CWE-264 (page 4)
Page 4 of 55 — CVEs classified under CWE-264, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-0352 | Medium | 6.7 | 2018-06-07 | A vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to… |
CVE-2018-0336 | High | 8.8 | 2018-06-07 | A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to escalate privilege… |
CVE-2018-0322 | High | 8.8 | 2018-06-07 | A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to modify sensiti… |
CVE-2018-0317 | High | 8.8 | 2018-06-07 | A vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to escalate their privileges… |
CVE-2018-6674 | Medium | 6.8 | 2018-05-25 | Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local users to sp… |
CVE-2013-3024 | High | 7.8 | 2018-05-24 | IBM WebSphere Application Server (WAS) 8.5 through 8.5.0.2 on UNIX allows local users to gain privileges by leveraging improper process initialization. IBM X-F… |
CVE-2016-8656 | High | 7.0 | 2018-05-22 | Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script which could result in local privilege e… |
CVE-2018-7505 | Critical | 9.8 | 2018-05-15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada… |
CVE-2014-2552 | Critical | 9.8 | 2018-04-27 | Brookins Consulting (BC) Collected Information Export extension for eZ Publish 1.1.0 does not properly restrict access, which allows remote attackers to gain a… |
CVE-2014-1846 | High | 7.8 | 2018-04-27 | Enlightenment before 0.17.6 might allow local users to gain privileges via vectors involving the gdb method. |
CVE-2014-1845 | High | 7.8 | 2018-04-27 | An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environme… |
CVE-2013-7202 | High | 8.1 | 2018-04-27 | The WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers to execute arbitrary JavaScript on the system. |
CVE-2013-3947 | High | 7.8 | 2018-04-24 | Buffer overflow in MedCoreD.sys in AhnLab V3 Internet Security 8.0.7.5 (Build 1373) allows local users to gain privileges via a crafted 0xA3350014 IOCTL call. |
CVE-2016-10457 | Critical | 9.8 | 2018-04-18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 2… |
CVE-2016-10451 | High | 7.8 | 2018-04-18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MS… |
CVE-2015-9196 | Critical | 9.8 | 2018-04-18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Small Cell SoC FSM9055, MDM9635M, SD 400, and SD 800, improper i… |
CVE-2014-10058 | High | 7.5 | 2018-04-18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 425, SD 427, SD 430, SD 435, SD 450… |
CVE-2014-10057 | Critical | 9.8 | 2018-04-18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, SD 210/SD 212/SD 205… |
CVE-2014-10054 | Critical | 9.8 | 2018-04-18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM963… |
CVE-2014-8421 | High | 7.5 | 2018-04-12 | Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 allow remote attackers to gain super-user privileges by leveraging S… |
CVE-2014-1946 | High | 8.8 | 2018-04-10 | OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended access restrictions and… |
CVE-2014-1889 | Medium | 6.5 | 2018-04-10 | The Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote authenticated users to gain control of arbitrary groups by leverag… |
CVE-2014-1226 | High | 7.8 | 2018-04-06 | The pipe_init_terminal function in main.c in s3dvt allows local users to gain privileges by leveraging setuid permissions and usage of bash 4.3 and earlier. N… |
CVE-2013-6876 | High | 7.8 | 2018-04-06 | The (1) pty_init_terminal and (2) pipe_init_terminal functions in main.c in s3dvt 0.2.2 and earlier allows local users to gain privileges by leveraging setuid… |
CVE-2016-8482 | High | 7.8 | 2018-04-05 | An elevation of privilege vulnerability in the NVIDIA GPU driver. Product: Android. Versions: Android kernel. Android ID: A-31799863. References: N-CVE-2016-84… |
CVE-2015-9016 | High | 7.0 | 2018-04-05 | In blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when a request has been previously freed by… |
CVE-2016-8488 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-31625756. |
CVE-2016-8487 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823724. |
CVE-2016-8484 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823575. |
CVE-2016-10299 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32577244. |
CVE-2016-10298 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393252. |
CVE-2016-10233 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-34389926. References: QC-CR#897… |
CVE-2016-10232 | High | 7.8 | 2018-04-04 | An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-34386696. References: QC-CR#102… |
CVE-2016-10231 | High | 7.8 | 2018-04-04 | An elevation of privilege vulnerability in the Qualcomm sound codec driver. Product: Android. Versions: Android kernel. Android ID: A-33966912. References: QC-… |
