CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- linux kernelThe sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not...4.0 Medium
- bestpractical rtBest Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable...3.5 Low
- atlassian jira, gliffy, atlassian confluence server +2 moreThe Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does...6.4 Medium
- hp business service managementHP Business Service Management (BSM) 9.12 does not properly restrict the uploading of .war files,...10.0 High
- geoff davies contact formsThe Contact Forms module 7.x-1.x before 7.x-1.2 for Drupal does not specify sufficiently...3.5 Low
- symantec web gatewayThe file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3...10.0 High
- symantec web gatewayThe file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3...6.4 Medium
- symantec web gatewayThe management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access...10.0 High
- artiphp cmsArtiphp CMS 5.5.0 Neo (r422) stores database backups with predictable names under the web root...5.0 Medium
- sympaThe archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does...7.5 High
- connmanConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows...7.8 High
- debian texlive-extra-utilslatex2man in texlive-extra-utils 2011.20120322, and possibly other versions or packages, when...3.3 Low
- hp openvmsThe ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1,...6.9 Medium
- todd miller sudosudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support...7.2 High
- linux kernelMultiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3...7.2 High
- linux kernelThe KVM implementation in the Linux kernel before 3.3.4 does not properly manage the...4.9 Medium
- google chrome, opensuse +1 moreGoogle Chrome before 19.0.1084.46 on Windows uses an incorrect search path for the Windows Media...7.2 High
- google chromeGoogle Chrome before 19.0.1084.46 does not use a dedicated process for the loading of links found...7.5 High
- basercmsapp/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in...5.1 Medium
- linux kernel, novell suse linux enterprise server, redhat enterprise linux +5 more +7 moreThe rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does...1.2 Low
- phpphp-wrapper.fcgi does not properly handle command-line arguments, which allows remote attackers...7.5 High
- apple mac os x, mac os x server +1 moreQuartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled,...2.1 Low
- hp performance insightUnspecified vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41...9.0 High
- microsoft excel, excel viewer, office +1 more +3 moreMicrosoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac;...9.3 High
- microsoft excel, excel viewer, office compatibility pack +2 moreHeap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel...9.3 High
- microsoft excel, excel viewer, office +1 more +3 moreMicrosoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac;...9.3 High
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 morewin32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003...7.2 High
- microsoft windows 7, windows server 2008 +1 moreDouble free vulnerability in tcpip.sys in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows...7.2 High
- microsoft windows 7, windows server 2008, windows vista +2 moreRace condition in partmgr.sys in Windows Partition Manager in Microsoft Windows Vista SP2,...7.2 High
- microsoft windows 7, windows server 2008, windows vista +2 moreWindows Firewall in tcpip.sys in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2...1.7 Low
- oracle database serverThe TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0...7.5 High
- ibm aix, vios +1 moreThe getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not...7.2 High
- ibm rational appscanIBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1, when Integrated Windows...6.0 Medium
- cisco iosThe extended ACL functionality in Cisco IOS 12.2(58)SE2 and 15.0(1)SE discards all lines that end...4.3 Medium
- cisco ip communicatorThe sccp-protocol component in Cisco IP Communicator (CIPC) 7.0 through 8.6 does not limit the...5.0 Medium
- cisco iosCisco IOS 12.4 and 15.0 through 15.2 allows physically proximate attackers to bypass the No...3.6 Low
- quest toad for data analystsQuest Toad for Data Analysts 3.0.1 uses weak permissions (Everyone: Full Control) for the ...6.9 Medium
- pythonpaste pastePaste Script has improper group memberships permissions5.1 Medium
- htc evo 3d, evo 4g, evo design 4g +11 more +13 moreThe HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12...6.4 Medium
- sambaThe (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC...6.5 Medium
- squid-cache squid** DISPUTED ** Squid 3.1.9 allows remote attackers to bypass the access configuration for the...5.0 Medium
- mcafee web gateway** DISPUTED ** McAfee Web Gateway 7.0 allows remote attackers to bypass the access configuration...5.0 Medium
- tp-link 8840tThe default configuration of the TP-Link 8840T router enables web-based administration on the WAN...7.5 High
- netgear prosafe fvs318nThe default configuration of the NETGEAR ProSafe FVS318N firewall enables web-based...7.5 High
- mozilla bugzillatemplate/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x...4.0 Medium
- mozilla bugzillaBugzilla 3.5.x and 3.6.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4...4.3 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe texImage2D implementation in the WebGL subsystem in Mozilla Firefox 4.x through 11.0, Firefox...9.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 do not...2.6 Low
- linux kernelarch/x86/kernel/tls.c in the Thread Local Storage (TLS) implementation in the Linux kernel...2.1 Low
- linux kernel, opensuse evergreen, redhat enterprise linux desktop +3 more +5 moreThe Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for...2.1 Low
- Show moreLoading…