# CWE-264. Every Advisory and CVE whose sources give the weakness CWE-264, newest first. ## Records, newest first (an older page) - [Cisco NX-OS Software 802.1X Extensible Authentication Protocol over LAN Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-1594.md) `CVE-2019-1594` · CVE record: Cisco Nexus 1000V Switch for VMware vSphere and 4 more · CVSS 7.4 High · Not analysed yet · Published 6 Mar 2019 · Tags: CWE-264 - [Cisco NX-OS Software Bash Shell Role-Based Access Control Bypass Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1593.md) `CVE-2019-1593` · CVE record: Cisco Nexus 3000 Series Switches and 4 more · CVSS 7.8 High · Not analysed yet · Published 6 Mar 2019 · Tags: CWE-264 - [Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Shell Escape Vulnerability](https://agentprime.io/advisories/CVE-2019-1591.md) `CVE-2019-1591` · CVE record: Cisco Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode · CVSS 7.8 High · Not analysed yet · Published 6 Mar 2019 · Tags: CWE-264 - [Local privilege escalation in Filr famtd](https://agentprime.io/advisories/CVE-2019-3475.md) `CVE-2019-3475` · CVE record: Micro Focus Filr · CVSS 7.8 High · Not analysed yet · Published 20 Feb 2019 · Tags: CWE-264 - [Cisco SD-WAN Solution Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1648.md) `CVE-2019-1648` · CVE record: Cisco Cisco SD-WAN Solution · CVSS 7.8 High · Not analysed yet · Published 24 Jan 2019 · Tags: CWE-264 - [Privilege Escalation Vulnerability in Cisco SD-WAN Solution](https://agentprime.io/advisories/CVE-2019-1646.md) `CVE-2019-1646` · CVE record: Cisco Cisco SD-WAN Solution · CVSS 7.8 High · Not analysed yet · Published 24 Jan 2019 · Tags: CWE-264 - [A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions…](https://agentprime.io/advisories/CVE-2018-11462.md) `CVE-2018-11462` · CVE record: Siemens AG SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 · No CVSS score · Not analysed yet · Published 12 Dec 2018 · Tags: CWE-264 - [A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions…](https://agentprime.io/advisories/CVE-2018-11461.md) `CVE-2018-11461` · CVE record: Siemens AG SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 · No CVSS score · Not analysed yet · Published 12 Dec 2018 · Tags: CWE-264 - [Cisco Meraki Local Status Page Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2018-0284.md) `CVE-2018-0284` · CVE record: Cisco Cisco Meraki MR and 4 more · No CVSS score · Not analysed yet · Published 8 Nov 2018 · Tags: CWE-264 - [Cisco Wireless LAN Controller Software GUI Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2018-0417.md) `CVE-2018-0417` · CVE record: Cisco Cisco Wireless LAN Controller (WLC) · CVSS 7.5 High · Not analysed yet · Published 17 Oct 2018 · Tags: CWE-264 - [A vulnerability has been identified in ROX II (All versions < V2.12.1).](https://agentprime.io/advisories/CVE-2018-13802.md) `CVE-2018-13802` · CVE record: Siemens AG ROX II · No CVSS score · Not analysed yet · Published 10 Oct 2018 · Tags: CWE-264 - [A vulnerability has been identified in ROX II (All versions < V2.12.1).](https://agentprime.io/advisories/CVE-2018-13801.md) `CVE-2018-13801` · CVE record: Siemens AG ROX II · No CVSS score · Not analysed yet · Published 10 Oct 2018 · Tags: CWE-264 - [Cisco Catalyst 6800 Series Switches ROM Monitor Software Secure Boot Bypass Vulnerability](https://agentprime.io/advisories/CVE-2018-15370.md) `CVE-2018-15370` · CVE record: Cisco Cisco Catalyst 6800 Series Switches · No CVSS score · Not analysed yet · Published 5 Oct 2018 · Tags: CWE-264 - [Cisco Network Services Orchestrator Network Plug and Play Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2018-0463.md) `CVE-2018-0463` · CVE record: Cisco Cisco Network Services Orchestrator · No CVSS score · Not analysed yet · Published 5 Oct 2018 · Tags: CWE-264 - [Cisco Firepower Management Center and Firepower System Software Sourcefire Tunnel Control Channel Command Execution Vulnerability](https://agentprime.io/advisories/CVE-2018-0453.md) `CVE-2018-0453` · CVE record: Cisco Cisco FireSIGHT System Software · No CVSS score · Not analysed yet · Published 5 Oct 2018 · Tags: CWE-264 - [Cisco Data Center Network Manager Privilege Escalation to Underlying Operating System Vulnerability](https://agentprime.io/advisories/CVE-2018-0440.md) `CVE-2018-0440` · CVE record: Cisco Cisco Data Center