Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-669 (在范围间的资源转移不正确) — Vulnerability Class 41

41 vulnerabilities classified as CWE-669 (在范围间的资源转移不正确). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2024-38519 yt-dlp and youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization — yt-dlp 7.8 High2024-07-02
CVE-2024-37891 Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3 — urllib3 4.4 Medium2024-06-17
CVE-2024-29018 External DNS requests from 'internal' networks could lead to data exfiltration — moby 5.9 Medium2024-03-20
CVE-2023-41894 Local-only webhooks externally accessible via SniTun in Home Assistant Core — core 5.3 Medium2023-10-19
CVE-2022-46173 Elrond go Processing: fallback search of SCRs when not found in the main cache — elrond-go 7.2 High2022-12-28
CVE-2022-39225 Parse Server subject to Incorrect Resource Transfer Between Spheres — parse-server 4.3 Medium2022-09-23
CVE-2022-35916 Cross chain utilities for Arbitrum L2 see EOA calls as cross chain calls — openzeppelin-contracts 5.3 Medium2022-08-01
CVE-2022-30236 Schneider Electric Wiser Smart 安全漏洞 — Wiser Smart 8.2 High2022-06-02
CVE-2021-22806 Schneider Electric 多款产品安全漏洞 — spaceLYnk (V2.6.1 and prior), Wiser for KNX (V2.6.1 and prior), fellerLYnk (V2.6.1 and prior) 7.5 -2022-02-11
CVE-2021-34574 Password policy evasion in products of MB connect line and Helmholz — mymbCONNECT24 4.3 Medium2021-08-02
CVE-2020-15257 containerd-shim API Exposed to Host Network Containers — containerd 5.2 Medium2020-12-01

Vulnerabilities classified as CWE-669 (在范围间的资源转移不正确) represent 41 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.