# CWE-264.

Every Advisory and CVE whose sources give the weakness CWE-264, newest first.

## Records, newest first (an older page)

- [ABB System 800xA Inter process communication vulnerability - 800xA Information Management](https://agentprime.io/advisories/CVE-2020-8489.md)
  `CVE-2020-8489` · CVE record: ABB 800xA Information Management · CVSS 7.8 High · Not analysed yet · Published 29 Apr 2020 · Tags: CWE-264
- [ABB System 800xA Inter process communication vulnerability - 800xA Batch Management](https://agentprime.io/advisories/CVE-2020-8488.md)
  `CVE-2020-8488` · CVE record: ABB 800xA Batch Management · CVSS 7.8 High · Not analysed yet · Published 29 Apr 2020 · Tags: CWE-264
- [ABB System 800xA Inter process communication vulnerability - System 800xA Base](https://agentprime.io/advisories/CVE-2020-8487.md)
  `CVE-2020-8487` · CVE record: ABB System 800xA Base · CVSS 6.6 Medium · Not analysed yet · Published 29 Apr 2020 · Tags: CWE-264
- [ABB System 800xA Inter process communication vulnerability - 800xA RNRP](https://agentprime.io/advisories/CVE-2020-8486.md)
  `CVE-2020-8486` · CVE record: ABB 800xA RNRP · CVSS 6.6 Medium · Not analysed yet · Published 29 Apr 2020 · Tags: CWE-264
- [ABB System 800xA Inter process communication vulnerability - 800xA for Mod 300](https://agentprime.io/advisories/CVE-2020-8485.md)
  `CVE-2020-8485` · CVE record: ABB 800xA for MOD300 · CVSS 7.8 High · Not analysed yet · Published 29 Apr 2020 · Tags: CWE-264
- [ABB System 800xA Inter process communication vulnerability - 800xA for DCI](https://agentprime.io/advisories/CVE-2020-8484.md)
  `CVE-2020-8484` · CVE record: ABB 800xA for DCI · CVSS 7.8 High · Not analysed yet · Published 29 Apr 2020 · Tags: CWE-264
- [ABB System 800xA Inter process communication vulnerability](https://agentprime.io/advisories/CVE-2020-8478.md)
  `CVE-2020-8478` · CVE record: ABB OPC Server for AC 800M and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 29 Apr 2020 · Tags: CWE-264
- [ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Information Exposure](https://agentprime.io/advisories/CVE-2019-19107.md)
  `CVE-2019-19107` · CVE record: ABB TG/S 3.2 Telephone Gateway and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 22 Apr 2020 · Tags: CWE-264
- [ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Access Control issues](https://agentprime.io/advisories/CVE-2019-19106.md)
  `CVE-2019-19106` · CVE record: ABB TG/S 3.2 Telephone Gateway and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Apr 2020 · Tags: CWE-264
- [Privilege Escalation vulnerability in ENS](https://agentprime.io/advisories/CVE-2020-7255.md)
  `CVE-2020-7255` · CVE record: McAfee LLC McAfee Endpoint Security (ENS) · CVSS 3.9 Low · Not analysed yet · Published 15 Apr 2020 · Tags: CWE-264
- [Privilege Escalation vulnerability through Symbolic links in ENS](https://agentprime.io/advisories/CVE-2020-7257.md)
  `CVE-2020-7257` · CVE record: McAfee LLC McAfee Endpoint Security (ENS) · CVSS 8.4 High · Not analysed yet · Published 15 Apr 2020 · Tags: CWE-264
- [Unsigned executable vulnerability in ENS can be used to bypass intended self-protection rules](https://agentprime.io/advisories/CVE-2020-7259.md)
  `CVE-2020-7259` · CVE record: McAfee LLC McAfee Endpoint Security (ENS) · CVSS 6.6 Medium · Not analysed yet · Published 15 Apr 2020 · Tags: CWE-264
- [Junos OS: Privilege escalation vulnerability in dual REs, VC or HA cluster may allow unauthorized configuration change.](https://agentprime.io/advisories/CVE-2020-1630.md)
  `CVE-2020-1630` · CVE record: Juniper Networks Junos OS · CVSS 5.0 Medium · Not analysed yet · Published 8 Apr 2020 · Tags: Race condition, CWE-264
- [Junos OS: QFX10K Series, EX9200 Series, MX Series, PTX Series: Privilege escalation vulnerability in NG-RE.](https://agentprime.io/advisories/CVE-2020-1619.md)
  `CVE-2020-1619` · CVE record: Juniper Networks Junos OS · CVSS 6.0 Medium · Not analysed yet · Published 8 Apr 2020 · Tags: CWE-20, CWE-264
- [ENS configuration can be edited by attacker with local administrator permissions](https://agentprime.io/advisories/CVE-2020-7263.md)
