CWE-264 (page 6)
Page 6 of 55 — CVEs classified under CWE-264, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-10277 | High | 7.8 | 2017-05-12 | An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute arbitrary code within the context of t… |
CVE-2016-10276 | High | 7.8 | 2017-05-12 | An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of t… |
CVE-2016-10275 | High | 7.8 | 2017-05-12 | An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of t… |
CVE-2016-10274 | High | 7.8 | 2017-05-12 | An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the cont… |
CVE-2016-9097 | High | 7.2 | 2017-05-11 | The Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.8, ProxySG 6.5 prior 6.5.10.6, ProxySG 6.6 prior to 6.6.5.8, and ProxySG 6.7 prior to 6.7.1.2 man… |
CVE-2016-2126 | Medium | 6.5 | 2017-05-11 | Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum. A remote… |
CVE-2016-9250 | High | 7.5 | 2017-05-10 | In F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user with access to the control plane may be able to delete arbitrary… |
CVE-2016-9251 | High | 8.8 | 2017-05-09 | In F5 BIG-IP 12.0.0 through 12.1.2, an authenticated attacker may be able to cause an escalation of privileges through a crafted iControl REST connection. |
CVE-2016-8202 | High | 8.8 | 2017-05-08 | A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allo… |
CVE-2017-6624 | Medium | 5.3 | 2017-05-03 | A vulnerability in Cisco IOS 15.5(3)M Software for Cisco CallManager Express (CME) could allow an unauthenticated, remote attacker to make unauthorized phone c… |
CVE-2017-6620 | Medium | 5.8 | 2017-05-03 | A vulnerability in the remote management access control list (ACL) feature of the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, remote at… |
CVE-2015-9004 | High | 7.8 | 2017-05-02 | kernel/events/core.c in the Linux kernel before 3.19 mishandles counter grouping, which allows local users to gain privileges via a crafted application, relate… |
CVE-2016-8649 | Critical | 9.1 | 2017-05-01 | lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /… |
CVE-2016-8592 | High | 8.8 | 2017-04-28 | log_query_system.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root u… |
CVE-2016-8591 | High | 8.8 | 2017-04-28 | log_query.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via… |
CVE-2016-8590 | High | 8.8 | 2017-04-28 | log_query_dlp.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user… |
CVE-2016-8589 | High | 8.8 | 2017-04-28 | log_query_dae.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user… |
CVE-2016-8586 | High | 8.8 | 2017-04-28 | detected_potential_files.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as th… |
CVE-2016-8585 | High | 8.8 | 2017-04-28 | admin_sys_time.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root use… |
CVE-2016-6903 | Critical | 9.9 | 2017-04-24 | lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands. |
CVE-2016-6902 | Critical | 9.9 | 2017-04-24 | lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands. |
CVE-2016-3114 | Medium | 6.5 | 2017-04-24 | Kallithea before 0.3.2 allows remote authenticated users to edit or delete open pull requests or delete comments by leveraging read access. |
CVE-2015-8110 | High | 7.8 | 2017-04-24 | Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to gain privileges by navigating to (1) "Click here to learn mor… |
CVE-2016-3067 | Critical | 9.8 | 2017-04-21 | Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges. |
CVE-2016-10345 | High | 7.8 | 2017-04-18 | In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain th… |
CVE-2016-6727 | Critical | 9.8 | 2017-04-17 | The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code. |
CVE-2016-6299 | High | 7.8 | 2017-04-14 | The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file. |
CVE-2016-4889 | High | 8.8 | 2017-04-14 | ZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have unspecified impact by leveraging failure to restrict access to un… |
CVE-2016-4455 | Low | 3.3 | 2017-04-14 | The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directorie… |