CVE-2016-10230 | Critical | 9.8 | 2018-04-04 | A remote code execution vulnerability in the Qualcomm crypto driver. Product: Android. Versions: Android kernel. Android ID: A-34389927. References: QC-CR#1091… |
CVE-2015-9015 | High | 7.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714120. |
CVE-2015-9014 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393750. |
CVE-2015-9013 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393251. |
CVE-2015-9012 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384691. |
CVE-2015-9011 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714882. |
CVE-2015-9010 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393101. |
CVE-2015-9009 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393600. |
CVE-2015-9008 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384689. |
CVE-2014-9959 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36383694. |
CVE-2014-9958 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384774. |
CVE-2014-9957 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36387564. |
CVE-2014-9956 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36389611. |
CVE-2014-9955 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384686. |
CVE-2014-9954 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36388559. |
CVE-2014-9953 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714770. |
CVE-2018-0184 | Medium | 6.7 | 2018-03-28 | A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affe… |
CVE-2018-0183 | Medium | 6.7 | 2018-03-28 | A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affe… |
CVE-2018-0176 | High | 7.8 | 2018-03-28 | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell o… |
CVE-2018-0169 | High | 7.8 | 2018-03-28 | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell o… |
CVE-2018-0152 | High | 8.8 | 2018-03-28 | A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to gain elevated privileges on… |
CVE-2018-5472 | Critical | 9.8 | 2018-03-26 | Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to gain unauthorized a… |
CVE-2018-5468 | Critical | 9.8 | 2018-03-26 | Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that could allow an attacker to gain unauthorized access an… |
CVE-2014-5443 | High | 7.8 | 2018-03-19 | Seafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to gain privileges via vectors related to ccnet handling user accoun… |
CVE-2015-7440 | High | 7.8 | 2018-03-15 | IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x… |
CVE-2018-7500 | Critical | 9.8 | 2018-03-14 | A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Privileges may be escalated, giving attac… |
CVE-2016-8629 | Medium | 6.5 | 2018-03-12 | Red Hat Keycloak before version 2.4.0 did not correctly check permissions when handling service account user deletion requests sent to the rest server. An atta… |
CVE-2014-7272 | High | 7.8 | 2018-03-08 | Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to gain root privileges because code running as root performs write operations within a… |
CVE-2018-0213 | High | 8.8 | 2018-03-08 | A vulnerability in the credential reset functionality for Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to gain elevated p… |
CVE-2015-7967 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service for Citrix Web Interface Agent uses a weak ACL for unspecified installation directories and executable modules, which allows loc… |
CVE-2015-7966 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to… |
CVE-2015-7965 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to… |
CVE-2015-7964 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service for NPS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain… |
CVE-2015-7963 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service for AD FS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gai… |
CVE-2015-7962 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service for Outlook Web App Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local us… |
CVE-2015-7961 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service Remote Web Workplace Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local u… |
CVE-2015-7598 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service TokenValidator Proxy Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local u… |
CVE-2015-7597 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service IIS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain priv… |
CVE-2015-7596 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service End User Software Tools for Windows uses a weak ACL for unspecified installation directories and executable modules, which allow… |
