CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- theforeman foremanForeman before 1.7.5 allows remote authenticated users to bypass organization and location...4.0 Medium
- belkin n300 dual-band wi-fi range extender firmwareBelkin N300 Dual-Band Wi-Fi Range Extender with firmware before 1.04.10 allows remote...9.0 High
- clusterlabs pacemaker, redhat enterprise linux high availability, enterprise linux resilient storage +2 morePacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only...7.5 High
- xen, fedoraproject fedora +1 moreUse-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not completely unplug emulated...7.2 High
- mozilla firefox osThe COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content...3.3 Low
- apache activemq, oracle business intelligence publisher, fusion middleware +2 moreImproper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ7.5 High
- chiyutw bf-630, bf-630w +1 moreChiyu BF-630 and BF-630W fingerprint access-control devices allow remote attackers to bypass...7.5 High
- chiyu bf-660cChiyu BF-660C fingerprint access-control devices allow remote attackers to bypass authentication...7.5 High
- ibm business process managerIBM Business Process Manager (BPM) 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8...3.5 Low
- symantec endpoint protection managerThe management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1...8.5 High
- squid-cache squid, debian linux, fedoraproject fedora +2 moreSquid before 3.5.6 does not properly handle CONNECT method peer responses when configured with...6.8 Medium
- openafsOpenAFS before 1.6.13 allows remote attackers to spoof bos commands via unspecified vectors.6.8 Medium
- cisco firepower extensible operating systemCisco Firepower Extensible Operating System 1.1(1.86) on Firepower 9000 devices allows remote...5.0 Medium
- openbsd opensshThe kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly...8.5 High
- libuser project libuser, opensuse, redhat enterprise linux +2 morelibuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the...7.2 High
- cisco application policy infrastructure controller \(apic\), nx-os +1 moreCisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3o)...9.0 High
- linux kernel, redhat enterprise linux desktop, enterprise linux hpc node +3 more +5 morearch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET...7.2 High
- linux kernelarch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform improperly...7.2 High
- ibm business process managerThe REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3,...4.0 Medium
- ibm infosphere master data managementIBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4...4.0 Medium
- apache http server, apple mac os x, mac os x server +2 more +4 moreThe ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4...4.3 Medium
- nvidia gpu driverThe NVIDIA GPU driver for FreeBSD R352 before 352.09, 346 before 346.72, R349 before 349.16, R343...7.2 High
- xenStack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows...6.8 Medium
- redhat jboss enterprise portal platformThe Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used in portlets with...4.9 Medium
- microsoft windows 7, windows 8, windows 8.1 +7 more +9 moreATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows...7.8 High
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreThe Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2,...6.9 Medium
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreThe authentication implementation in the RPC subsystem in Microsoft Windows Server 2003 SP2 and...7.2 High
- microsoft windows 7, windows 8, windows 8.1 +4 more +6 morewin32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1,...7.2 High
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 morewin32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows...7.2 High
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreThe graphics component in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2,...7.2 High
- microsoft windows 7, windows 8, windows 8.1 +5 more +7 morewin32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows...7.2 High
- microsoft internet explorerMicrosoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted...4.3 Medium
- ibm websphere application server, websphere virtual enterprise +1 moreIBM WebSphere Application Server (WAS) 8.5 before 8.5.5.6, and WebSphere Virtual Enterprise 7.0...4.4 Medium
- openbsd opensshThe x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted...4.3 Medium
- redhat jboss fuseRed Hat JBoss Fuse before 6.2.0 allows remote authenticated users to bypass intended restrictions...6.0 Medium
- hp hp-uxUnspecified vulnerability in pppoec in HP HP-UX 11iv2 and 11iv3 allows local users to gain...7.2 High
- polkit project polkit, opensuse +1 morePolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (memory...4.6 Medium
- polkit project polkitThe polkit_backend_action_pool_init function in polkitbackend/polkitbackendactionpool.c in...4.6 Medium
- cisco nx-osThe CLI parser in Cisco NX-OS 4.1(2)E1(1), 6.2(11b), 6.2(12), 7.2(0)ZZ(99.1), 7.2(0)ZZ(99.3), and...4.6 Medium
- cisco nx-osCisco NX-OS 6.0(2) and 6.2(2) on Nexus devices has an improper OS configuration, which allows...7.2 High
- cisco nx-osCisco NX-OS 6.2(10) on Nexus and MDS 9000 devices allows local users to execute arbitrary OS...4.6 Medium
- cisco nx-osThe Python interpreter in Cisco NX-OS 6.2(8a) on Nexus 7000 devices allows local users to bypass...3.6 Low
- apple mac os xrunner in Install.framework in the Install Framework Legacy subsystem in Apple OS X before 10.10...9.3 High
- apple mac os xAdmin Framework in Apple OS X before 10.10.4 does not properly restrict the location of...7.2 High
- apple safari, iphone os, mac os x +2 moreWebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS...6.8 Medium
- apple safari, iphone os, mac os x +2 moreThe SQLite authorizer in the Storage functionality in WebKit in Apple Safari before 6.2.7, 7.x...6.8 Medium
- opensuse, x.org x server, xorg-server +2 moreThe authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non...3.6 Low
- themepunch showbiz pro, slider revolution +1 moreThe ThemePunch Slider Revolution (revslider) plugin before 3.0.96 for WordPress and Showbiz Pro...7.5 High
- ibm infosphere datastageIBM InfoSphere DataStage 8.1, 8.5, 8.7, 9.1, and 11.3 through 11.3.1.2 on UNIX allows local users...7.2 High
- ibm tivoli directory serverThe web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1...6.5 Medium
- Show moreLoading…