CVE-2016-0727 | High | 7.8 | 2017-04-14 | The crontab script in the ntp package before 1:4.2.6.p3+dfsg-1ubuntu3.11 on Ubuntu 12.04 LTS, before 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10 on Ubuntu 14.04 LTS, on… |
CVE-2014-7921 | Critical | 9.8 | 2017-04-13 | mediaserver in Android 4.0.3 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7920. |
CVE-2014-7920 | Critical | 9.8 | 2017-04-13 | mediaserver in Android 2.2 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7921. |
CVE-2016-10123 | High | 7.8 | 2017-04-13 | Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges. |
CVE-2016-10122 | High | 7.8 | 2017-04-13 | Firejail does not properly clean environment variables, which allows local users to gain privileges. |
CVE-2016-10121 | High | 7.8 | 2017-04-13 | Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges. |
CVE-2016-10120 | High | 7.8 | 2017-04-13 | Firejail uses 0777 permissions when mounting (1) /dev, (2) /dev/shm, (3) /var/tmp, or (4) /var/lock, which allows local users to gain privileges. |
CVE-2016-10119 | High | 7.8 | 2017-04-13 | Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges. |
CVE-2016-10118 | Low | 3.3 | 2017-04-13 | Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /. |
CVE-2016-10117 | High | 7.8 | 2017-04-13 | Firejail does not restrict access to --tmpfs, which allows local users to gain privileges, as demonstrated by mounting over /etc. |
CVE-2016-5856 | High | 7.0 | 2017-04-12 | Drivers/soc/qcom/spcom.c in the Qualcomm SPCom driver in the Android kernel 2017-03-05 allows local users to gain privileges, a different vulnerability than CV… |
CVE-2016-4896 | Medium | 6.5 | 2017-04-12 | SetsucoCMS all versions does not properly manage sessions, which allows remote attackers to disclose or alter unauthorized information via unspecified vectors. |
CVE-2016-6811 | High | 8.8 | 2017-04-11 | In Apache Hadoop 2.x before 2.7.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user. |
CVE-2016-8237 | High | 8.1 | 2017-04-10 | Remote code execution in Lenovo Updates (not Lenovo System Update) allows man-in-the-middle attackers to execute arbitrary code. |
CVE-2016-8235 | High | 7.8 | 2017-04-10 | Privilege escalation in Lenovo Customer Care Software Development Kit (CCSDK) versions earlier than 2.0.16.3 allows local users to execute code with elevated p… |
CVE-2016-10323 | High | 7.8 | 2017-04-10 | Synology Photo Station before 6.3-2958 allows local users to gain privileges by leveraging setuid execution of a "synophoto_dsm_user --copy-no-ea" command. |
CVE-2016-5071 | High | 8.8 | 2017-04-10 | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root. |
CVE-2015-7274 | High | 8.8 | 2017-04-10 | Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 allows remote attackers to execute arbitrary administrative HTTP commands. |
CVE-2015-7260 | High | 7.8 | 2017-04-10 | Liebert MultiLink Automated Shutdown v4.2.4 allows local users to gain privileges by replacing the LiebertM executable file. |
CVE-2015-2889 | High | 8.8 | 2017-04-10 | Summer Baby Zoom Wifi Monitor & Internet Viewing System allows remote attackers to gain privileges via manual entry of a Settings URL. |
CVE-2016-7786 | High | 8.8 | 2017-04-07 | Sophos Cyberoam UTM CR25iNG 10.6.3 MR-5 allows remote authenticated users to bypass intended access restrictions via direct object reference, as demonstrated b… |
CVE-2016-9197 | Medium | 6.7 | 2017-04-07 | A vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers could allow an authenticated, local attac… |
CVE-2016-9196 | Medium | 6.7 | 2017-04-07 | A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms could allow an authenticated, local atta… |
CVE-2015-8965 | Critical | 9.8 | 2017-04-06 | Rogue Wave JViews before 8.8 patch 21 and 8.9 before patch 1 allows remote attackers to execute arbitrary Java code that exists in the classpath, such as test… |
CVE-2017-3832 | High | 7.5 | 2017-04-06 | A vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a deni… |
CVE-2016-10318 | Medium | 6.5 | 2017-04-04 | A missing authorization check in the fscrypt_process_policy function in fs/crypto/policy.c in the ext4 and f2fs filesystem encryption support in the Linux kern… |
