CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- bitdefender antivirus, antivirus for mac +1 morePrivilege escalation in Bitdefender AV for Mac1.6 Low
- cisco sd-wan solution, sd-wan firmware +1 moreCisco SD-WAN Solution Local Privilege Escalation Vulnerability8.8 High
- [unknown] moodleMoodle does not revoke role capabilities correctly4.2 Medium
- cisco dna spaces, dna spaces\ +1 moreCisco DNA Spaces: Connector Privilege Escalation Vulnerability6.7 Medium
- cisco webex meetingsCisco Webex Network Recording Admin Page Privilege Escalation Vulnerability5.4 Medium
- cisco firepower management center, firepower services software for asa, secure firewall management center +1 more +3 moreCisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability5.8 Medium
- cisco firepower threat defense software, firepower services software for asa, secure firewall management center +1 more +3 moreCisco Firepower Threat Defense Software NULL Character Obfuscation Detection Bypass Vulnerability5.8 Medium
- cisco firepower threat defense software, firepower services software for asa, secure firewall management center +1 more +3 moreCisco Firepower Threat Defense Software Nonstandard Protocol Detection Bypass Vulnerability5.8 Medium
- cisco firepower threat defense software, firepower services software for asa, secure firewall management center +1 more +3 moreCisco Firepower Threat Defense Software Stream Reassembly Bypass Vulnerability5.8 Medium
- clipsoft rexpertClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to arbitrary file deletion...6.5 Medium
- clipsoft rexpertClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request...6.5 Medium
- cisco telepresence collaboration endpoint, telepresence tc software +1 moreCisco TelePresence Collaboration Endpoint Software Privilege Escalation Vulnerability6.4 Medium
- cisco telepresence collaboration endpoint, telepresence tc software +1 moreCisco TelePresence Collaboration Endpoint Software Privilege Escalation Vulnerability6.7 Medium
- cisco unified communications managerCisco Unified Communications Manager Security Bypass Vulnerability6.5 Medium
- eclipse omr, the eclipse foundation eclipse omr +1 morePrior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code injection...7.8 High
- asus precision touchpadAsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow associated...9.8 Critical
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software SNMP Access Control List Configuration Name Bypass Vulnerability5.8 Medium
- cisco unified computing system, unified computing system (managed), nx-os +2 moreCisco Unified Computing System Fabric Interconnect root Privilege Escalation Vulnerability7.8 High
- kuberneteskubelet-started container uid changes to root after first restart or if image is already pulled to the node4.9 Medium
- visser store exporter for woocommerceThe woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation.9.8 Critical
- obdev little snitchLittle Snitch versions 4.3.0 to 4.3.2 have a local privilege escalation vulnerability in their...5.5 Medium
- obdev little snitchLittle Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the...5.5 Medium
- advanced ajax page loader project ajax page loaderThe advanced-ajax-page-loader plugin before 2.7.7 for WordPress has no protection against the...5.3 Medium
- post pay counter project pay counterThe post-pay-counter plugin before 2.731 for WordPress has no permissions check for an update...7.5 High
- visser store toolkit for woocommerceThe woocommerce-store-toolkit plugin before 1.5.8 for WordPress has privilege escalation.9.8 Critical
- visser store toolkit for woocommerceThe woocommerce-store-toolkit plugin before 1.5.7 for WordPress has privilege escalation.9.8 Critical
- zenosspyraw in Zenoss 2.5.3 allows local privilege escalation by modifying environment variables to...7.8 High
- cisco integrated management controller supervisor, ucs director, ucs director express for big data +1 more +3 moreCisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Denial of Service Vulnerability8.6 High
- google androidIn LockTaskController.lockKeyguardIfNeeded of the LockTaskController.java, there was a difference...7.3 High
- mcafee, llc mcafee frp, mcafee file and removable media protection +1 morePrivilege Escalation vulnerability in FRP 5.x earlier than 5.1.0.2094.1 Medium
- benjaminrojas wp editorThe wp-editor plugin before 1.2.6 for WordPress has incorrect permissions.9.8 Critical
- estsoft altools, altools update service +1 moreALTOOLS update service 18.1 and earlier versions contains a local privilege escalation...7.8 High
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Privilege Escalation Vulnerability6.7 Medium
- cpanelIn cPanel before 62.0.17, addon domain conversion did not require a package for resellers (SEC-208).2.7 Low
- cpanelcPanel before 64.0.21 allows attackers to read a user's crontab file during a short time interval...5.3 Medium
- cpanelcPanel before 64.0.21 allows certain file-chmod operations via /scripts...4.5 Medium
- cpanelIn cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount...7.8 High
- cpanelcPanel before 68.0.15 allows attackers to read root's crontab file during a short time interval...3.7 Low
- cpanelcPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309).7.8 High
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreAIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code...7.8 High
- cisco application policy infrastructure controller, application policy infrastructure controller (apic) +1 moreCisco Application Policy Infrastructure Controller REST API Privilege Escalation Vulnerability7.2 High
- cisco jabber for windows, jabber +1 moreCisco Jabber for Windows DLL Preloading Vulnerability7.3 High
- amcrest ipm-721s firmwareAmcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours....8.8 High
- amcrest ipm-721s firmwareOn Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2...8.8 High
- tencent habomalhunterHaboMalHunter through 2.0.0.3 in Tencent Habo allows attackers to evade dynamic malware analysis...7.8 High
- cisco data center network managerCisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution Vulnerability9.8 Critical
- cisco data center network managerCisco Data Center Network Manager Arbitrary File Download Vulnerability7.5 High
- cisco prime infrastructureCisco Prime Infrastructure Virtual Domain Privilege Escalation Vulnerability4.3 Medium
- cisco sd-wan solution, sd-wan firmware +1 moreCisco SD-WAN Solution Privilege Escalation Vulnerability7.8 High
- cisco sd-wan solution, sd-wan firmware +1 moreCisco SD-WAN Solution Privilege Escalation Vulnerability8.8 High
- Show moreLoading…