Advisories · Weakness

CWE-264.

Every Advisory and CVE whose sources give the weakness CWE-264, newest first.

CVE-2020-8489 CVE record

CVSS 7.8 High

ABB System 800xA Inter process communication vulnerability - 800xA Information Management
- ABB 800xA Information Management
- CWE-264
Not analysed yet 29 Apr 2020
CVE-2020-8488 CVE record

CVSS 7.8 High

ABB System 800xA Inter process communication vulnerability - 800xA Batch Management
- ABB 800xA Batch Management
- CWE-264
Not analysed yet 29 Apr 2020
CVE-2020-8487 CVE record

CVSS 6.6 Medium

ABB System 800xA Inter process communication vulnerability - System 800xA Base
- ABB System 800xA Base
- CWE-264
Not analysed yet 29 Apr 2020
CVE-2020-8486 CVE record

CVSS 6.6 Medium

ABB System 800xA Inter process communication vulnerability - 800xA RNRP
- ABB 800xA RNRP
- CWE-264
Not analysed yet 29 Apr 2020
CVE-2020-8485 CVE record

CVSS 7.8 High

ABB System 800xA Inter process communication vulnerability - 800xA for Mod 300
- ABB 800xA for MOD300
- CWE-264
Not analysed yet 29 Apr 2020
CVE-2020-8484 CVE record

CVSS 7.8 High

ABB System 800xA Inter process communication vulnerability - 800xA for DCI
- ABB 800xA for DCI
- CWE-264
Not analysed yet 29 Apr 2020
CVE-2020-8478 CVE record

CVSS 5.3 Medium

ABB System 800xA Inter process communication vulnerability
- ABB OPC Server for AC 800M
- ABB MMS Server for AC 800M
- CWE-264
Not analysed yet 29 Apr 2020
CVE-2019-19107 CVE record

CVSS 6.2 Medium

ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Information Exposure
- ABB TG/S 3.2 Telephone Gateway
- Busch-Jaeger 6186/11 Telefon-Gateway
- CWE-264
Not analysed yet 22 Apr 2020
CVE-2019-19106 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Access Control issues
- ABB TG/S 3.2 Telephone Gateway
- Busch-Jaeger 6186/11 Telefon-Gateway
- CWE-264
Not analysed yet 22 Apr 2020
CVE-2020-7255 CVE record

CVSS 3.9 Low

Privilege Escalation vulnerability in ENS
- McAfee LLC McAfee Endpoint Security (ENS)
- CWE-264
Not analysed yet 15 Apr 2020
CVE-2020-7257 CVE record

CVSS 8.4 High

Privilege Escalation vulnerability through Symbolic links in ENS
- McAfee LLC McAfee Endpoint Security (ENS)
- CWE-264
Not analysed yet 15 Apr 2020
CVE-2020-7259 CVE record

CVSS 6.6 Medium

Unsigned executable vulnerability in ENS can be used to bypass intended self-protection rules
- McAfee LLC McAfee Endpoint Security (ENS)
- CWE-264
Not analysed yet 15 Apr 2020
CVE-2020-1630 CVE record

CVSS 5.0 Medium

Junos OS: Privilege escalation vulnerability in dual REs, VC or HA cluster may allow unauthorized configuration change.
- Juniper Networks Junos OS
- Race condition
- CWE-264
Not analysed yet 8 Apr 2020
CVE-2020-1619 CVE record

CVSS 6.0 Medium

Junos OS: QFX10K Series, EX9200 Series, MX Series, PTX Series: Privilege escalation vulnerability in NG-RE.
- Juniper Networks Junos OS
- CWE-20
- CWE-264
Not analysed yet 8 Apr 2020
CVE-2020-7263 CVE record

CVSS 6.5 Medium

ENS configuration can be edited by attacker with local administrator permissions
- McAfee, LLC Endpoint Security (ENS) for Window
- CWE-264
Not analysed yet 1 Apr 2020
CVE-2020-7260 CVE record

CVSS 7.3 High

MACC installer DLL side loading
- McAfee, LLC Mcafee Application and Change Control (MACC)
- CWE-264
Not analysed yet 26 Mar 2020
CVE-2020-3265 CVE record

CVSS 7.0 High

Cisco SD-WAN Solution Privilege Escalation Vulnerability
- Cisco SD-WAN Solution
- CWE-264
Not analysed yet 19 Mar 2020
CVE-2020-7254 CVE record

CVSS 7.7 High

Privilege escalation in Advanced Threat Defense
- McAfee, LLC McAfee Advanced Threat Defense (ATD)
- Privilege escalation
- CWE-264
Not analysed yet 12 Mar 2020
CVE-2020-3112 CVE record