CVE-2014-9922 | High | 7.8 | 2017-04-04 | The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an overlayfs layer, rel… |
CVE-2016-8803 | High | 7.5 | 2017-04-02 | The maintenance module in Huawei FusionStorage V100R003C30U1 allows attackers to create documents according to special rules to obtain the OS root privilege of… |
CVE-2016-8769 | Medium | 6.7 | 2017-04-02 | Huawei UTPS earlier than UTPS-V200R003B015D16SPC00C983 has an unquoted service path vulnerability which can lead to the truncation of UTPS service query paths… |
CVE-2016-2404 | High | 7.5 | 2017-04-02 | Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S12700 with s… |
CVE-2015-8671 | High | 8.8 | 2017-04-02 | Huawei LogCenter V100R001C10 could allow an authenticated attacker to tamper with requests using a tool and submit a request to the server for privilege escala… |
CVE-2014-9696 | High | 8.8 | 2017-04-02 | The Hyper Module Management (HMM) software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions allows the operator to modify the user configur… |
CVE-2014-9695 | High | 8.8 | 2017-04-02 | The Hyper Module Management (HMM) software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions could allow a non-super-domain user who accesse… |
CVE-2014-8571 | Low | 3.3 | 2017-04-02 | Apps on Huawei Ascend P6 mobile phones with software EDGE-U00 V100R001C17B508SP01 and earlier versions before V100R001C17B508SP02; EDGE-T00 V100R001C01B508SP01… |
CVE-2014-3222 | High | 7.0 | 2017-04-02 | In Huawei eSpace Meeting with software V100R001C03SPC201 and the earlier versions, attackers that obtain the permissions assigned to common users can elevate p… |
CVE-2016-8031 | High | 7.3 | 2017-03-28 | Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through 5800 allows local users to bypass local security protection via… |
CVE-2016-10152 | Critical | 9.8 | 2017-03-28 | The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu" default domain when opening the configuration file fails, whi… |
CVE-2016-9469 | High | 8.2 | 2017-03-28 | Multiple versions of GitLab expose a dangerous method to any authenticated user that could lead to the deletion of all Issue and MergeRequest objects on a GitL… |
CVE-2016-8960 | High | 8.8 | 2017-03-27 | IBM Cognos Business Intelligence 10.2 could allow a user with lower privilege Capabilities to adopt the Capabilities of a higher-privilege user by intercepting… |
CVE-2016-10225 | High | 7.8 | 2017-03-27 | The sunxi-debug driver in Allwinner 3.4 legacy kernel for H3, A83T and H8 devices allows local users to gain root privileges by sending "rootmydevice" to /proc… |
CVE-2015-0864 | High | 8.0 | 2017-03-27 | Samsung Account (AKA com.osp.app.signin) before 1.6.0069 and 2.x before 2.1.0069 allows man-in-the-middle attackers to obtain sensitive information and execute… |
CVE-2015-0863 | High | 8.0 | 2017-03-27 | GALAXY Apps (aka Samsung Apps, Samsung Updates, or com.sec.android.app.samsungapps) before 14120405.03.012 allows man-in-the-middle attackers to obtain sensiti… |
CVE-2015-2263 | Low | 3.3 | 2017-03-23 | Cloudera Manager 4.x, 5.0.x before 5.0.6, 5.1.x before 5.1.5, 5.2.x before 5.2.5, and 5.3.x before 5.3.3 uses global read permissions for files in its configur… |
CVE-2014-0229 | Medium | 6.5 | 2017-03-23 | Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes… |
CVE-2013-6446 | Low | 3.1 | 2017-03-23 | The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated… |
CVE-2014-7279 | Critical | 9.8 | 2017-03-23 | The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote attackers to obtain "equipment management authority" via TCP t… |
CVE-2016-9775 | High | 7.8 | 2017-03-23 | The postrm script in the tomcat6 package before 6.0.45+dfsg-1~deb7u3 on Debian wheezy, before 6.0.45+dfsg-1~deb8u1 on Debian jessie, before 6.0.35-1ubuntu3.9 o… |
CVE-2016-9167 | High | 7.5 | 2017-03-23 | NDSD in Novell eDirectory before 9.0.2 did not calculate ACLs on LDAP objects across partition boundaries correctly, which could lead to a privilege escalation… |