Network Manager · No CVSS score · Not analysed yet · Published 5 Oct 2018 · Tags: CWE-264 - [Cisco Umbrella Enterprise Roaming Client and Enterprise Roaming Module Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2018-0437.md) `CVE-2018-0437` · CVE record: Cisco Cisco Umbrella · No CVSS score · Not analysed yet · Published 5 Oct 2018 · Tags: CWE-264 - [Cisco SD-WAN Solution Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2018-0432.md) `CVE-2018-0432` · CVE record: Cisco Cisco SD-WAN Solution · No CVSS score · Not analysed yet · Published 5 Oct 2018 · Tags: CWE-264 - [Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to retrieve a cleartext password from an affected system.](https://agentprime.io/advisories/CVE-2018-0399.md) `CVE-2018-0399` · CVE record: Cisco Finesse unknown · No CVSS score · Not analysed yet · Published 18 Jul 2018 · Tags: CWE-264 - [Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack.](https://agentprime.io/advisories/CVE-2018-0398.md) `CVE-2018-0398` · CVE record: Cisco Finesse unknown · No CVSS score · Not analysed yet · Published 18 Jul 2018 · Tags: CWE-264 - [A vulnerability in the NX-API management application programming interface (API) in devices running, or based on, Cisco NX-OS Software could allow an authenticated, remote attacker to execute command…](https://agentprime.io/advisories/CVE-2018-0330.md) `CVE-2018-0330` · CVE record: Cisco NX-OS unknown · No CVSS score · Not analysed yet · Published 20 Jun 2018 · Tags: CWE-264 - [A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to configure an unauthorized administrator account for an affec…](https://agentprime.io/advisories/CVE-2018-0294.md) `CVE-2018-0294` · CVE record: Cisco FXOS and NX-OS unknown · No CVSS score · Not analysed yet · Published 20 Jun 2018 · Tags: CWE-264 - [A vulnerability in role-based access control (RBAC) for Cisco NX-OS Software could allow an authenticated, remote attacker to execute CLI commands that should be restricted for a nonadministrative us…](https://agentprime.io/advisories/CVE-2018-0293.md) `CVE-2018-0293` · CVE record: Cisco NX-OS unknown · No CVSS score · Not analysed yet · Published 20 Jun 2018 · Tags: CWE-264 - [A vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to elevate their privilege level to root.](https://agentprime.io/advisories/CVE-2018-0352.md) `CVE-2018-0352` · CVE record: Cisco Wide Area Application Services unknown · No CVSS score · Not analysed yet · Published 7 Jun 2018 · Tags: CWE-264 - [A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to escalate privileges to the Administrator level.](https://agentprime.io/advisories/CVE-2018-0336.md) `CVE-2018-0336` · CVE record: Cisco Prime Collaboration Provisioning unknown · No CVSS score · Not analysed yet · Published 7 Jun 2018 · Tags: CWE-264 - [A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to modify sensitive data that is associated with arbitrar…](https://agentprime.io/advisories/CVE-2018-0322.md) `CVE-2018-0322` · CVE record: Cisco Prime Collaboration Provisioning unknown · No CVSS score · Not analysed yet · Published 7 Jun 2018 · Tags: CWE-264 - [A vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to escalate their privileges.](https://agentprime.io/advisories/CVE-2018-0317.md) `CVE-2018-0317` · CVE record: Cisco Prime Collaboration Provisioning unknown · No CVSS score · Not analysed yet · Published 7 Jun 2018 · Tags: CWE-264 - [Privilege escalation vulnerability in McAfee VSE when McTray run with elevated privileges](https://agentprime.io/advisories/CVE-2018-6674.md) `CVE-2018-6674` · CVE record: McAfee, LLC VirusScan Enterprise (VSE) · CVSS 6.8 Medium · Not analysed yet · Published 25 May 2018 · Tags: Privilege escalation, CWE-264, CWE-274 - [Advantech WebAccess: In Advantech WebAccess versions V8.2_20170817 and prior…](https://agentprime.io/advisories/CVE-2018-7505.md) `CVE-2018-7505` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 15 May 2018 · Tags: CWE-264 - [Cisco IOS XE: A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated…](https://agentprime.io/advisories/CVE-2018-0184.md) `CVE-2018-0184` · CVE record: Cisco IOS XE · No CVSS score · Not analysed yet · Published 28 Mar 2018 · Tags: CWE-264 - [Cisco IOS XE: A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated…](https://agentprime.io/advisories/CVE-2018-0183.md) `CVE-2018-0183` · CVE record: