CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- linux kernelThe aac_compat_ioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8...6.9 Medium
- linux kernelThe Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly...6.9 Medium
- linux kernel, redhat enterprise linux +1 moreInterpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6...6.0 Medium
- linux kernelThe Linux kernel before 3.12.2 does not properly use the get_dumpable function, which allows...3.3 Low
- linux kernel, redhat enterprise linux, enterprise mrg +2 moreThe chase_port function in drivers/usb/serial/io_ti.c in the Linux kernel before 3.7.4 allows...4.0 Medium
- linux kernelThe flush_signal_handlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves...3.6 Low
- linux kernelThe msr_open function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local...6.2 Medium
- linux kernel, novell suse linux enterprise server +1 moreThe sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5.7 does not ensure...4.9 Medium
- linux kernelThe ima_lsm_rule_init function in security/integrity/ima/ima_policy.c in the Linux kernel before...1.9 Low
- linux kernelThe Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of...5.2 Medium
- nvidia unix driverThe NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by...4.6 Medium
- wordpresswp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to...5.5 Medium
- moxiecode plupload, wordpress +1 morePlupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other...5.0 Medium
- emc data protection advisorThe DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5...7.8 High
- linux kernelThe cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not...7.2 High
- vmware esx, esxi, fusion +2 more +4 moreVMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1...8.3 High
- realnetworks helix mobile server, helix server +1 moremaster.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x...5.0 Medium
- artonx.org activescriptrubyGRScript18.dll before 1.2.2.0 in ActiveScriptRuby (ASR) before 1.8.7 does not properly restrict...7.5 High
- puppet, puppet enterprise, puppetlabs puppet enterprise users +2 morePuppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1...2.1 Low
- puppet, puppet enterprise, puppetlabs puppet enterprise users +2 morePuppet uses predictable filenames, allowing arbitrary file overwrite3.3 Low
- 360zip360zip 1.93beta allows remote attackers to execute arbitrary code via vectors related to file...7.5 High
- adobe acrobat, acrobat reader +1 moreThe installer in Adobe Reader 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to bypass...10.0 High
- toshibatec e-studio-167 with network printer kit, e-studio-167 with network printer kit firmware, e-studio-181 with network printer kit +61 more +63 moreThe TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral ...10.0 High
- hp onboard administratorHP Onboard Administrator (OA) before 3.50 allows remote attackers to bypass intended access...7.6 High
- f5 firepassThe sudoers file in the Linux system configuration in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0...7.2 High
- invensys wonderware information serverInvensys Wonderware Information Server 4.0 SP1 and 4.5 does not properly implement client...7.5 High
- vmware esx, esxi +1 moreVMware ESXi 3.5, 4.0, and 4.1 and ESX 3.5, 4.0, and 4.1 do not properly implement port-based I/O...8.3 High
- tryton trytondTrytond allows modification of privileges of arbitrary users5.5 Medium
- privawall antivirusThe scanner engine in PrivaWall Antivirus 5.6 and earlier does not recognize the Office XML (aka...4.3 Medium
- opera browserOpera before 11.62 on UNIX, when used in conjunction with an unspecified printing application,...4.6 Medium
- opera browserOpera before 11.62 on UNIX uses world-readable permissions for temporary files during printing,...4.6 Medium
- linux kernelRace condition in the ecryptfs_mount function in fs/ecryptfs/main.c in the eCryptfs subsystem in...3.3 Low
- ahnlab v3 internet security, aladdin esafe, authentium command antivirus +7 more +9 moreThe ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal ...4.3 Medium
- ahnlab v3 internet security, aladdin esafe, avg anti-virus +5 more +7 moreThe ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190,...4.3 Medium
- anti-virus vba32, authentium command antivirus, avg anti-virus +12 more +14 moreThe Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5,...4.3 Medium
- aladdin esafe, anti-virus vba32, antiy avl sdk +3 more +5 moreThe Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command...4.3 Medium
- ahnlab v3 internet security, anti-virus vba32, antiy avl sdk +22 more +24 moreThe TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy...4.3 Medium
- clamav, sophos anti-virus +1 moreThe Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote...4.3 Medium
- aladdin esafe, anti-virus vba32, antiy avl sdk +21 more +23 moreThe TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8...4.3 Medium
- aladdin esafe, avg anti-virus, cat quick heal +12 more +14 moreThe TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo...4.3 Medium
- eset nod32 antivirus, rising-global rising antivirus +1 moreThe CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote...4.3 Medium
- aladdin esafe, fortinet antivirus, mcafee gateway +3 more +5 moreThe ELF file parser in Dr.Web 5.0.2.03300, eSafe 7.0.17.0, McAfee Gateway (formerly Webwasher)...4.3 Medium
- antiy avl sdk, ca etrust vet antivirus, emsisoft anti-malware +10 more +12 moreThe CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti...4.3 Medium
- cat quick heal, emsisoft anti-malware, ikarus virus utilities t3 command line scanner +2 moreThe CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line...4.3 Medium
- emsisoft anti-malware, ikarus virus utilities t3 command line scanner +1 moreThe CAB file parser in Emsisoft Anti-Malware 5.1.0.1 and Ikarus Virus Utilities T3 Command Line...4.3 Medium
- emsisoft anti-malware, ikarus virus utilities t3 command line scanner, sophos anti-virus +2 moreThe CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Sophos Anti-Virus 4.61.0, and Ikarus Virus...4.3 Medium
- eset nod32 antivirus, rising-global rising antivirus +1 moreThe CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote...4.3 Medium
- cat quick heal, emsisoft anti-malware, ikarus virus utilities t3 command line scanner +2 more +4 moreThe CAB file parser in Quick Heal (aka Cat QuickHeal) 11.00, Trend Micro AntiVirus 9.120.0.1004,...4.3 Medium
- aladdin esafe, fortinet antivirus, pandasecurity panda antivirus +1 more +3 moreThe ELF file parser in Fortinet Antivirus 4.2.254.0, eSafe 7.0.17.0, Dr.Web 5.0.2.03300, and...4.3 Medium
- aladdin esafe, antiy avl sdk, ca etrust vet antivirus +9 more +11 moreThe ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5...4.3 Medium
- Show moreLoading…