Weakness (CWE)
CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Source: MITRE CWE-264
309 results · Feed
-
Medium 5.5
Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may aff…
-
Low 3.7
Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may aff…
-
High 7.1
Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this v…
-
Low 3.6
Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vuln…
-
Medium 6.2
Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affe…
-
Medium 6.3
DeepSeek Harness sandbox.ts createContext
A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sandbox.ts. The manipulation results in sandbox issue. It is possible to launch the at…
-
Critical 9.9
IBM Db2 Mirror for i Privilege Escalation
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit thi…
-
Medium 5.3
deepseek-ai deepseek-harness Sandbox spawn sandbox
A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the atta…
-
Medium 6.5
Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability
A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must h…
-
Medium 6.3
deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox
A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor's own code, SAFETY.md,…
-
High 8.5
Cisco Secure Firewall Management Center Software Authenticated Privilege Escalation to Root Vulnerability
A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote attacker to enable the remote diagnostics debugger service. This vulnerability is due to an error when checking the privilege level of a user …
-
Medium 5.5
Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affe…
-
Medium 4.8
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affe…
-
Medium 6.2
Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability ma…
-
High 7.1
DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availabi…
-
Medium 4.3
DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect avail…
-
Medium 4.0
Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect…
-
High 8.6
Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerabilit…
-
Medium 5.1
Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may …
-
Medium 5.5
Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may aff…
-
Medium 6.2
Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerabi…
-
Medium 5.6
vxcontrol PentAGI Tool Management Protocol pentester.tmpl sandbox
A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. It is…
-
Medium 5.1
Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may aff…
-
Medium 6.6
Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect av…
-
Medium 6.3
vxcontrol PentAGI Docker API client.go sandbox
A vulnerability was identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown function of the file backend/pkg/docker/client.go of the component Docker API. The manipulation leads to sandbox issue. The attack may be initiated remotely. The pull req…
-
Low 3.6
Permission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may af…
-
High 7.3
NousResearch hermes-agent Environment Variable code_execution_tool.py execute_code sandbox
A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This impacts the function execute_code of the file tools/code_execution_tool.py of the component Environment Variable Handler. Such manipulation leads to sandbox issue. It is possibl…
-
Low 3.6
Permission control vulnerability in the app management and control module. Impact: Successful exploitation of this vuln…
-
Medium 5.6
ByteDance verl grader.py math_equal sandbox
A vulnerability was identified in ByteDance verl up to 0.7.0. Affected is the function math_equal of the file prime_math/grader.py. The manipulation leads to sandbox issue. It is possible to initiate the attack remotely. The complexity of an attack is rather …
-
High 7.3
nocobase plugin-workflow-javascript Vm.js createSafeConsole sandbox
A security flaw has been discovered in nocobase plugin-workflow-javascript up to 2.0.23. This issue affects the function createSafeConsole of the file packages/plugins/@nocobase/plugin-workflow-javascript/src/server/Vm.js. Performing a manipulation results in…
-
Medium 6.3
AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandbox
A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1. This issue affects the function install_plugin_upload of the file astrbot/dashboard/routes/plugin.py of the component install-upload Endpoint. The manipulation of the argument File results in sand…
-
High 8.8
Cisco IOS XR Software CLI Privilege Escalation Vulnerability
A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges and gain full administrative control of an affected device. This vulnerability is due to incorrect …
-
Medium 4.0
Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of this vulnerability may…
-
Low 3.3
Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerabili…
-
Medium 6.1
Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability…
-
Medium 6.2
Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect av…
-
Medium 5.9
Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerab…
-
Medium 6.3
Permission control vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect se…
-
Medium 5.7
Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability…
-
Medium 4.0
Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability…