CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- google androidapp/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013)...7.8 High
- google androiddrivers/mmc/core/debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and...7.8 High
- google androidThe (1) alloc and (2) free APIs in arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm...7.8 High
- google androiddrivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013)...7.8 High
- google androiddrivers/media/platform/msm/camera_v2/sensor/cci/msm_cci.c in the Qualcomm components in Android...7.8 High
- google androiddrivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in...7.8 High
- google androiddrivers/video/msm/mdss/mdp3_ctrl.c in the Qualcomm components in Android before 2016-07-05 on...7.8 High
- google androidarch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05...7.8 High
- ibm websphere application serverThe API Discovery implementation in IBM WebSphere Application Server (WAS) 8.5.5.8 through 8.5.5...7.5 High
- ibm urbancode deployThe agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6...8.2 High
- ibm hardware management consoleIBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1...6.8 Medium
- cisco epc3928 firmwareCisco EPC3928 devices allow remote attackers to obtain sensitive configuration and credential...8.1 High
- meinberg ims-lantime m1000, ims-lantime m3000, ims-lantime m500 +9 more +11 moreThe NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500,...8.1 High
- cisco firesight system softwareCisco Firepower System Software 6.0.0 through 6.1.0 has a hardcoded account, which allows remote...8.6 High
- ibm security qradar incident forensicsIBM Security QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to bypass...6.5 Medium
- cisco prime collaboration provisioningCisco Prime Collaboration Provisioning 10.6 SP2 (aka 10.6.0.10602) mishandles LDAP authentication...9.8 Critical
- ibm messagesightJMS Client in IBM MessageSight 1.1.x through 1.1.0.1, 1.2.x through 1.2.0.3, and 2.0.x through 2...8.8 High
- ibm tririga application platformThe builder tools in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and...8.8 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 moreF5 BIG-IP before 12.0.0 HF3 allows remote authenticated users to modify the account configuration...8.8 High
- lenovo bios efi driverLenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System...8.2 High
- lenovo solution centerLenovo Solution Center (LSC) before 3.3.003 allows local users to execute arbitrary code with...7.8 High
- lenovo solution centerThe StopProxy command in LSC.Services.SystemService in Lenovo Solution Center before 3.3.003...5.5 Medium
- huawei mate 8 firmwareHuawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT...7.8 High
- huawei mate 8 firmwareHuawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT...8.8 High
- ibm spectrum scale, general parallel file system storage server +1 moreIBM Spectrum Scale 4.1 before 4.1.1.5 and 4.2 before 4.2.0.2 and General Parallel File System 3.5...7.0 High
- linux kernelarch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which...7.8 High
- alertus desktop notification for os xAlertus Desktop Notification before 2.9.31.1710 on OS X uses weak permissions for configuration...4.4 Medium
- huawei fusioninsight hdHuawei FusionInsight HD before V100R002C60SPC200 allows local users to gain root privileges via...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter...7.8 High
- cisco ip phone 8800 series firmwareCisco 8800 phones with software 11.0(1) do not properly enforce mounted-filesystem permissions,...7.0 High
- fonalityFonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 uses weak permissions for...7.8 High
- cybozu garoonCybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended...4.3 Medium
- dell emc data domain osEMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass...9.8 Critical
- dell emc data domain osEMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a default no_root_squash option for NFS...8.2 High
- nttdata terasoluna server framework for java webNTT Data TERASOLUNA Server Framework for Java(WEB) 2.0.0.1 through 2.0.6.1, as used in Fujitsu...3.7 Low
- solarwinds virtualization managerSolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by...7.8 High
- adobe creative cloud, microsoft windows +1 moreUnquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7...7.3 High
- adobe creative cloudUntrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application...7.3 High
- microsoft office, visio, visio viewer +2 moreMicrosoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe SMB server component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreMicrosoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,...8.1 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreatmfd.dll in the Adobe Type Manager Font Driver in Microsoft Windows Vista SP2, Windows Server...7.8 High
- microsoft windows 10The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft internet explorer, windows 10, windows 7 +5 more +7 moreThe Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2,...8.8 High
- drupal, debian linux +1 moreDrupal Saving user accounts can sometimes grant the user all roles8.8 High
- huawei honor ws851 firmwareStack-based buffer overflow in Huawei Honor WS851 routers with software 1.1.21.1 and earlier...9.8 Critical
- mozilla firefoxThe maintenance service in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on...7.8 High
- google androidOff-by-one error in sdcard/sdcard.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before...7.8 High
- Show moreLoading…