CVE-2014-10070 | High | 7.8 | 2018-02-27 | zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment (instead of treating them as literal numbers). That… |
CVE-2018-0130 | Critical | 9.8 | 2018-02-22 | A vulnerability in the use of JSON web tokens by the web-based service portal of Cisco Elastic Services Controller Software could allow an unauthenticated, rem… |
CVE-2013-0267 | High | 8.8 | 2018-02-21 | The Privileges portion of the web GUI and the XMLRPC API in Apache VCL 2.3.x before 2.3.2, 2.2.x before 2.2.2 and 2.1 allow remote authenticated users with nod… |
CVE-2016-8534 | High | 8.8 | 2018-02-15 | A remote privilege elevation vulnerability in HPE Matrix Operating Environment version 7.6 was found. |
CVE-2016-8533 | High | 8.8 | 2018-02-15 | A remote priviledge escalation vulnerability in HPE Matrix Operating Environment version 7.6 was found. |
CVE-2016-8528 | High | 8.8 | 2018-02-15 | A Remote Escalation of Privilege vulnerability in HPE Helion Eucalyptus version 3.3.0 through 4.3.1 was found. |
CVE-2016-8742 | High | 7.8 | 2018-02-12 | The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation. All files in the install inherit the file permissions… |
CVE-2015-1416 | High | 7.8 | 2018-02-05 | Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU patch before 2.2.5… |
CVE-2014-9503 | Medium | 6.5 | 2018-02-01 | The Discussions sub module in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allows remote authenticated users with "access content" permissions to… |
CVE-2014-3752 | Medium | 6.7 | 2018-02-01 | The MiniIcpt.sys driver in G Data TotalProtection 2014 24.0.2.1 and earlier allows local users with administrator rights to execute arbitrary code with SYSTEM… |
CVE-2014-4919 | Medium | 5.4 | 2018-01-19 | OXID eShop Professional Edition before 4.7.13 and 4.8.x before 4.8.7, Enterprise Edition before 5.0.13 and 5.1.x before 5.1.7, and Community Edition before 4.7… |
CVE-2018-0096 | Medium | 5.9 | 2018-01-18 | A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to perform a… |
CVE-2018-0095 | High | 7.8 | 2018-01-18 | A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA) could allo… |
CVE-2018-0092 | High | 7.1 | 2018-01-18 | A vulnerability in the network-operator user role implementation for Cisco NX-OS System Software could allow an authenticated, local attacker to improperly del… |
CVE-2018-0089 | High | 7.5 | 2018-01-18 | A vulnerability in the Policy and Charging Rules Function (PCRF) of the Cisco Policy Suite (CPS) could allow an unauthenticated, remote attacker to access sens… |
CVE-2016-0327 | High | 7.8 | 2018-01-12 | IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows local users to gain administrator privileges… |
CVE-2014-5070 | High | 8.8 | 2018-01-11 | Symmetricom s350i 2.70.15 allows remote authenticated users to gain privileges via vectors related to pushing unauthenticated users to the login page. |
CVE-2014-0087 | High | 8.8 | 2018-01-11 | The check_privileges method in vmdb/app/controllers/application_controller.rb in ManageIQ, as used in Red Hat CloudForms Management Engine (CFME), allows remot… |
CVE-2014-2071 | High | 7.1 | 2018-01-08 | Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP meth… |
CVE-2014-8540 | Medium | 6.5 | 2018-01-05 | The groups API in GitLab 6.x and 7.x before 7.4.3 allows remote authenticated guest users to modify ownership of arbitrary groups by leveraging improper permis… |
CVE-2014-7862 | Critical | 9.8 | 2018-01-04 | The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator account… |
CVE-2017-12363 | Medium | 5.3 | 2017-11-30 | A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome message of a meeting on an affected system… |
CVE-2017-12351 | Medium | 5.7 | 2017-11-30 | A vulnerability in the guest shell feature of Cisco NX-OS System Software could allow an authenticated, local attacker to read and send packets outside the sco… |
CVE-2017-12342 | Medium | 6.8 | 2017-11-30 | A vulnerability in the Open Agent Container (OAC) feature of Cisco Nexus Series Switches could allow an unauthenticated, local attacker to read and send packet… |
CVE-2016-10700 | High | 8.8 | 2017-11-24 | auth_login.php in Cacti before 1.0.0 allows remote authenticated users who use web authentication to bypass intended access restrictions by logging in as a use… |
CVE-2016-6804 | High | 7.8 | 2017-11-20 | The Apache OpenOffice installer (versions prior to 4.1.3, including some branded as OpenOffice.org) for Windows contains a defective operation that allows exec… |
CVE-2017-12261 | High | 7.8 | 2017-11-02 | A vulnerability in the restricted shell of the Cisco Identity Services Engine (ISE) that is accessible via SSH could allow an authenticated, local attacker to… |