. IBM X-Force…IBM · Security Verify Information Queue · CVSS 7.5 · 2021-02-12 | 7.5 | 0.5% | 2021-02-12 |
| CVE-2026-42997An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential…OpenStack · Ironic · CVSS 7.7 · 2026-05-05 | 7.7 | 0.4% | 2026-05-05 |
| CVE-2025-41645SMA: Sunny Portal demo system privilege escalationSMA · www.sunnyportal.com · CVSS 8.6 · 2025-05-13 | 8.6 | 0.4% | 2025-05-13 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.