CWE-264: Permissions, Privileges, and Access Controls

309 results · Feed

• Unscored —
  CVE-2018-0096

  A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Infrastructure could allow an auth…

  Jan 18, 2018
• Unscored —
  CVE-2018-0089

  A vulnerability in the Policy and Charging Rules Function (PCRF) of the Cisco Policy Suite (CPS) could allow an unauthe…

  Jan 18, 2018
• Unscored —
  CVE-2018-0092

  A vulnerability in the network-operator user role implementation for Cisco NX-OS System Software could allow an authent…

  Jan 18, 2018
• Unscored —
  CVE-2017-12342

  A vulnerability in the Open Agent Container (OAC) feature of Cisco Nexus Series Switches could allow an unauthenticated…

  Nov 30, 2017
• Unscored —
  CVE-2017-12351

  A vulnerability in the guest shell feature of Cisco NX-OS System Software could allow an authenticated, local attacker …

  Nov 30, 2017
• Unscored —
  CVE-2017-12363

  A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome mes…

  Nov 30, 2017
• Unscored —
  CVE-2017-12261

  A vulnerability in the restricted shell of the Cisco Identity Services Engine (ISE) that is accessible via SSH could al…

  Nov 2, 2017
• Unscored —
  CVE-2017-12251

  A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote…

  Oct 19, 2017
• Unscored —
  CVE-2017-12266

  A vulnerability in the routine that loads DLL files in Cisco Meeting App for Windows could allow an authenticated, loca…

  Oct 5, 2017
• Unscored —
  CVE-2017-12268

  A vulnerability in the Network Access Manager (NAM) of Cisco AnyConnect Secure Mobility Client could allow an authentic…

  Oct 5, 2017
• Unscored —
  CVE-2017-12226

  A vulnerability in the web-based Wireless Controller GUI of Cisco IOS XE Software for Cisco 5760 Wireless LAN Controlle…

  iOS
  Sep 28, 2017
• Unscored —
  CVE-2017-12230

  A vulnerability in the web-based user interface (web UI) of Cisco IOS XE 16.2 could allow an authenticated, remote atta…

  iOS
  Sep 28, 2017
• Unscored —
  CVE-2017-12239

  A vulnerability in motherboard console ports of line cards for Cisco ASR 1000 Series Aggregation Services Routers and C…

  iOS
  Sep 28, 2017
• Unscored —
  CVE-2017-12214

  A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality …

  Sep 21, 2017
• Unscored —
  CVE-2017-7916

  A Permissions, Privileges, and Access Controls issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and …

  Aug 7, 2017
• Unscored —
  CVE-2017-6713

  A vulnerability in the Play Framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote…

  Jul 6, 2017
• Unscored —
  CVE-2017-6638

  A vulnerability in how DLL files are loaded with Cisco AnyConnect Secure Mobility Client for Windows could allow an aut…

  Jun 8, 2017
• Unscored —
  CVE-2017-6640 Public exploit EPSS 11%

  A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attac…

  Jun 8, 2017
• Unscored —
  CVE-2017-6637

  A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 11.1) could a…

  May 22, 2017
• Unscored —
  CVE-2017-6635

  A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 12.1) could a…

  May 22, 2017
• Unscored —
  CVE-2017-6622 Public exploit EPSS 62%

  A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote …

  May 18, 2017
• Unscored —
  CVE-2017-6623

  A vulnerability in a script file that is installed as part of the Cisco Policy Suite (CPS) Software distribution for th…

  May 18, 2017
• Unscored —
  CVE-2017-6620

  A vulnerability in the remote management access control list (ACL) feature of the Cisco CVR100W Wireless-N VPN Router c…

  May 3, 2017
• Unscored —
  CVE-2017-6624

  A vulnerability in Cisco IOS 15.5(3)M Software for Cisco CallManager Express (CME) could allow an unauthenticated, remo…

  May 3, 2017
• Unscored —
  CVE-2017-3832

  A vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthen…

  Apr 6, 2017
• Unscored —
  CVE-2017-3831

  A vulnerability in the web-based GUI of Cisco Mobility Express 1800 Series Access Points could allow an unauthenticated…

  Mar 15, 2017
• Unscored —
  CVE-2017-3819

  A privilege escalation vulnerability in the Secure Shell (SSH) subsystem in the StarOS operating system for Cisco ASR 5…

  Mar 15, 2017
• Unscored —
  CVE-2017-3801

  A vulnerability in the web-based GUI of Cisco UCS Director 6.0.0.0 and 6.0.0.1 could allow an authenticated, local atta…

  Feb 15, 2017
• Unscored —
  CVE-2017-3813 Public exploit

  A vulnerability in the Start Before Logon (SBL) module of Cisco AnyConnect Secure Mobility Client Software for Windows …

  Windows
  Feb 9, 2017