CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- ibm websphere extreme scaleIBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 improperly performs...2.1 Low
- ibm openpages grc platformIBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1...4.0 Medium
- icz matchasnsICZ MATCHA SNS before 1.3.7 allows remote authenticated users to obtain administrative privileges...6.5 Medium
- basercmsbaserCMS Access Control Bypass6.5 Medium
- google androidThe checkDestination function in internal/telephony/SMSDispatcher.java in Android before 5.1.1...9.3 High
- google androidThe Region_createFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android...9.3 High
- google androidThe Parcel::appendFrom function in libs/binder/Parcel.cpp in Binder in Android before 5.1.1...6.8 Medium
- google androidThe getProcessRecordLocked method in services/core/java/com/android/server/am...6.8 Medium
- google androidThe SIM Toolkit (STK) framework in Android before 5.1.1 LMY48I allows attackers to (1) intercept...9.3 High
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client 4.1(8) on OS X and Linux does not verify pathnames before...7.2 High
- emc rsa archer grcEMC RSA Archer GRC 5.x before 5.5.3 allows remote authenticated users to bypass intended access...6.5 Medium
- mozilla firefoxupdater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows...6.6 Medium
- moodleMoodle mishandles group-based authorization checks4.3 Medium
- moodleMoodle allows attackers to obtain manager privileges6.8 Medium
- moodleMoodle allows attackers to delete files4.3 Medium
- moodleMoodle allows attackers to enter additional answer attempts5.4 Medium
- openstack image registry and delivery service \(glance\)OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions5.5 Medium
- symantec web gatewayadmin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with...7.9 High
- newphoria corporation 1.1The Newphoria Photon application before 1.2 for Android allows attackers to bypass a URL...6.8 Medium
- newphoria corporation reversiThe Newphoria Reversi application before 1.0.3 for Android and before 1.2 for iOS allows...6.8 Medium
- newphoria corporation koritoreThe Newphoria Koritore application before 1.1 for Android and before 1.1 for iOS allows attackers...6.8 Medium
- newphoria corporation megaphone musicThe Newphoria MEGAPHONE MUSIC application before 1.1 for Android and before 1.1 for iOS allows...6.8 Medium
- newphoria corporation auction cameraThe Newphoria Auction Camera application for iOS and before 1.2 for Android allows attackers to...6.8 Medium
- newphoria corporation applicanThe runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12...6.8 Medium
- cisco prime collaboration provisioningThe web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote...9.0 High
- cisco prime collaboration assuranceThe web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote...8.5 High
- cisco prime collaboration assuranceThe web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote...4.0 Medium
- cisco prime collaboration assuranceThe web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote...9.0 High
- cisco prime network registrarCisco Prime Network Registrar (CPNR) 8.1(3.3), 8.2(3), and 8.3(2) has a default account, which...7.2 High
- mcafee threat intelligence exchangeThe Secondary server in Threat Intelligence Exchange (TIE) before 1.2.0 uses weak permissions for...2.1 Low
- apple iphone os, safari +1 moreThe document.cookie API implementation in the CFNetwork Cookies subsystem in WebKit in Apple iOS...5.0 Medium
- wordpressThe mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in...4.3 Medium
- workbench email project emailThe Workbench Email module 7.x-3.x before 7.x-3.4 for Drupal allows remote authenticated users...3.5 Low
- twitter project twitterThe Twitter module 6.x-5.x before 6.x-5.2, 7.x-5.x before 7.x-5.9, and 7.x-6.x before 7.x-6.0 for...3.5 Low
- fieldable panels panes project panels panesThe Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check...3.5 Low
- ntt-bp japan connected-free wi-fiThe NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android...6.8 Medium
- microsoft windows 10, windows 8, windows 8.1 +6 more +8 moreMicrosoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and...7.2 High
- microsoft windows 10, windows 8, windows 8.1 +3 more +5 moreThe process-initialization implementation in win32k.sys in the kernel-mode drivers in Microsoft...7.2 High
- microsoft windows 10, windows 7, windows 8 +6 more +8 moreTask Scheduler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,...7.2 High
- microsoft windows 10, windows 8, windows 8.1 +3 more +5 moreMicrosoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and...7.2 High
- microsoft windows 10, windows 7, windows 8 +6 more +8 moreThe kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...6.9 Medium
- microsoft windows 10, windows 7, windows 8 +6 more +8 moreThe kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...6.9 Medium
- microsoft windows 10, windows 7, windows 8 +6 more +8 moreThe Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1...7.2 High
- microsoft windows 10The Adobe Type Manager Library in Microsoft Windows 10 allows local users to gain privileges via...7.2 High
- microsoft windows 10, windows 7, windows 8 +6 more +8 moreThe Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1...7.2 High
- microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to gain privileges via a crafted web site,...4.3 Medium
- microsoft internet explorerMicrosoft Internet Explorer 10 and 11 uses an incorrect flag during certain filesystem accesses,...6.4 Medium
- emc documentum content serverEMC Documentum Content Server before 7.1P20 and 7.2.x before 7.2P04 does not properly verify...9.0 High
- xenThe xenmem_add_to_physmap_one function in arch/arm/mm.c in Xen 4.5.x, 4.4.x, and earlier does not...2.1 Low
- fortinet forticlientThe (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, (4) mdare64_52.sys, and (5)...7.2 High
- Show moreLoading…