CVSS 8.8 High

Cisco Data Center Network Manager Privilege Escalation Vulnerability
- Cisco Data Center Network Manager
- CWE-264
Not analysed yet 19 Feb 2020
CVE-2019-6195 CVE record

CVSS 4.8 Medium

Lenovo XClarity Controller (XCC): An authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08…
- Lenovo XClarity Controller (XCC)
- CWE-264
Not analysed yet 14 Feb 2020
CVE-2020-8093 CVE record

CVSS 5.3 Medium

Code Injection into Bitdefender AV for Mac
- Bitdefender Antivirus for Mac
- CWE-264
Not analysed yet 29 Jan 2020
CVE-2020-8092 CVE record

CVSS 1.6 Low

Privilege escalation in Bitdefender AV for Mac
- Bitdefender Antivirus for Mac
- CWE-264
Not analysed yet 29 Jan 2020
CVE-2020-3115 CVE record

CVSS 8.8 High

Cisco SD-WAN Solution Local Privilege Escalation Vulnerability
- Cisco SD-WAN Solution
- CWE-264
Not analysed yet 26 Jan 2020
CVE-2019-15996 CVE record

CVSS 6.7 Medium

Cisco DNA Spaces: Connector Privilege Escalation Vulnerability
- Cisco DNA Spaces
- CWE-264
Not analysed yet 26 Nov 2019
CVE-2019-15960 CVE record

CVSS 5.4 Medium

Cisco Webex Network Recording Admin Page Privilege Escalation Vulnerability
- Cisco Webex Meetings
- CWE-264
Not analysed yet 26 Nov 2019
CVE-2019-1982 CVE record

CVSS 5.8 Medium

Cisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability
- Cisco Firepower Management Center
- CWE-264
Not analysed yet 5 Nov 2019
CVE-2019-1981 CVE record

CVSS 5.8 Medium

Cisco Firepower Threat Defense Software NULL Character Obfuscation Detection Bypass Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-264
Not analysed yet 5 Nov 2019
CVE-2019-1980 CVE record

CVSS 5.8 Medium

Cisco Firepower Threat Defense Software Nonstandard Protocol Detection Bypass Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-264
Not analysed yet 5 Nov 2019
CVE-2019-1978 CVE record

CVSS 5.8 Medium

Cisco Firepower Threat Defense Software Stream Reassembly Bypass Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-264
Not analysed yet 5 Nov 2019
CVE-2019-17326 CVE record

ClipSoft REXPERT: ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to arbitrary file…
- ClipSoft REXPERT
- CWE-264
Not analysed yet 30 Oct 2019
CVE-2019-17322 CVE record

ClipSoft REXPERT: ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST…
- ClipSoft REXPERT
- CWE-264
Not analysed yet 30 Oct 2019
CVE-2019-15277 CVE record

CVSS 6.4 Medium

Cisco TelePresence Collaboration Endpoint Software Privilege Escalation Vulnerability
- Cisco TelePresence TC Software
- CWE-264
Not analysed yet 16 Oct 2019
CVE-2019-15275 CVE record

CVSS 6.7 Medium

Cisco TelePresence Collaboration Endpoint Software Privilege Escalation Vulnerability
- Cisco TelePresence TC Software
- CWE-264
Not analysed yet 16 Oct 2019
CVE-2019-15272 CVE record

CVSS 6.5 Medium

Cisco Unified Communications Manager Security Bypass Vulnerability
- Cisco Unified Communications Manager
- CWE-264
Not analysed yet 2 Oct 2019
CVE-2019-11773 CVE record

The Eclipse Foundation Eclipse OMR: Prior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code…
- The Eclipse Foundation Eclipse OMR
- CWE-264
Not analysed yet 12 Sept 2019
CVE-2019-1969 CVE record

CVSS 5.8 Medium

Cisco NX-OS Software SNMP Access Control List Configuration Name Bypass Vulnerability
- Cisco NX-OS Software
- CWE-264
Not analysed yet 29 Aug 2019
CVE-2019-1966 CVE record

CVSS 7.8 High

Cisco Unified Computing System Fabric Interconnect root Privilege Escalation Vulnerability
- Cisco Unified Computing System (Managed)
- CWE-264
Not analysed yet 29 Aug 2019
CVE-2019-13013 CVE record

Little Snitch: Little Snitch versions 4.3.0 to 4.3.2 have a local privilege escalation vulnerability in…
- Little Snitch
- CWE-264
Not analysed yet 23 Aug 2019
CVE-2019-13014 CVE record

Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool.
- Little Snitch
- CWE-264
Not analysed yet 23 Aug 2019
CVE-2019-12634 CVE record

