CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- dell emc data domain osEMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions...6.7 Medium
- ibm rational collaborative lifecycle managementIBM Jazz technology based products might allow an attacker to view work item titles that they do...4.3 Medium
- ibm aixIBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to...7.8 High
- mybb merge system, mybb +1 morenewreply.php in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows...9.8 Critical
- trendmicro smart protection serverTrend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before...7.8 High
- hesiod project hesiodThe read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu"...9.8 Critical
- hesiod project hesiodThe hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine...7.0 High
- arista cloudvision portalCloudVision Portal (CVP) before 2016.1.2.1 allows remote authenticated users to gain access to...8.8 High
- owncloudownCloud server before 8.2.6 and 9.x before 9.0.3, when the gallery app is enabled, allows remote...5.9 Medium
- microsoft skypeMultiple untrusted search path vulnerabilities in Microsoft Skype allow local users to execute...7.8 High
- valvesoftware steamosValve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which...4.8 Medium
- gitlabThe impersonate feature in Gitlab 8.7.0, 8.6.0 through 8.6.7, 8.5.0 through 8.5.11, 8.4.0 through...8.8 High
- systemd project systemdA flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created...7.8 High
- moodleIn Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.5.3 Medium
- ca service desk management, service desk manager +1 moreRESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might...8.1 High
- samsung mobileThe SmartCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6...7.8 High
- samsung mobileThe SpamCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6...7.8 High
- google androidAn elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local...7.0 High
- google androidAn elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local...7.0 High
- liferay portalShell command injection in Liferay Portal8.8 High
- google androidAn elevation of privilege vulnerability in the bootloader could enable a local attacker to...5.5 Medium
- apache stormApache Storm remote code execution vulnerability9.8 Critical
- google androidThe MT6573FDVT_SetRegHW function in camera_fdvt.c in the MediaTek driver for Linux allows local...7.8 High
- lenovo xclarity administrator, xclarity administrator (lxca) +1 morePrivilege Escalation in Lenovo XClarity Administrator earlier than 1.2.0, if LXCA is used to...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in Binder could enable a local malicious application to...7.0 High
- linux kernelAn elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local...7.0 High
- linux kernelAn elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm sound driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious...7.0 High
- google androidAn elevation of privilege vulnerability in MediaTek components, including the thermal driver and...7.0 High
- google androidAn elevation of privilege vulnerability in MediaTek components, including the thermal driver and...7.0 High
- google androidAn elevation of privilege vulnerability in MediaTek components, including the thermal driver and...7.0 High
- google androidAn elevation of privilege vulnerability in MediaTek components, including the thermal driver and...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm video driver could enable a local...7.8 High
- google androidAn elevation of privilege vulnerability in the MediaTek driver could enable a local malicious...7.8 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious...7.8 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious...7.8 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious...7.8 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious...7.8 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious...7.8 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious...7.8 High
- Show moreLoading…