Cisco IOS XE · No CVSS score · Not analysed yet · Published 28 Mar 2018 · Tags: CWE-264 - [Cisco IOS XE: Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an…](https://agentprime.io/advisories/CVE-2018-0176.md) `CVE-2018-0176` · CVE record: Cisco IOS XE · No CVSS score · Not analysed yet · Published 28 Mar 2018 · Tags: CWE-264 - [Cisco IOS XE: Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an…](https://agentprime.io/advisories/CVE-2018-0169.md) `CVE-2018-0169` · CVE record: Cisco IOS XE · No CVSS score · Not analysed yet · Published 28 Mar 2018 · Tags: CWE-264 - [Cisco IOS XE Software: A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could…](https://agentprime.io/advisories/CVE-2018-0152.md) `CVE-2018-0152` · CVE record: Cisco IOS XE Software · No CVSS score · Not analysed yet · Published 28 Mar 2018 · Tags: CWE-264 - [Philips IntelliSpace Portal: Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows…](https://agentprime.io/advisories/CVE-2018-5472.md) `CVE-2018-5472` · CVE record: Philips Philips IntelliSpace Portal · No CVSS score · Not analysed yet · Published 26 Mar 2018 · Tags: CWE-264 - [Philips IntelliSpace Portal: Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access…](https://agentprime.io/advisories/CVE-2018-5468.md) `CVE-2018-5468` · CVE record: Philips Philips IntelliSpace Portal · No CVSS score · Not analysed yet · Published 26 Mar 2018 · Tags: CWE-264 - [OSIsoft PI Web API: A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API…](https://agentprime.io/advisories/CVE-2018-7500.md) `CVE-2018-7500` · CVE record: OSIsoft PI Web API · No CVSS score · Not analysed yet · Published 14 Mar 2018 · Tags: CWE-264 - [Cisco Identity Services Engine: A vulnerability in the credential reset functionality for Cisco Identity Services Engine…](https://agentprime.io/advisories/CVE-2018-0213.md) `CVE-2018-0213` · CVE record: Cisco Identity Services Engine · No CVSS score · Not analysed yet · Published 8 Mar 2018 · Tags: CWE-264 - [Cisco Elastic Services Controller: A vulnerability in the use of JSON web tokens by the web-based service portal of Cisco…](https://agentprime.io/advisories/CVE-2018-0130.md) `CVE-2018-0130` · CVE record: Cisco Elastic Services Controller · No CVSS score · Not analysed yet · Published 22 Feb 2018 · Tags: CWE-264 - [Cisco Prime Infrastructure: A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime…](https://agentprime.io/advisories/CVE-2018-0096.md) `CVE-2018-0096` · CVE record: Cisco Prime Infrastructure · No CVSS score · Not analysed yet · Published 18 Jan 2018 · Tags: CWE-264 - [A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA) could allow an authenticated, local attacker to es…](https://agentprime.io/advisories/CVE-2018-0095.md) `CVE-2018-0095` · CVE record: Cisco Email Security and Content Security Management Appliance · No CVSS score · Not analysed yet · Published 18 Jan 2018 · Tags: CWE-264 - [Cisco NX-OS: A vulnerability in the network-operator user role implementation for Cisco NX-OS System…](https://agentprime.io/advisories/CVE-2018-0092.md) `CVE-2018-0092` · CVE record: Cisco NX-OS · No CVSS score · Not analysed yet · Published 18 Jan 2018 · Tags: CWE-264 - [Cisco Policy Suite: A vulnerability in the Policy and Charging Rules Function (PCRF) of the Cisco Policy…](https://agentprime.io/advisories/CVE-2018-0089.md) `CVE-2018-0089` · CVE record: Cisco Policy Suite · No CVSS score · Not analysed yet · Published 18 Jan 2018 · Tags: CWE-264 - [Cisco WebEx Meeting Server: A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated…](https://agentprime.io/advisories/CVE-2017-12363.md) `CVE-2017-12363` · CVE record: Cisco WebEx Meeting Server · No CVSS score · Not analysed yet · Published 30 Nov 2017 · Tags: CWE-264 - [Cisco NX-OS: A vulnerability in the guest shell feature of Cisco NX-OS System Software could allow an…](https://agentprime.io/advisories/CVE-2017-12351.md) `CVE-2017-12351` · CVE record: Cisco NX-OS · No CVSS score · Not analysed yet · Published 30 Nov 2017 · Tags: CWE-264 - [Cisco Nexus Series Switches: A vulnerability in the Open Agent Container (OAC) feature of Cisco Nexus Series Switches…](https://agentprime.io/advisories/CVE-2017-12342.md) `CVE-2017-12342` · CVE record: Cisco Nexus Series Switches · No CVSS score · Not analysed yet · Published 30 Nov 2017 · Tags: CWE-264 - [Cisco Identity Services Engine: A vulnerability