Weakness (CWE)
CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Source: MITRE CWE-264
309 results · Feed
-
Medium 6.2
Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerabilit…
-
High 8.4
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affe…
-
Medium 6.2
Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect …
-
Medium 5.5
Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect …
-
Medium 5.1
Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affe…
-
Medium 6.8
Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability …
-
Medium 4.4
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability…
-
Medium 5.5
Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may aff…
-
Medium 5.3
Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service …
-
Medium 5.9
Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect servic…
-
Medium 5.5
Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service …
-
Low 2.8
Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service…
-
Medium 6.2
Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect servic…
-
Medium 6.8
Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability m…
-
Medium 6.2
Vulnerability that allows setting screen rotation direction without permission verification in the screen management mo…
-
Medium 5.9
Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module I…
-
Medium 4.8
Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability ma…
-
Low 3.9
Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability ma…
-
Medium 4.6
Redash getattr python.py run_query sandbox
A vulnerability was found in Redash up to 10.1.0/25.1.0. It has been rated as problematic. This issue affects the function run_query of the file /query_runner/python.py of the component getattr Handler. The manipulation leads to sandbox issue. The complexity …
-
High 7.8
Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may a…
-
Medium 6.3
aimhubio aim run_view Object query.py RestrictedPythonQuery privilege escalation
A vulnerability classified as critical was found in aimhubio aim up to 3.29.1. This vulnerability affects the function RestrictedPythonQuery of the file /aim/storage/query.py of the component run_view Object Handler. The manipulation of the argument Abfrage l…
-
Medium 6.2
Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may …
-
Medium 5.8
Cisco IOS XR Software Access Control List Bypass Vulnerability
A vulnerability in the access control list (ACL) processing in the egress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability exists because certain packets are handled incorrectly …
-
High 7.9
Permissions, Privileges, and Access Controls in Video Analytics and Processing
Information disclosure may occur due to improper permission and access controls to Video Analytics engine.
-
High 7.5
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerabilit…
-
Medium 6.2
Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may c…
-
Medium 6.5
Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulne…
-
High 7.5
Permissions, Privileges, and Access Controls issue in Automotive OS Platform
Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU.
-
Medium 6.2
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerabilit…
-
Medium 6.1
Vulnerability of improper access control in the album module Impact: Successful exploitation of this vulnerability may …
-
Medium 6.7
Permissions, Privileges, and Access Controls in Data
Certain unprivileged processes are able to perform IOCTL calls.
-
Medium 5.3
Cisco Nexus 3550-F Switches Access Control List Programming Vulnerability
A vulnerability in the access control list (ACL) programming of Cisco Nexus 3550-F Switches could allow an unauthenticated, remote attacker to send traffic that should be blocked to the management interface of an affected device. This vulnerability exis…
-
Medium 5.1
Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect se…
-
Medium 4.0
Permission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this vulnerability may affect s…
-
Medium 6.0
A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive Security Appliance (ASA…
-
Medium 5.1
Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vul…
-
Medium 5.1
Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of…
-
Medium 4.0
Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability m…
-
Medium 6.2
Privilege escalation vulnerability in the account synchronisation module. Impact: Successful exploitation of this vulne…
-
High 7.3
Permissions, Privileges, and Access Control issues in TZ Secure OS
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.