Skip to content
BackEsc
Connect AISign inSign up free

CWE-264 · weakness in Access Control

Permissions, Privileges, and Access Controls

5,337 CVEs · 2 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Connect AI

exploited in the wild
2
check available
7
likely to be exploited
321

Every one of the 5,337 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1,…CVE-2015-1769Microsoft · CVSS 6.6 · 4.1% likely

    Microsoft

  2. SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd."CVE-2016-3643SolarWinds · CVSS 7.8 · 3.7% likely

    SolarWinds

  3. WordPress RevSlider - Remote Code Execution via File UploadCVE-2014-9735Themepunch · 76% likely

    Themepunch

  4. DotNetNuke 07.04.00 - Administration Authentication BypassCVE-2015-2794Dnnsoftware · 75% likely

    Dnnsoftware

  5. ZTE Cable Modem Web ShellCVE-2014-2321Zte · 59% likely

    ZTE

  6. Red Hat JBoss Enterprise Application Platform - Sensitive Information DisclosureCVE-2010-1429Redhat · 54% likely

    Red Hat1 bounty report

  7. ADB/Pirelli ADSL2/2+ Wireless Router P.DGA4001N - Information DisclosureCVE-2015-0554Adb · 39% likely
  8. ShortCode Addons - Unauthenticated Options UpdateCVE-2022-34487biplob018 · CVSS 9.8 · 3.3% likely

    Biplob018

  9. WordPress Accordions - Unauthenticated Settings UpdateCVE-2022-33198Biplob Adhikari · CVSS 9.8 · 3.3% likely

    Biplob Adhikari

  10. The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 1…CVE-2012-1459Ahnlab · 100% likely

    Ahnlab

  11. The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protecti…CVE-2012-1443Ahnlab · 100% likely

    Ahnlab

  12. The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6…CVE-2012-1456Avg · 100% likely

    Avg

  13. The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (ak…CVE-2012-1457Anti-Virus · 100% likely
  14. The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman Anti…CVE-2012-1446Antiy · 100% likely

    Antiy

  15. The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, McAfee Gate…CVE-2012-1431Bitdefender · 100% likely

    Bitdefender

  16. The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (for…CVE-2012-1430Bitdefender · 100% likely

    Bitdefender

  17. The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, eSafe 7.0.17.0, Kaspersky…CVE-2012-1442Antiy · 99% likely

    Antiy

  18. The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus…CVE-2012-1461Anti-Virus · 98% likely
  19. ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and ex…CVE-2014-0112Apache · 98% likely

    Apache

  20. The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee…CVE-2012-1453Antiy · 98% likely

    Antiy

  21. The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0,…CVE-2012-1462Ahnlab · 97% likely

    Ahnlab

  22. The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersk…CVE-2012-1420Cat · 97% likely

    Cat

  23. The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Jiangmin Antiviru…CVE-2012-1460Antiy · 94% likely

    Antiy

  24. The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7…CVE-2012-1463Ahnlab · 94% likely

    Ahnlab

  25. The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass mal…CVE-2012-1422Cat · 93% likely

    Cat

  26. The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0,…CVE-2012-1436Ahnlab · 93% likely

    Ahnlab

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Sign inSign up free

Updated