in the restricted shell of the Cisco Identity Services Engine (ISE) that…](https://agentprime.io/advisories/CVE-2017-12261.md) `CVE-2017-12261` · CVE record: Cisco Identity Services Engine · No CVSS score · Not analysed yet · Published 2 Nov 2017 · Tags: CWE-264 - [A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote attacker to interact maliciously with the services or virtual machines (VMs) op…](https://agentprime.io/advisories/CVE-2017-12251.md) `CVE-2017-12251` · CVE record: Cisco Cloud Services Platform 2100 · No CVSS score · Not analysed yet · Published 19 Oct 2017 · Tags: CWE-264 - [A vulnerability in the Network Access Manager (NAM) of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to enable multiple network adapters, aka a Dual-Homed Inter…](https://agentprime.io/advisories/CVE-2017-12268.md) `CVE-2017-12268` · CVE record: Cisco AnyConnect Network Access Manager · No CVSS score · Not analysed yet · Published 5 Oct 2017 · Tags: CWE-264 - [Cisco Meeting App: A vulnerability in the routine that loads DLL files in Cisco Meeting App for Windows…](https://agentprime.io/advisories/CVE-2017-12266.md) `CVE-2017-12266` · CVE record: Cisco Meeting App · No CVSS score · Not analysed yet · Published 5 Oct 2017 · Tags: CWE-264 - [Cisco IOS XE: A vulnerability in motherboard console ports of line cards for Cisco ASR 1000 Series…](https://agentprime.io/advisories/CVE-2017-12239.md) `CVE-2017-12239` · CVE record: Cisco IOS XE · No CVSS score · Not analysed yet · Published 28 Sept 2017 · Tags: CWE-264 - [Cisco IOS XE: A vulnerability in the web-based user interface (web UI) of Cisco IOS XE 16.2 could allow…](https://agentprime.io/advisories/CVE-2017-12230.md) `CVE-2017-12230` · CVE record: Cisco IOS XE · No CVSS score · Not analysed yet · Published 28 Sept 2017 · Tags: CWE-264 - [Cisco IOS XE: A vulnerability in the web-based Wireless Controller GUI of Cisco IOS XE Software for…](https://agentprime.io/advisories/CVE-2017-12226.md) `CVE-2017-12226` · CVE record: Cisco IOS XE · No CVSS score · Not analysed yet · Published 28 Sept 2017 · Tags: CWE-264 - [Cisco Unified Customer Voice Portal: A vulnerability in the Operations, Administration, Maintenance…](https://agentprime.io/advisories/CVE-2017-12214.md) `CVE-2017-12214` · CVE record: Cisco Unified Customer Voice Portal · No CVSS score · Not analysed yet · Published 21 Sept 2017 · Tags: CWE-264 - [ABB VSN300 WiFi Logger Card: A Permissions, Privileges, and Access Controls issue was discovered in ABB VSN300 WiFi…](https://agentprime.io/advisories/CVE-2017-7916.md) `CVE-2017-7916` · CVE record: ABB VSN300 WiFi Logger Card · No CVSS score · Not analysed yet · Published 7 Aug 2017 · Tags: CWE-264 - [Cisco Elastic Services Controller: A vulnerability in the Play Framework of Cisco Elastic Services Controller (ESC) could…](https://agentprime.io/advisories/CVE-2017-6713.md) `CVE-2017-6713` · CVE record: Cisco Elastic Services Controller · No CVSS score · Not analysed yet · Published 6 Jul 2017 · Tags: CWE-264 - [A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server by using an account…](https://agentprime.io/advisories/CVE-2017-6640.md) `CVE-2017-6640` · CVE record: Cisco Prime Data Center Network Manager Server Static Credential Vulnerability · No CVSS score · EPSS 0.11 · Not analysed yet · Published 8 Jun 2017 · Tags: CWE-264 - [A vulnerability in how DLL files are loaded with Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and run an executable file with privileges…](https://agentprime.io/advisories/CVE-2017-6638.md) `CVE-2017-6638` · CVE record: Cisco AnyConnect Local Privilege Escalation Vulnerability · No CVSS score · Not analysed yet · Published 8 Jun 2017 · Tags: CWE-264 - [Cisco Prime Collaboration Provisioning: A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software…](https://agentprime.io/advisories/CVE-2017-6637.md) `CVE-2017-6637` · CVE record: Cisco Prime Collaboration Provisioning · No CVSS score · Not analysed yet · Published 22 May 2017 · Tags: CWE-264 - [Cisco Prime Collaboration Provisioning: A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software…](https://agentprime.io/advisories/CVE-2017-6635.md) `CVE-2017-6635` · CVE record: Cisco Prime Collaboration Provisioning · No CVSS score · Not analysed yet · Published 22 May 2017 · Tags: CWE-264 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .