CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- google androidAn elevation of privilege vulnerability in the Qualcomm sound codec driver. Product: Android....7.8 High
- google androidA remote code execution vulnerability in the Qualcomm crypto driver. Product: Android. Versions:...9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....7.8 High
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- cisco ios xeA vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local...6.7 Medium
- cisco ios xeA vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local...6.7 Medium
- cisco ios xeMultiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated,...7.8 High
- cisco iosMultiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated,...7.8 High
- cisco ios xe software, ios xe +1 moreA vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an...8.8 High
- philips intellispace portalPhilips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions...9.8 Critical
- philips intellispace portalPhilips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access...9.8 Critical
- seafile serverSeafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to...7.8 High
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +5 more +7 moreIBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4...7.8 High
- osisoft pi web api, pi vision +1 moreA Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API...9.8 Critical
- keycloak, redhat single sign on +1 moreModerate severity vulnerability that affects org.keycloak:keycloak-core6.5 Medium
- cisco identity services engineA vulnerability in the credential reset functionality for Cisco Identity Services Engine (ISE)...8.8 High
- gemalto safenet authentication service for citrix web interface agentSafeNet Authentication Service for Citrix Web Interface Agent uses a weak ACL for unspecified...7.8 High
- gemalto safenet authentication service windows logon agentSafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation...7.8 High
- gemalto safenet authentication service windows logon agentSafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation...7.8 High
- gemalto safenet authentication service for nps agentSafeNet Authentication Service for NPS Agent uses a weak ACL for unspecified installation...7.8 High
- gemalto safenet authentication service for ad fs agentSafeNet Authentication Service for AD FS Agent uses a weak ACL for unspecified installation...7.8 High
- gemalto safenet authentication service for outlook web app agentSafeNet Authentication Service for Outlook Web App Agent uses a weak ACL for unspecified...7.8 High
- gemalto safenet authentication service remote web workplace agentSafeNet Authentication Service Remote Web Workplace Agent uses a weak ACL for unspecified...7.8 High
- gemalto safenet authentication service tokenvalidator proxy agentSafeNet Authentication Service TokenValidator Proxy Agent uses a weak ACL for unspecified...7.8 High
- gemalto safenet authentication service iis agentSafeNet Authentication Service IIS Agent uses a weak ACL for unspecified installation directories...7.8 High
- gemalto safenet authentication service end user software tools for windowsSafeNet Authentication Service End User Software Tools for Windows uses a weak ACL for...7.8 High
- zsh project zshzsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the...7.8 High
- cisco elastic services controller, virtual managed services +1 moreA vulnerability in the use of JSON web tokens by the web-based service portal of Cisco Elastic...9.8 Critical
- apache vclThe Privileges portion of the web GUI and the XMLRPC API in Apache VCL 2.3.x before 2.3.2, 2.2.x...8.8 High
- hewlett packard enterprise matrix operating environmentA remote privilege elevation vulnerability in HPE Matrix Operating Environment version 7.6 was...8.8 High
- hewlett packard enterprise matrix operating environmentA remote priviledge escalation vulnerability in HPE Matrix Operating Environment version 7.6 was...8.8 High
- eucalyptus, hewlett packard enterprise helion eucalyptus +1 moreA Remote Escalation of Privilege vulnerability in HPE Helion Eucalyptus version 3.3.0 through 4.3...8.8 High
- apache couchdbThe Windows installer that the Apache CouchDB team provides was vulnerable to local privilege...7.8 High
- freebsdLarry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and...7.8 High
- open atrium project atriumThe Discussions sub module in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allows...6.5 Medium
- gdata-software totalprotectionThe MiniIcpt.sys driver in G Data TotalProtection 2014 24.0.2.1 and earlier allows local users...6.7 Medium
- oxid-esales eshopOXID eShop Professional Edition before 4.7.13 and 4.8.x before 4.8.7, Enterprise Edition before 5...5.4 Medium
- Show moreLoading…