CVSS 8.6 High

Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Denial of Service Vulnerability
- Cisco Unified Computing System Director
- CWE-264
Not analysed yet 21 Aug 2019
CVE-2019-3637 CVE record

CVSS 4.1 Medium

Privilege Escalation vulnerability in FRP 5.x earlier than 5.1.0.209
- McAfee, LLC McAfee FRP
- CWE-264
Not analysed yet 14 Aug 2019
CVE-2019-12808 CVE record

ESTSOFT ALTOOLS Update Service: ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation…
- ESTSOFT ALTOOLS Update Service
- CWE-264
Not analysed yet 13 Aug 2019
CVE-2019-1972 CVE record

CVSS 6.7 Medium

Cisco Enterprise NFV Infrastructure Software Privilege Escalation Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- CWE-264
Not analysed yet 8 Aug 2019
CVE-2019-11771 CVE record

The Eclipse Foundation Eclipse OpenJ9: AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate…
- The Eclipse Foundation Eclipse OpenJ9
- CWE-264
Not analysed yet 17 Jul 2019
CVE-2019-1889 CVE record

CVSS 7.2 High

Cisco Application Policy Infrastructure Controller REST API Privilege Escalation Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- CWE-264
Not analysed yet 4 Jul 2019
CVE-2019-1855 CVE record

CVSS 7.3 High

Cisco Jabber for Windows DLL Preloading Vulnerability
- Cisco Jabber for Windows
- CWE-264
Not analysed yet 4 Jul 2019
CVE-2019-1620 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Cisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution Vulnerability
- Cisco Data Center Network Manager
- CWE-264
Not analysed yet 27 Jun 2019
CVE-2019-1621 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Cisco Data Center Network Manager Arbitrary File Download Vulnerability
- Cisco Data Center Network Manager
- CWE-264
Not analysed yet 27 Jun 2019
CVE-2019-1906 CVE record

CVSS 4.3 Medium

Cisco Prime Infrastructure Virtual Domain Privilege Escalation Vulnerability
- Cisco Prime Infrastructure
- CWE-264
Not analysed yet 20 Jun 2019
CVE-2019-1625 CVE record

CVSS 7.8 High

Cisco SD-WAN Solution Privilege Escalation Vulnerability
- Cisco SD-WAN Solution
- CWE-264
Not analysed yet 20 Jun 2019
CVE-2019-1626 CVE record

CVSS 8.8 High

Cisco SD-WAN Solution Privilege Escalation Vulnerability
- Cisco SD-WAN Solution
- CWE-264
Not analysed yet 20 Jun 2019
CVE-2019-1730 CVE record

CVSS 6.0 Medium

Cisco NX-OS Software Bash Bypass Guest Shell Vulnerability
- Cisco NX-OS Software
- CWE-264
Not analysed yet 15 May 2019
CVE-2019-1727 CVE record

CVSS 4.2 Medium

Cisco NX-OS Software Python Parser Privilege Escalation Vulnerability
- Cisco NX-OS Software
- CWE-264
Not analysed yet 15 May 2019
CVE-2019-1803 CVE record

CVSS 7.8 High

Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Root Privilege Escalation Vulnerability
- Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode
- CWE-264
Not analysed yet 3 May 2019
CVE-2019-1682 CVE record

CVSS 7.8 High

Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- CWE-264
Not analysed yet 3 May 2019
CVE-2019-1592 CVE record

CVSS 7.8 High

Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Privilege Escalation Vulnerability
- Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode 11.0.1b
- CWE-264
Not analysed yet 3 May 2019
CVE-2019-1723 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco Common Services Platform Collector Static Credential Vulnerability
- Cisco Common Services Platform Collector Software
- CWE-264
Not analysed yet 13 Mar 2019
CVE-2019-1602 CVE record

CVSS 7.8 High

Cisco NX-OS Software Privilege Escalation Vulnerability
- Cisco Nexus 3000 Series Switches
- Cisco Nexus 3500 Platform Switches
- CWE-264
Not analysed yet 8 Mar 2019
CVE-2019-1600 CVE record

CVSS 6.7 Medium

Cisco FXOS and NX-OS Software Unauthorized Directory Access Vulnerability
- Cisco Firepower 4100 Series Next-Generation Firewalls
- Cisco Firepower 9300 Series Next-Generation Firewalls
- CWE-264
Not analysed yet 7 Mar 2019
CVE-2019-1596 CVE record

CVSS 7.8 High

Cisco NX-OS Software Bash Shell Privilege Escalation Vulnerability
- Cisco Nexus 3000 Series Switches
- Cisco Nexus 3500 Platform Switches
- CWE-264
Not analysed yet 7 Mar 2019