CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- aladdin esafe, fortinet antivirus, pandasecurity panda antivirus +1 more +3 moreThe ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0...4.3 Medium
- aladdin esafe, fortinet antivirus, pandasecurity panda antivirus +1 more +3 moreThe ELF file parser in eSafe 7.0.17.0, Prevx 3.0, Fortinet Antivirus 4.2.254.0, and Panda...4.3 Medium
- ahnlab v3 internet security, aladdin esafe, anti-virus vba32 +23 more +25 moreThe RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal...4.3 Medium
- aladdin esafe, antiy avl sdk, cat quick heal +6 more +8 moreThe ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5...4.3 Medium
- aladdin esafe, prevx +1 moreThe Microsoft EXE file parser in eSafe 7.0.17.0 and Prevx 3.0 allows remote attackers to bypass...4.3 Medium
- aladdin esafe, ca etrust vet antivirus, fortinet antivirus +2 more +4 moreThe ELF file parser in Norman Antivirus 6.06.12, eSafe 7.0.17.0, CA eTrust Vet Antivirus 36.1...4.3 Medium
- aladdin esafe, fortinet antivirus, pandasecurity panda antivirus +1 more +3 moreThe ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0...4.3 Medium
- comodo antivirus, sophos anti-virus +1 moreThe Microsoft Office file parser in Comodo Antivirus 7425 and Sophos Anti-Virus 4.61.0 allows...4.3 Medium
- comodo antivirusThe Microsoft Office file parser in Comodo Antivirus 7425 allows remote attackers to bypass...4.3 Medium
- ahnlab v3 internet security, aladdin esafe, emsisoft anti-malware +2 more +4 moreThe Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware...4.3 Medium
- ahnlab v3 internet security, aladdin esafe, emsisoft anti-malware +2 more +4 moreThe Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware...4.3 Medium
- ahnlab v3 internet security, emsisoft anti-malware, ikarus virus utilities t3 command line scanner +1 more +3 moreThe Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware...4.3 Medium
- ahnlab v3 internet security, aladdin esafe, emsisoft anti-malware +2 more +4 moreThe Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware...4.3 Medium
- aladdin esafe, emsisoft anti-malware, ikarus virus utilities t3 command line scanner +1 more +3 moreThe Microsoft EXE file parser in Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus...4.3 Medium
- aladdin esafe, authentium command antivirus, bitdefender +4 more +6 moreThe ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe...4.3 Medium
- aladdin esafe, bitdefender, comodo antivirus +4 more +6 moreThe ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti...4.3 Medium
- aladdin esafe, comodo antivirus, emsisoft anti-malware +5 more +7 moreThe ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1,...4.3 Medium
- cat quick heal, sophos anti-virus, norman antivirus \& antispyware +2 moreThe TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos...4.3 Medium
- cat quick heal, sophos anti-virus, norman antivirus \& antispyware +2 moreThe TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos...4.3 Medium
- authentium command antivirus, cat quick heal, f-prot antivirus +2 more +4 moreThe TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot...4.3 Medium
- antiy avl sdk, avira antivir, cat quick heal +11 more +13 moreThe TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat...4.3 Medium
- antiy avl sdk, cat quick heal, jiangmin antivirus +2 more +4 moreThe TAR file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Jiangmin...4.3 Medium
- authentium command antivirus, emsisoft anti-malware, eset nod32 antivirus +5 more +7 moreThe TAR file parser in Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Prot...4.3 Medium
- cat quick heal, eset nod32 antivirus, rising-global rising antivirus +1 more +3 moreThe TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, NOD32 Antivirus 5795, Norman...4.3 Medium
- cat quick heal, rising-global rising antivirus, symantec endpoint protection +1 more +3 moreThe TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, Rising...4.3 Medium
- authentium command antivirus, cat quick heal, eset nod32 antivirus +6 more +8 moreThe TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot...4.3 Medium
- cat quick heal, clamav +1 moreThe TAR file parser in ClamAV 0.96.4 and Quick Heal (aka Cat QuickHeal) 11.00 allows remote...4.3 Medium
- ibm db2IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and...10.0 High
- dotclearUnrestricted file upload vulnerability in inc/swf/swfupload.swf in Dotclear 2.3.1 and 2.4.2...7.5 High
- gnu gnashplugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie...5.0 Medium
- tetsuya aoyama twiccaThe twicca application 0.7.0 through 0.9.30 for Android does not properly restrict the use of...5.0 Medium
- vmware esx, esxi, view +2 moreThe XPDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View...7.2 High
- pidginThe pidgin_conv_chat_rename_user function in gtkconv.c in Pidgin before 2.10.2 allows remote...6.4 Medium
- emc documentum eroomEMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote...7.5 High
- mozilla firefox, firefox esr, seamonkey +2 more +4 moreMozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0,...6.4 Medium
- mozilla firefox, firefox esr, seamonkey +2 more +4 moreThe Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR...7.5 High
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreMozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird...6.8 Medium
- apple iphone osSiri in Apple iOS before 5.1 does not properly restrict the ability of Mail.app to handle voice...1.2 Low
- apple iphone osThe kernel in Apple iOS before 5.1 does not properly handle debug system calls, which allows...9.3 High
- apple iphone osThe Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass...5.0 Medium
- estrongs es file explorerThe EStrongs ES File Explorer application 1.6.0.2 through 1.6.1.1 for Android does not properly...4.3 Medium
- cisco 2000 wireless lan controller, 2100 wireless lan controller, 2106 wireless lan controller +10 more +12 moreCisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4...9.3 High
- cisco unity connectionCisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the...9.0 High
- moodleMoodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows...5.0 Medium
- moodleThe ip_in_range function in mnet/lib.php in MNET in Moodle 1.9.x before 1.9.15 uses an incorrect...5.0 Medium
- moodleThe MNET authentication functionality in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1...4.0 Medium
- moodlemod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2...4.0 Medium
- redhat icedtea-web, canonical ubuntu linux, opensuse +2 moreThe web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote...4.3 Medium
- puppet, puppet enterprise, puppetlabs puppet enterprise users +2 morePuppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1...4.4 Medium
- puppet, puppet enterprise, puppetlabs puppet enterprise users +2 morePuppet Privilege Escallation6.9 Medium
- Show moreLoading…