Skip to content
Noroxi

CWE-610 · 162 records

Externally Controlled Reference to a Resource in Another Sphere

CVEs in this class

162 records

  • CVE-2022-27593
    92Now

    An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station.

    CriticalCVSS 9.1KEVWeaponizedEPSS 87%

    qnap · photo stationSep 8, 2022

  • CVE-2022-2633
    42Plan

    The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'd

    HighCVSS 8.2Proof of conceptEPSS 33%

    plugins360 · all-in-one video gallerySep 6, 2022

  • CVE-2017-16088
    41Plan

    The safe-eval module describes itself as a safer version of eval.

    CriticalCVSS 10.0Proof of conceptEPSS 3%

    safe-eval project · safe-evalJun 6, 2018

  • CVE-2017-18357
    40Plan

    Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of the Shopware_Controll

    MediumCVSS 6.5WeaponizedEPSS 27%

    shopware · shopwareJan 15, 2019

  • CVE-2020-14057
    40Plan

    Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations.

    CriticalCVSS 9.8No exploitEPSS 2%

    monstaftp · monsta ftpJul 1, 2020

  • CVE-2022-39206
    40Plan

    CI/CD Docker Escape in OneDev

    CriticalCVSS 9.9No exploitEPSS 2%

    onedev project · onedevSep 13, 2022

  • CVE-2021-44041
    40Plan

    UiPath Assistant 21.4.4 will load and execute attacker controlled data from the file path supplied to the --dev-widget argument of the URI h

    CriticalCVSS 9.8No exploitEPSS 1%

    uipath · assistantDec 14, 2021

  • CVE-2019-7290
    40Plan

    An access issue was addressed with additional sandbox restrictions.

    CriticalCVSS 10.0No exploitEPSS 1%

    apple · shortcutsDec 18, 2019

  • CVE-2021-43685
    39Monitor

    libretime hv3.0.0-alpha.10 is affected by a path manipulation vulnerability in /blob/master/legacy/application/modules/rest/controllers/Show

    CriticalCVSS 9.8No exploitEPSS 1%

    libretime · libretime hvDec 1, 2021

  • CVE-2022-20239
    39Monitor

    remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can also

    CriticalCVSS 9.8No exploitEPSS 0%

    google · androidAug 10, 2022

  • CVE-2024-45826
    38Monitor

    ThinManager® Code Execution Vulnerability

    HighCVSS 8.5No exploitEPSS 12%

    rockwellautomation · thinmanagerSep 12, 2024

  • CVE-2024-42168
    37Monitor

    HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability

    CriticalCVSS 9.4No exploitEPSS 0%

    hcltech · dryice myxalyticsJan 10, 2025

  • CVE-2021-30245
    36Monitor

    Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlinks

    HighCVSS 8.8No exploitEPSS 4%

    apache · openofficeApr 15, 2021

  • CVE-2021-43844
    36Monitor

    Externally Controlled Reference to a Resource in Another Sphere in MSEdgeRedirect

    HighCVSS 8.8No exploitEPSS 3%

    msedgeredirect project · msedgeredirectDec 20, 2021

  • CVE-2021-27648
    36Monitor

    Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essential before 1.4.8-280

    HighCVSS 8.8No exploitEPSS 2%

    synology · antivirus essentialApr 28, 2021

  • CVE-2025-22144
    36Monitor

    Account Takeover in NamelessMC

    CriticalCVSS 9.0No exploitEPSS 0%

    namelessmc · namelessJan 13, 2025

  • CVE-2024-32980
    36Monitor

    Spin contains a potential network sandbox escape for specifically configured Spin applications

    CriticalCVSS 9.1No exploitEPSS 0%

    fermyon · spinMay 8, 2024

  • CVE-2022-24854
    35Monitor

    Database bypassing any permissions in Metabase via SQlite attach

    HighCVSS 8.8No exploitEPSS 1%

    metabase · metabaseApr 14, 2022

  • CVE-2026-57301
    35Monitor

    Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing atta

    HighCVSS 8.8No exploitEPSS 0%

    jenkins · official owasp zapJun 24, 2026

  • CVE-2026-15583
    34Monitor

    SSRF (confused deputy) in Grafana MCP Server via X-Grafana-URL header

    HighCVSS 8.6Proof of conceptEPSS 0%

    grafana · grafana mcp serverJul 15, 2026

  • CVE-2025-9065
    34Monitor

    Rockwell Automation ThinManager® Server-Side Request Forgery Vulnerability

    HighCVSS 8.6No exploitEPSS 0%

    rockwellautomation · thinmanagerSep 9, 2025

  • CVE-2025-2875
    34Monitor

    CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of confidentiality whe

    HighCVSS 8.7No exploitEPSS 0%

    schneider electric · modicon controllers m241 / m251May 14, 2025

  • CVE-2024-6717
    34Monitor

    Nomad Vulnerable to Allocation Directory Path Escape Through Archive Unpacking

    HighCVSS 8.6No exploitEPSS 0%

    hashicorp · nomadJul 22, 2024

  • CVE-2026-79256
    33Monitor

    Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromis

    HighCVSS 8.3No exploitEPSS 0%

    google · chromeAug 25, 2026

  • CVE-2026-81375
    33Monitor

    Confused Deputy in Application Integration allows Internal File Read

    HighCVSS 8.3No exploitEPSS 0%

    google cloud · application integrationSep 28, 2026

All vulnerability classes