  `CVE-2020-7263` · CVE record: McAfee, LLC Endpoint Security (ENS) for Window · CVSS 6.5 Medium · Not analysed yet · Published 1 Apr 2020 · Tags: CWE-264
- [MACC installer DLL side loading](https://agentprime.io/advisories/CVE-2020-7260.md)
  `CVE-2020-7260` · CVE record: McAfee, LLC Mcafee Application and Change Control (MACC) · CVSS 7.3 High · Not analysed yet · Published 26 Mar 2020 · Tags: CWE-264
- [Cisco SD-WAN Solution Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2020-3265.md)
  `CVE-2020-3265` · CVE record: Cisco Cisco SD-WAN Solution · CVSS 7.0 High · Not analysed yet · Published 19 Mar 2020 · Tags: CWE-264
- [Privilege escalation in Advanced Threat Defense](https://agentprime.io/advisories/CVE-2020-7254.md)
  `CVE-2020-7254` · CVE record: McAfee, LLC McAfee Advanced Threat Defense (ATD) · CVSS 7.7 High · Not analysed yet · Published 12 Mar 2020 · Tags: Privilege escalation, CWE-264
- [Cisco Data Center Network Manager Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2020-3112.md)
  `CVE-2020-3112` · CVE record: Cisco Cisco Data Center Network Manager · CVSS 8.8 High · Not analysed yet · Published 19 Feb 2020 · Tags: CWE-264
- [Lenovo XClarity Controller (XCC): An authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08…](https://agentprime.io/advisories/CVE-2019-6195.md)
  `CVE-2019-6195` · CVE record: Lenovo XClarity Controller (XCC) · CVSS 4.8 Medium · Not analysed yet · Published 14 Feb 2020 · Tags: CWE-264
- [Code Injection into Bitdefender AV for Mac](https://agentprime.io/advisories/CVE-2020-8093.md)
  `CVE-2020-8093` · CVE record: Bitdefender Bitdefender Antivirus for Mac · CVSS 5.3 Medium · Not analysed yet · Published 29 Jan 2020 · Tags: CWE-264
- [Privilege escalation in Bitdefender AV for Mac](https://agentprime.io/advisories/CVE-2020-8092.md)
  `CVE-2020-8092` · CVE record: Bitdefender Bitdefender Antivirus for Mac · CVSS 1.6 Low · Not analysed yet · Published 29 Jan 2020 · Tags: CWE-264
- [Cisco SD-WAN Solution Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2020-3115.md)
  `CVE-2020-3115` · CVE record: Cisco Cisco SD-WAN Solution · CVSS 8.8 High · Not analysed yet · Published 26 Jan 2020 · Tags: CWE-264
- [Cisco DNA Spaces: Connector Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-15996.md)
  `CVE-2019-15996` · CVE record: Cisco Cisco DNA Spaces · CVSS 6.7 Medium · Not analysed yet · Published 26 Nov 2019 · Tags: CWE-264
- [Cisco Webex Network Recording Admin Page Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-15960.md)
  `CVE-2019-15960` · CVE record: Cisco Cisco Webex Meetings · CVSS 5.4 Medium · Not analysed yet · Published 26 Nov 2019 · Tags: CWE-264
- [Cisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability](https://agentprime.io/advisories/CVE-2019-1982.md)
  `CVE-2019-1982` · CVE record: Cisco Cisco Firepower Management Center · CVSS 5.8 Medium · Not analysed yet · Published 5 Nov 2019 · Tags: CWE-264
- [Cisco Firepower Threat Defense Software NULL Character Obfuscation Detection Bypass Vulnerability](https://agentprime.io/advisories/CVE-2019-1981.md)
  `CVE-2019-1981` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.8 Medium · Not analysed yet · Published 5 Nov 2019 · Tags: CWE-264
- [Cisco Firepower Threat Defense Software Nonstandard Protocol Detection Bypass Vulnerability](https://agentprime.io/advisories/CVE-2019-1980.md)
  `CVE-2019-1980` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.8 Medium · Not analysed yet · Published 5 Nov 2019 · Tags: CWE-264
- [Cisco Firepower Threat Defense Software Stream Reassembly Bypass Vulnerability](https://agentprime.io/advisories/CVE-2019-1978.md)
  `CVE-2019-1978` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.8 Medium · Not analysed yet · Published 5 Nov 2019 · Tags: CWE-264
- [ClipSoft REXPERT: ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to arbitrary file…](https://agentprime.io/advisories/CVE-2019-17326.md)
  `CVE-2019-17326` · CVE record: ClipSoft REXPERT · No CVSS score · Not analysed yet · Published 30 Oct 2019 · Tags: CWE-264
- [ClipSoft REXPERT: ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST…](https://agentprime.io/advisories/CVE-2019-17322.md)
