CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- fortinet forticlientThe Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute...7.2 High
- fortinet forticlientThe (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, and (4) mdare64_52.sys drivers in...7.2 High
- google chromeThe DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote...7.5 High
- google chromeThe NavigatorServiceWorker::serviceWorker function in modules/serviceworkers...5.0 Medium
- google chromeThe ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Blink, as used in...6.4 Medium
- ippusbxd project ippusbxdIPPUSBXD before 1.22 listens on all interfaces, which allows remote attackers to obtain access to...7.5 High
- libvdpau project libvdpau, canonical ubuntu linux +1 morelibvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain...7.2 High
- basware bankingBasware Banking (Maksuliikenne) 8.90.07.X relies on the client to enforce account locking, which...4.6 Medium
- hp lt4112 lte, mt41 thin client, elite x2 1010 g2 +36 more +38 moreThe HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook,...6.9 Medium
- cisco application control engine 4700The CLI in Cisco Application Control Engine (ACE) 4700 A5 3.0 and earlier allows local users to...4.3 Medium
- hp systems insight managerHP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before...7.2 High
- picketlinkPicketLink does not properly check role based authorization4.0 Medium
- hp version control repository managerHP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to...4.0 Medium
- symfony twigTwig remote code execution in templates6.8 Medium
- redhat openshiftRed Hat OpenShift Enterprise 3.0.0.0 does not properly check permissions, which allows remote...8.5 High
- openbsd opensshsshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local...7.2 High
- openbsd opensshUse-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in...6.9 Medium
- iodata wn-g54\/r2 firmwareI-O DATA DEVICE WN-G54/R2 routers with firmware before 1.03 and NP-BBRS routers allow remote...5.0 Medium
- cisco prime infrastructureCisco Prime Infrastructure (PI) 1.4(0.45) and earlier, when AAA authentication is used, allows...3.5 Low
- emc documentum content serverJava Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7...7.5 High
- emc documentum content serverEMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before...9.0 High
- emc documentum content serverEMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before...9.0 High
- emc documentum content serverEMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before...9.0 High
- cisco telepresence video communication server softwareCisco TelePresence Video Communication Server (VCS) X8.5.2 allows remote authenticated users to...6.5 Medium
- cisco content security management applianceCisco Content Security Management Appliance (SMA) 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly...5.5 Medium
- views bulk operations project bulk operationsThe Views Bulk Operations (VBO) module 6.x-1.x and 7.x-3.x before 7.x-3.3 for Drupal, when the...4.9 Medium
- hybridauth social login project social loginThe HybridAuth Social Login module 7.x-2.x before 7.x-2.13 for Drupal allows remote attackers to...5.0 Medium
- administration views project viewsThe Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other...6.0 Medium
- navigate project navigateThe Navigate module for Drupal does not properly check permissions, which allows remote...4.0 Medium
- shipwire api project apiThe Shipwire API module 7.x-1.x before 7.x-1.03 for Drupal does not check the view permission for...5.0 Medium
- pass2pdf project pass2pdfThe pass2pdf module for Drupal does not restrict access to generated PDF files, which allows...5.0 Medium
- entityform block project blockThe Entityform Block module 7.x-1.x before 7.x-1.3 for Drupal does not properly check permissions...5.0 Medium
- apple mac os xrunner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10...9.3 High
- apple iphone osMobileInstallation in Apple iOS before 8.4.1 does not ensure the uniqueness of universal...5.8 Medium
- apple iphone osCFPreferences in Apple iOS before 8.4.1 allows attackers to bypass the third-party app-sandbox...4.3 Medium
- apple mac os xIOFireWireFamily in Apple OS X before 10.10.5 allows local users to gain privileges or cause a...7.2 High
- apple mac os xudf in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of...7.2 High
- apple mac os xThe kernel in Apple OS X before 10.10.5 does not properly validate pathnames in the environment,...7.2 High
- apple iphone osLocation Framework in Apple iOS before 8.4.1 allows local users to bypass intended restrictions...4.6 Medium
- mozilla firefox, opensuse, oracle solaris +2 moreMozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content...4.3 Medium
- microsoft .net frameworkThe RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at...9.3 High
- microsoft .net frameworkThe RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at...9.3 High
- microsoft .net frameworkThe RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at...9.3 High
- microsoft windows 10, windows 7, windows 8 +6 more +8 moreThe Windows shell in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7...2.1 Low
- microsoft windows 7, windows 8, windows 8.1 +5 more +7 moreThe kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...2.1 Low
- microsoft windows 7, windows 8, windows 8.1 +5 more +7 moreMicrosoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,...9.3 High
- microsoft windows 7, windows 8, windows 8.1 +5 more +7 moreMicrosoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,...9.3 High
- microsoft windows 7, windows 8, windows 8.1 +5 more +7 moreObject Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,...2.1 Low
- microsoft windows, windows 10, windows 7 +7 more +9 moreMount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,...7.2 High
- theforeman foremanForeman before 1.9.0 allows remote authenticated users with the edit_users permission to edit...6.0 Medium
- Show moreLoading…