Weakness (CWE)
CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Source: MITRE CWE-264
135 results · Clear filters · Feed
-
Medium 5.5
Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may aff…
-
Medium 6.2
Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affe…
-
Medium 6.3
DeepSeek Harness sandbox.ts createContext
A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sandbox.ts. The manipulation results in sandbox issue. It is possible to launch the at…
-
Medium 5.3
deepseek-ai deepseek-harness Sandbox spawn sandbox
A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the atta…
-
Medium 6.5
Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability
A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must h…
-
Medium 6.3
deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox
A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor's own code, SAFETY.md,…
-
Medium 5.5
Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affe…
-
Medium 4.8
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affe…
-
Medium 6.2
Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability ma…
-
Medium 4.3
DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect avail…
-
Medium 4.0
Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect…
-
Medium 5.1
Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may …
-
Medium 5.5
Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may aff…
-
Medium 6.2
Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerabi…
-
Medium 5.6
vxcontrol PentAGI Tool Management Protocol pentester.tmpl sandbox
A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. It is…
-
Medium 5.1
Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may aff…
-
Medium 6.6
Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect av…
-
Medium 6.3
vxcontrol PentAGI Docker API client.go sandbox
A vulnerability was identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown function of the file backend/pkg/docker/client.go of the component Docker API. The manipulation leads to sandbox issue. The attack may be initiated remotely. The pull req…
-
Medium 5.6
ByteDance verl grader.py math_equal sandbox
A vulnerability was identified in ByteDance verl up to 0.7.0. Affected is the function math_equal of the file prime_math/grader.py. The manipulation leads to sandbox issue. It is possible to initiate the attack remotely. The complexity of an attack is rather …
-
Medium 6.3
AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandbox
A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1. This issue affects the function install_plugin_upload of the file astrbot/dashboard/routes/plugin.py of the component install-upload Endpoint. The manipulation of the argument File results in sand…
-
Medium 4.0
Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of this vulnerability may…
-
Medium 6.1
Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability…
-
Medium 6.2
Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect av…
-
Medium 5.9
Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerab…
-
Medium 6.3
Permission control vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect se…
-
Medium 5.7
Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability…
-
Medium 4.0
Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability…
-
Medium 6.2
Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerabilit…
-
Medium 6.2
Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect …
-
Medium 5.5
Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect …
-
Medium 5.1
Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affe…
-
Medium 6.8
Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability …
-
Medium 4.4
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability…
-
Medium 5.5
Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may aff…
-
Medium 5.3
Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service …
-
Medium 5.9
Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect servic…
-
Medium 5.5
Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service …
-
Medium 6.2
Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect servic…
-
Medium 6.8
Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability m…
-
Medium 6.2
Vulnerability that allows setting screen rotation direction without permission verification in the screen management mo…