  `CVE-2019-17322` · CVE record: ClipSoft REXPERT · No CVSS score · Not analysed yet · Published 30 Oct 2019 · Tags: CWE-264
- [Cisco TelePresence Collaboration Endpoint Software Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-15277.md)
  `CVE-2019-15277` · CVE record: Cisco Cisco TelePresence TC Software · CVSS 6.4 Medium · Not analysed yet · Published 16 Oct 2019 · Tags: CWE-264
- [Cisco TelePresence Collaboration Endpoint Software Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-15275.md)
  `CVE-2019-15275` · CVE record: Cisco Cisco TelePresence TC Software · CVSS 6.7 Medium · Not analysed yet · Published 16 Oct 2019 · Tags: CWE-264
- [Cisco Unified Communications Manager Security Bypass Vulnerability](https://agentprime.io/advisories/CVE-2019-15272.md)
  `CVE-2019-15272` · CVE record: Cisco Cisco Unified Communications Manager · CVSS 6.5 Medium · Not analysed yet · Published 2 Oct 2019 · Tags: CWE-264
- [The Eclipse Foundation Eclipse OMR: Prior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code…](https://agentprime.io/advisories/CVE-2019-11773.md)
  `CVE-2019-11773` · CVE record: The Eclipse Foundation Eclipse OMR · No CVSS score · Not analysed yet · Published 12 Sept 2019 · Tags: CWE-264
- [Cisco NX-OS Software SNMP Access Control List Configuration Name Bypass Vulnerability](https://agentprime.io/advisories/CVE-2019-1969.md)
  `CVE-2019-1969` · CVE record: Cisco Cisco NX-OS Software · CVSS 5.8 Medium · Not analysed yet · Published 29 Aug 2019 · Tags: CWE-264
- [Cisco Unified Computing System Fabric Interconnect root Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1966.md)
  `CVE-2019-1966` · CVE record: Cisco Cisco Unified Computing System (Managed) · CVSS 7.8 High · Not analysed yet · Published 29 Aug 2019 · Tags: CWE-264
- [Little Snitch: Little Snitch versions 4.3.0 to 4.3.2 have a local privilege escalation vulnerability in…](https://agentprime.io/advisories/CVE-2019-13013.md)
  `CVE-2019-13013` · CVE record: Little Snitch · No CVSS score · Not analysed yet · Published 23 Aug 2019 · Tags: CWE-264
- [Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool.](https://agentprime.io/advisories/CVE-2019-13014.md)
  `CVE-2019-13014` · CVE record: Little Snitch · No CVSS score · Not analysed yet · Published 23 Aug 2019 · Tags: CWE-264
- [Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-12634.md)
  `CVE-2019-12634` · CVE record: Cisco Cisco Unified Computing System Director · CVSS 8.6 High · Not analysed yet · Published 21 Aug 2019 · Tags: CWE-264
- [Privilege Escalation vulnerability in FRP 5.x earlier than 5.1.0.209](https://agentprime.io/advisories/CVE-2019-3637.md)
  `CVE-2019-3637` · CVE record: McAfee, LLC McAfee FRP · CVSS 4.1 Medium · Not analysed yet · Published 14 Aug 2019 · Tags: CWE-264
- [ESTSOFT ALTOOLS Update Service: ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation…](https://agentprime.io/advisories/CVE-2019-12808.md)
  `CVE-2019-12808` · CVE record: ESTSOFT ALTOOLS Update Service · No CVSS score · Not analysed yet · Published 13 Aug 2019 · Tags: CWE-264
- [Cisco Enterprise NFV Infrastructure Software Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1972.md)
  `CVE-2019-1972` · CVE record: Cisco Cisco Enterprise NFV Infrastructure Software · CVSS 6.7 Medium · Not analysed yet · Published 8 Aug 2019 · Tags: CWE-264
- [The Eclipse Foundation Eclipse OpenJ9: AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate…](https://agentprime.io/advisories/CVE-2019-11771.md)
  `CVE-2019-11771` · CVE record: The Eclipse Foundation Eclipse OpenJ9 · No CVSS score · Not analysed yet · Published 17 Jul 2019 · Tags: CWE-264
- [Cisco Application Policy Infrastructure Controller REST API Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1889.md)
  `CVE-2019-1889` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 7.2 High · Not analysed yet · Published 4 Jul 2019 · Tags: CWE-264
- [Cisco Jabber for Windows DLL Preloading Vulnerability](https://agentprime.io/advisories/CVE-2019-1855.md)
  `CVE-2019-1855` · CVE record: Cisco Cisco Jabber for Windows · CVSS 7.3 High · Not analysed yet · Published 4 Jul 2019 · Tags: CWE-264
