CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- cisco umbrella, umbrella enterprise roaming client, umbrella roaming module +2 moreCisco Umbrella Enterprise Roaming Client and Enterprise Roaming Module Privilege Escalation Vulnerability7.8 High
- cisco sd-wan solution, vedge 1000 firmware, vedge 100 firmware +3 more +5 moreCisco SD-WAN Solution Privilege Escalation Vulnerability8.8 High
- gitolitegitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via...9.8 Critical
- red hat ansible towerA privilege escalation flaw was found in the Ansible Tower. When Tower before 3.0.3 deploys a...8.0 High
- redhat jboss enterprise application platformIt was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect...7.8 High
- cisco finesseMultiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an...9.8 Critical
- cisco finesseMultiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an...9.8 Critical
- x file explorer project file explorer, debian linux +1 moreX File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain...5.5 Medium
- manageengine applications manager, zohocorp manageengine applications manager +1 moreManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation and authentication bypass8.8 High
- forescout secureconnector, microsoft windows secureconnector agent +1 moreOn Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privileges on the endpoint because files are c…7.8 High
- forescout secureconnector, microsoft windows secureconnector agent +1 moreOn Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privileges on the endpoint because it fails to…7.8 High
- ragentek android software, beeline pro 2 firmware, bluproducts studio 6.0 hd firmware +17 more +19 moreRagentek Android software contains an over-the-air update mechanism that communicates over an unencrypted channel, which can allow a remote attacker to execute arbitrary code with root privileges8.1 High
- cisco nx-osA vulnerability in the NX-API management application programming interface (API) in devices...8.8 High
- cisco fxos, nx-os, firepower extensible operating system +2 moreA vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could...6.7 Medium
- cisco nx-osA vulnerability in role-based access control (RBAC) for Cisco NX-OS Software could allow an...8.8 High
- mozilla firefoxThis vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate...7.8 High
- suse linux enterprise, linux enterprise server +1 moreunix2_chkpwd do not check for a valid account5.4 Medium
- cisco wide area application servicesA vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services ...6.7 Medium
- cisco prime collaborationA vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could...8.8 High
- cisco prime collaboration, prime collaboration provisioning +1 moreA vulnerability in the web management interface of Cisco Prime Collaboration Provisioning (PCP)...8.8 High
- cisco prime collaboration, prime collaboration provisioning +1 moreA vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) could allow...8.8 High
- mcafee virusscan enterprise, mcafee, llc virusscan enterprise (vse) +1 morePrivilege escalation vulnerability in McAfee VSE when McTray run with elevated privileges6.8 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) 8.5 through 8.5.0.2 on UNIX allows local users to gain...7.8 High
- jboss jbossas, redhat jboss enterprise application platform +1 moreJboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in...7.0 High
- advantech webaccess, webaccess dashboard, webaccess scada +1 more +3 moreIn Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior,...9.8 Critical
- brookinsconsulting collected information exportBrookins Consulting (BC) Collected Information Export extension for eZ Publish 1.1.0 does not...9.8 Critical
- enlightenmentEnlightenment before 0.17.6 might allow local users to gain privileges via vectors involving the...7.8 High
- enlightenmentAn unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain...7.8 High
- paypalThe WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers to...8.1 High
- ahnlab v3 internet securityBuffer overflow in MedCoreD.sys in AhnLab V3 Internet Security 8.0.7.5 (Build 1373) allows local...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +24 more +26 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and...9.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +26 more +28 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and...7.8 High
- qualcomm fsm9055 firmware, mdm9635m firmware, sd 400 firmware +2 more +4 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and...9.8 Critical
- qualcomm, inc. snapdragon mobile, qualcomm sd 205 firmware, sd 210 firmware +13 more +15 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210...7.5 High
- qualcomm, inc. snapdragon mobile, qualcomm mdm9615 firmware, mdm9625 firmware +12 more +14 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile...9.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +30 more +32 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile,...9.8 Critical
- unify openstage sip, openscape desk phone ip sip +1 moreUnify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 allow...7.5 High
- opendocmanOpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote...8.8 High
- buddypressThe Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote...6.5 Medium
- s3dvt project s3dvtThe pipe_init_terminal function in main.c in s3dvt allows local users to gain privileges by...7.8 High
- s3dvt project s3dvtThe (1) pty_init_terminal and (2) pipe_init_terminal functions in main.c in s3dvt 0.2.2 and...7.8 High
- google androidAn elevation of privilege vulnerability in the NVIDIA GPU driver. Product: Android. Versions:...7.8 High
- google androidIn blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to...7.0 High
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions:...9.8 Critical
- google androidAn elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions:...7.8 High
- Show moreLoading…