Skip to content
Noroxi

CWE-669 · 108 records

Incorrect Resource Transfer Between Spheres

CVEs in this class

109 records

  • CVE-2026-31431
    62This week

    crypto: algif_aead - Revert to operating out-of-place

    HighCVSS 7.8KEVWeaponizedEPSS 3%

    linux · linux kernelApr 22, 2026

  • CVE-2026-25253
    42Plan

    OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket conne

    HighCVSS 8.8Proof of conceptEPSS 24%

    openclaw · openclawFeb 1, 2026

  • CVE-2020-1048
    40Plan

    Windows Print Spooler Elevation of Privilege Vulnerability

    HighCVSS 7.8WeaponizedEPSS 16%

    microsoft · windows 10May 21, 2020

  • CVE-2016-5062
    40Plan

    The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote att

    CriticalCVSS 9.8No exploitEPSS 3%

    aternity · aternitySep 29, 2016

  • CVE-2020-15892
    39Monitor

    An issue was discovered in apply.cgi on D-Link DAP-1520 devices before 1.10b04Beta02.

    CriticalCVSS 9.8No exploitEPSS 1%

    dlink · dap-1520 firmwareJul 22, 2020

  • CVE-2020-5800
    39Monitor

    The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify info

    CriticalCVSS 9.8No exploitEPSS 1%

    eat spray love project · eat spray loveDec 7, 2020

  • CVE-2025-67895
    39Monitor

    Apache Airflow Providers Edge3: Edge3 Worker RPC RCE on Airflow 2

    CriticalCVSS 9.8No exploitEPSS 0%

    apache · apache-airflow-providers-edge3Dec 17, 2025

  • CVE-2026-75003
    39Monitor

    In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url() in a FuncIRI attribute of an SVG image could evade the remote i

    CriticalCVSS 9.8No exploitEPSS 0%

    roundcube · webmailAug 17, 2026

  • CVE-2019-11875
    36Monitor

    In AutomateAppCore.dll in Blue Prism Robotic Process Automation 6.4.0.8445, a vulnerability in access control can be exploited to escalate p

    HighCVSS 8.8No exploitEPSS 2%

    blueprism · robotic process automationMay 24, 2019

  • CVE-2023-31114
    36Monitor

    An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300.

    CriticalCVSS 9.1No exploitEPSS 0%

    samsung · exynos 5123 firmwareJun 7, 2023

  • CVE-2026-20194
    36Monitor

    Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilities

    CriticalCVSS 9.1No exploitEPSS 0%

    cisco · cisco identity services engine softwareSep 16, 2026

  • CVE-2026-33265
    36Monitor

    In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API.

    CriticalCVSS 9.0No exploitEPSS 0%

    librechat · librechatMar 18, 2026

  • CVE-2021-45891
    35Monitor

    An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4., that allows attackers to escalate privileges within the application, since all

    HighCVSS 8.8No exploitEPSS 1%

    zauner · arcApr 4, 2022

  • CVE-2020-25917
    35Monitor

    Stratodesk NoTouch Center before 4.4.68 is affected by: Incorrect Access Control.

    HighCVSS 8.8No exploitEPSS 1%

    stratodesk · notouch centerDec 25, 2020

  • CVE-2019-13263
    35Monitor

    D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the sa

    HighCVSS 8.8No exploitEPSS 1%

    dlink · dir-825\/ac g1 firmwareAug 27, 2019

  • CVE-2019-13266
    35Monitor

    TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are

    HighCVSS 8.8No exploitEPSS 0%

    tp-link · archer c3200 v1 firmwareAug 27, 2019

  • CVE-2026-92952
    35Monitor

    vm2 3.11.4 through 3.11.6 Sandbox Symbol Filtering Bypass

    HighCVSS 8.9No exploitEPSS 0%

    patriksimek · vm2Sep 17, 2026

  • CVE-2025-41660
    35Monitor

    CODESYS Control Boot Application Replacement Enables Code Execution

    HighCVSS 8.8No exploitEPSS 0%

    codesys · codesys control rte (sl)Mar 24, 2026

  • GHSA-r2c6-8jc8-g32w
    35Monitor

    Duplicate Advisory: 1-Click RCE via Authentication Token Exfiltration From gatewayUrl

    HighCVSS 8.8No exploit

    npm · clawdbotFeb 2, 2026

  • CVE-2025-34158
    34Monitor

    Plex Media Server (PMS) 1.41.7.x through 1.42.0.x before 1.42.1 is affected by incorrect resource transfer between spheres because /myplex/a

    HighCVSS 8.5Proof of conceptEPSS 0%

    plex · media serverAug 21, 2025

  • CVE-2026-46448
    34Monitor

    In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data.

    HighCVSS 8.5No exploitEPSS 0%

    openstack · novaJun 16, 2026

  • CVE-2025-41645
    34Monitor

    SMA: Sunny Portal demo system privilege escalation

    HighCVSS 8.6No exploitEPSS 0%

    sma · www.sunnyportal.comMay 13, 2025

  • CVE-2026-14151
    33Monitor

    Inappropriate implementation in AI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer proces

    HighCVSS 8.3No exploitEPSS 0%

    google · chromeJun 30, 2026

  • CVE-2021-30120
    32Monitor

    2FA bypass in Kaseya VSA <= v9.5.6

    HighCVSS 7.5No exploitEPSS 5%

    kaseya · vsaJul 9, 2021

  • CVE-2022-30236
    32Monitor

    A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could allow unauthorized access when an attacker uses cross

    HighCVSS 8.2No exploitEPSS 0%

    schneider-electric · wiser smart eer21000 firmwareJun 2, 2022

All vulnerability classes