- [Cisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2019-1620.md)
  `CVE-2019-1620` · CVE record: Cisco Cisco Data Center Network Manager · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.84 · Not analysed yet · Published 27 Jun 2019 · Tags: CWE-264
- [Cisco Data Center Network Manager Arbitrary File Download Vulnerability](https://agentprime.io/advisories/CVE-2019-1621.md)
  `CVE-2019-1621` · CVE record: Cisco Cisco Data Center Network Manager · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.30 · Not analysed yet · Published 27 Jun 2019 · Tags: CWE-264
- [Cisco Prime Infrastructure Virtual Domain Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1906.md)
  `CVE-2019-1906` · CVE record: Cisco Cisco Prime Infrastructure · CVSS 4.3 Medium · Not analysed yet · Published 20 Jun 2019 · Tags: CWE-264
- [Cisco SD-WAN Solution Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1625.md)
  `CVE-2019-1625` · CVE record: Cisco Cisco SD-WAN Solution · CVSS 7.8 High · Not analysed yet · Published 20 Jun 2019 · Tags: CWE-264
- [Cisco SD-WAN Solution Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1626.md)
  `CVE-2019-1626` · CVE record: Cisco Cisco SD-WAN Solution · CVSS 8.8 High · Not analysed yet · Published 20 Jun 2019 · Tags: CWE-264
- [Cisco NX-OS Software Bash Bypass Guest Shell Vulnerability](https://agentprime.io/advisories/CVE-2019-1730.md)
  `CVE-2019-1730` · CVE record: Cisco Cisco NX-OS Software · CVSS 6.0 Medium · Not analysed yet · Published 15 May 2019 · Tags: CWE-264
- [Cisco NX-OS Software Python Parser Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1727.md)
  `CVE-2019-1727` · CVE record: Cisco Cisco NX-OS Software · CVSS 4.2 Medium · Not analysed yet · Published 15 May 2019 · Tags: CWE-264
- [Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Root Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1803.md)
  `CVE-2019-1803` · CVE record: Cisco Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode · CVSS 7.8 High · Not analysed yet · Published 3 May 2019 · Tags: CWE-264
- [Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1682.md)
  `CVE-2019-1682` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 7.8 High · Not analysed yet · Published 3 May 2019 · Tags: CWE-264
- [Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1592.md)
  `CVE-2019-1592` · CVE record: Cisco Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode 11.0.1b · CVSS 7.8 High · Not analysed yet · Published 3 May 2019 · Tags: CWE-264
- [Cisco Common Services Platform Collector Static Credential Vulnerability](https://agentprime.io/advisories/CVE-2019-1723.md)
  `CVE-2019-1723` · CVE record: Cisco Cisco Common Services Platform Collector Software · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Mar 2019 · Tags: CWE-264
- [Cisco NX-OS Software Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1602.md)
  `CVE-2019-1602` · CVE record: Cisco Nexus 3000 Series Switches and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Mar 2019 · Tags: CWE-264
- [Cisco FXOS and NX-OS Software Unauthorized Directory Access Vulnerability](https://agentprime.io/advisories/CVE-2019-1600.md)
  `CVE-2019-1600` · CVE record: Cisco Firepower 4100 Series Next-Generation Firewalls and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 7 Mar 2019 · Tags: CWE-264
- [Cisco NX-OS Software Bash Shell Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1596.md)
  `CVE-2019-1596` · CVE record: Cisco Nexus 3000 Series Switches and 4 more · CVSS 7.8 High · Not analysed yet · Published 7 Mar 2019 · Tags: CWE-264

Newest: <https://agentprime.io/advisories/tag/cwe-264.md>
Older: <https://agentprime.io/advisories/tag/cwe-264.md?cursor=WyIyMDE5LTAzLTA3VDE5OjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOS0xNTk2Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-264&cursor=WyIyMDIwLTA0LTI5VDAyOjA5OjIxLjAwMDAwMFoiLCJDVkUtMjAxOS0xOTEwMCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-264/?cursor=WyIyMDIwLTA0LTI5VDAyOjA5OjIxLjAwMDAwMFoiLCJDVkUtMjAxOS0xOTEwMCJd>. Everything for agents: <https://agentprime.io/llms.txt>.