CWE-264: CWE-264

CVE-2021-27644 is a SQL injection vulnerability in Apache DolphinScheduler's data source center that allows authorized users to execute arbitrary SQL ...

A permission control vulnerability in Huawei's Settings module allows unauthorized access to sensitive system settings. This affects Huawei devices ru...

A permission bypass vulnerability in the media library module allows unauthorized access to restricted media resources. This affects systems running t...

This CVE describes a local privilege escalation vulnerability in Elastic Endpoint Security for Windows. Unprivileged users can exploit this flaw to ga...

This CVE describes a cross-process screen stack vulnerability in Huawei's UIExtension module that could allow unauthorized access to screen content ac...

This CVE describes a denial-of-service vulnerability in Qualcomm System Memory Management Unit (SMMU) where uncontrolled resource consumption occurs w...

This Samba vulnerability allows delegated administrators with object creation permissions in Active Directory to modify security-sensitive attributes ...

This vulnerability allows API privilege escalation in Huawei/HarmonyOS wifienhance modules, enabling attackers to modify ARP tables without proper aut...

CVE-2023-39384 is an incomplete permission verification vulnerability in Huawei/HarmonyOS input method modules that could allow unauthorized access to...

This CVE describes a permission control vulnerability in Huawei audio modules that allows unauthorized access to audio device functions. Successful ex...

This CVE describes an inappropriate authorization vulnerability in Huawei HarmonyOS system apps that could allow unauthorized access to system functio...

This vulnerability allows unauthenticated attackers to perform denial-of-service (DoS) attacks on FortiNAC devices by exploiting improper access contr...

This vulnerability allows users with access to IBM Db2 Kubernetes pods to make unauthorized system calls, potentially compromising container security....

This vulnerability involves memory corruption when an invoke call and a TEE (Trusted Execution Environment) call target the same trusted application s...

Dell Display and Peripheral Manager for macOS contains an improper access control vulnerability that allows low-privileged users to modify files in th...

This vulnerability allows authenticated WordPress users to modify WordPress options, potentially leading to privilege escalation or site takeover. It ...

This vulnerability allows authenticated WordPress users to modify WordPress options through the Flipbox plugin. Attackers with contributor-level acces...

A permission control vulnerability in the startup recovery module allows attackers to bypass intended access restrictions. This affects availability a...

CVE-2017-9711 is a privilege escalation vulnerability in Qualcomm components where unprivileged processes can perform IOCTL calls that should be restr...

This CVE describes a permission control vulnerability in Huawei's HDC module that could allow unauthorized access to sensitive service data. The vulne...

This critical vulnerability in aimhubio aim allows remote attackers to execute arbitrary code through improper input validation in the RestrictedPytho...

A permission control vulnerability in the AMS module could allow attackers to disrupt system availability. This affects Huawei devices running vulnera...

A permission control vulnerability in Huawei's package management module could allow unauthorized access to sensitive information. This affects Huawei...

A permission control vulnerability in the print module allows unauthorized access to sensitive information. This affects systems running vulnerable Hu...

A permission control vulnerability in Huawei Gallery module allows unauthorized access to protected content. This affects Huawei smartphone users who ...

A permission control vulnerability in Huawei's media library module allows unauthorized access to protected media files. This affects Huawei devices a...

A permission control vulnerability in Huawei's Connectivity module allows unauthorized access to restricted functionality. This affects Huawei devices...

This CVE-2024-32996 is a privilege escalation vulnerability in Huawei/HarmonyOS account modules that allows attackers to gain elevated privileges. Suc...

This vulnerability in the WindowManager module allows unauthorized access to sensitive information due to improper permission control. It affects Huaw...

This vulnerability involves improper permission control in the print module, allowing unauthorized access to sensitive information. It affects systems...

This vulnerability allows unauthorized access to album content due to improper access control in Huawei devices. It affects users of specific Huawei s...

This vulnerability allows authenticated local attackers with administrative credentials on Cisco ASA/FTD devices to escalate privileges to root by exp...

This vulnerability involves an improper security check in the card module, potentially allowing unauthorized access to sensitive information. It affec...

A permission control vulnerability in Huawei network modules allows unauthorized access to sensitive information. This affects Huawei devices and serv...

This vulnerability allows third-party calling applications to send unverified broadcasts to the audio framework module on affected Huawei devices. Thi...

This vulnerability allows unauthenticated remote attackers to bypass egress ACLs on Cisco IOS XR devices when traffic flows between different line car...

This vulnerability involves improper permission control in the print module, allowing unauthorized access to sensitive information. It affects Huawei ...

A permission control vulnerability in the Wi-Fi module could allow unauthorized access to sensitive service information. This affects Huawei devices w...

This vulnerability involves improper exception handling in the print module of Huawei products, which could allow attackers to cause denial of service...

A permission control vulnerability in Huawei Wi-Fi modules could allow unauthorized access to sensitive information. This affects Huawei consumer devi...

This CVE describes a permission control vulnerability in Huawei's media module that could allow unauthorized access to sensitive media content. Succes...

A vulnerability in Cisco Nexus 3550-F Switches allows unauthenticated remote attackers to bypass ACL deny rules during device reboot, sending traffic ...

A permission control vulnerability in Huawei's App Lock module could allow attackers to bypass application locking mechanisms. This affects availabili...

This vulnerability allows attackers to bypass permission verification in Huawei's DownloadProviderMain module APIs, potentially disrupting download se...

A permission bypass vulnerability in the calendar storage module allows unauthorized access to calendar data. This affects Huawei head units where att...

A configuration defect in the file management module could allow unauthorized access to application data. This vulnerability affects Huawei laptop use...

A permission control vulnerability in the cellular_data module could allow unauthorized access to cellular data functionality. This affects Huawei con...