CVE-2016-1597 | High | 8.8 | 2017-03-23 | A logged-in user in NetIQ Access Governance Suite 6.0 through 6.4 could escalate privileges to administrator. |
CVE-2016-5857 | High | 7.8 | 2017-03-20 | The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the kernel via a crafted application, aka An… |
CVE-2015-8954 | Critical | 9.8 | 2017-03-20 | The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackers to bypass intrusi… |
CVE-2015-1610 | Medium | 5.3 | 2017-03-20 | hosttracker in OpenDaylight l2switch allows remote attackers to change the host location information by spoofing the MAC address, aka "topology spoofing." |
CVE-2014-8708 | Critical | 9.8 | 2017-03-17 | Pluck CMS 4.7.2 allows remote attackers to execute arbitrary code via the blog form feature. |
CVE-2016-10187 | Medium | 5.5 | 2017-03-16 | The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript. |
CVE-2017-3831 | Critical | 9.8 | 2017-03-15 | A vulnerability in the web-based GUI of Cisco Mobility Express 1800 Series Access Points could allow an unauthenticated, remote attacker to bypass authenticati… |
CVE-2017-3819 | High | 8.8 | 2017-03-15 | A privilege escalation vulnerability in the Secure Shell (SSH) subsystem in the StarOS operating system for Cisco ASR 5000 Series, ASR 5500 Series, ASR 5700 Se… |
CVE-2016-7955 | Critical | 9.8 | 2017-03-15 | The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been created, and USM before 5.3.1 allows remote attackers to bypass… |
CVE-2016-8026 | High | 7.8 | 2017-03-14 | Arbitrary command execution vulnerability in Intel Security McAfee Security Scan Plus (SSP) 3.11.469 and earlier allows authenticated users to gain elevated pr… |
CVE-2016-8012 | High | 7.8 | 2017-03-14 | Access control vulnerability in Intel Security Data Loss Prevention Endpoint (DLPe) 9.4.200 and 9.3.600 allows authenticated users with Read-Write-Execute perm… |
CVE-2016-8009 | High | 7.8 | 2017-03-14 | Privilege escalation vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and 6.x versions allows attackers to cause DoS, unexpected behavior… |
CVE-2016-8008 | High | 8.8 | 2017-03-14 | Privilege escalation vulnerability in Windows 7 and Windows 10 in McAfee Security Scan Plus (SSP) 3.11.376 allows attackers to load a replacement of the versio… |
CVE-2016-8005 | Medium | 6.5 | 2017-03-14 | File extension filtering vulnerability in Intel Security McAfee Email Gateway (MEG) before 7.6.404h1128596 allows attackers to fail to identify the file name p… |
CVE-2015-8993 | High | 7.0 | 2017-03-14 | Malicious file execution vulnerability in Intel Security CloudAV (Beta) before 0.5.0.151.3 allows attackers to make the product momentarily vulnerable via exec… |
CVE-2015-8992 | High | 7.0 | 2017-03-14 | Malicious file execution vulnerability in Intel Security WebAdvisor before 4.0.2, 4.0.1 and 3.7.2 allows attackers to make the product momentarily vulnerable v… |
CVE-2015-8991 | High | 7.0 | 2017-03-14 | Malicious file execution vulnerability in Intel Security McAfee Security Scan+ (MSS+) before 3.11.266.3 allows attackers to make the product momentarily vulner… |
CVE-2014-9921 | Critical | 9.8 | 2017-03-14 | Information disclosure vulnerability in McAfee (now Intel Security) Cloud Analysis and Deconstructive Services (CADS) 1.0.0.3x, 1.0.0.4d and earlier allows rem… |
CVE-2016-8479 | High | 7.8 | 2017-03-08 | An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code within the context of t… |
CVE-2016-8417 | High | 7.0 | 2017-03-08 | An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context o… |
CVE-2016-10200 | High | 7.0 | 2017-03-07 | Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use… |
CVE-2015-8994 | High | 7.5 | 2017-03-02 | An issue was discovered in PHP 5.x and 7.x, when the configuration uses apache2handler/mod_php or php-fpm with OpCache enabled. With 5.x after 5.6.28 or 7.x af… |
CVE-2016-5374 | High | 8.8 | 2017-03-01 | NetApp Data ONTAP 9.0 and 9.1 before 9.1P1 allows remote authenticated users that own SMB-hosted data to bypass intended sharing restrictions by leveraging imp… |