CWE-264 · Access Control
Permissions, Privileges, and Access Controls
5,337CVEs
2exploited
7with a public check
321likely (EPSS 10%+)
SortMost likely exploited
5,337 CVEs with CWE-264 as their weakness · the first 2,000 are paged here; the Atlas names every one
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2015-1769In CISA KEVExploitedMount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1,…Microsoft · Windows · CVSS 6.6 · 2015-08-15 | 6.6 | 4.1% | 2015-08-15 |
| CVE-2016-3643In CISA KEVExploitedSolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd."SolarWinds · Virtualization Manager · CVSS 7.8 · 2016-06-17 | 7.8 | 3.7% | 2016-06-17 |
| CVE-2014-9735CheckWordPress RevSlider - Remote Code Execution via File UploadThemepunch · Showbiz Pro · 2015-06-30 | – | 76% | 2015-06-30 |
| CVE-2015-2794CheckDotNetNuke 07.04.00 - Administration Authentication BypassDnnsoftware · Dotnetnuke · 2017-02-06 | – | 75% | 2017-02-06 |
| CVE-2014-2321CheckZTE Cable Modem Web ShellZte · F460 · 2014-03-11 | – | 59% | 2014-03-11 |
| CVE-2010-1429CheckRed Hat JBoss Enterprise Application Platform - Sensitive Information DisclosureRedhat · Jboss Enterprise Application Platform · 2010-04-28 | – | 54% | 2010-04-28 |
| CVE-2015-0554CheckADB/Pirelli ADSL2/2+ Wireless Router P.DGA4001N - Information DisclosureAdb · P.dga4001n Firmware · 2015-01-21 | – | 39% | 2015-01-21 |
| CVE-2022-34487CheckShortCode Addons - Unauthenticated Options Updatebiplob018 · Shortcode Addons (WordPress plugin) · CVSS 9.8 · 2022-07-21 | 9.8 | 3.3% | 2022-07-21 |
| CVE-2022-33198CheckWordPress Accordions - Unauthenticated Settings UpdateBiplob Adhikari · Accordions (WordPress plugin) · CVSS 9.8 · 2022-07-21 | 9.8 | 3.3% | 2022-07-21 |
| CVE-2012-1459The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 1…Ahnlab · V3 Internet Security · 2012-03-21 | – | 100% | 2012-03-21 |
| CVE-2012-1443The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protecti…Ahnlab · V3 Internet Security · 2012-03-21 | – | 100% | 2012-03-21 |
| CVE-2012-1456The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6…Avg · Avg Anti-Virus · 2012-03-21 | – | 100% | 2012-03-21 |
| CVE-2012-1457The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (ak…Anti-Virus · Vba32 · 2012-03-21 | – | 100% | 2012-03-21 |
| CVE-2012-1446The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman Anti…Antiy · Avl Sdk · 2012-03-21 | – | 100% | 2012-03-21 |
| CVE-2012-1431The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, McAfee Gate…Bitdefender · Bitdefender · 2012-03-21 | – | 100% | 2012-03-21 |
| CVE-2012-1430The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (for…Bitdefender · Bitdefender · 2012-03-21 | – | 100% | 2012-03-21 |
| CVE-2012-1442The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, eSafe 7.0.17.0, Kaspersky…Antiy · Avl Sdk · 2012-03-21 | – | 99% | 2012-03-21 |
| CVE-2012-1461The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus…Anti-Virus · Vba32 · 2012-03-21 | – | 98% | 2012-03-21 |
| CVE-2014-0112ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and ex…Apache · Struts · 2014-04-29 | – | 98% | 2014-04-29 |
| CVE-2012-1453The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee…Antiy · Avl Sdk · 2012-03-21 | – | 98% | 2012-03-21 |
| CVE-2012-1462The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0,…Ahnlab · V3 Internet Security · 2012-03-21 | – | 97% | 2012-03-21 |
| CVE-2012-1420The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersk…Cat · Quick Heal · 2012-03-21 | – | 97% | 2012-03-21 |
| CVE-2012-1460The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Jiangmin Antiviru…Antiy · Avl Sdk · 2012-03-21 | – | 94% | 2012-03-21 |
| CVE-2012-1463The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7…Ahnlab · V3 Internet Security · 2012-03-21 | – | 94% | 2012-03-21 |
| CVE-2012-1422The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass mal…Cat · Quick Heal · 2012-03-21 | – | 93% | 2012-03-21 |
| CVE-2012-1436The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0,…Ahnlab · V3 Internet Security · 2012-03-21 | – | 93% | 2012-03-21 |
| CVE-2012-1435The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0,…Ahnlab · V3 Internet Security · 2012-03-21 | – | 93% | 2012-03-21 |
| CVE-2012-1433The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0,…Ahnlab · V3 Internet Security · 2012-03-21 | – | 93% | 2012-03-21 |
| CVE-2012-1432The Microsoft EXE file parser in Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote…Emsisoft · Anti-Malware · 2012-03-21 | – | 93% | 2012-03-21 |
| CVE-2012-1425The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, Fortinet Antivirus 4.2.254.0, Ika…Antiy · Avl Sdk · 2012-03-21 | – | 92% | 2012-03-21 |
| CVE-2012-1429The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command Li…Comodo · Comodo Antivirus · 2012-03-21 | – | 92% | 2012-03-21 |
| CVE-2012-1426The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, K7 AntiVirus 9.77.3565, Norman Antivirus 6.06.12, and Rising A…Cat · Quick Heal · 2012-03-21 | – | 90% | 2012-03-21 |
| CVE-2012-1423The TAR file parser in Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line…Emsisoft · Anti-Malware · 2012-03-21 | – | 89% | 2012-03-21 |
| CVE-2012-1445The ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection…Fortinet · Fortinet Antivirus · 2012-03-21 | – | 89% | 2012-03-21 |
| CVE-2012-1439The ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection…Fortinet · Fortinet Antivirus · 2012-03-21 | – | 89% | 2012-03-21 |
| CVE-2012-1452The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to…Cat · Quick Heal · 2012-03-21 | – | 88% | 2012-03-21 |
| CVE-2012-1448The CAB file parser in Quick Heal (aka Cat QuickHeal) 11.00, Trend Micro AntiVirus 9.120.0.1004, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Trend Micro HouseCall 9.1…Cat · Quick Heal · 2012-03-21 | – | 88% | 2012-03-21 |
| CVE-2012-1421The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11…Cat · Quick Heal · 2012-03-21 | – | 88% | 2012-03-21 |
| CVE-2012-1454The ELF file parser in Dr.Web 5.0.2.03300, eSafe 7.0.17.0, McAfee Gateway (formerly Webwasher) 2010.1C, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antiv…Fortinet · Fortinet Antivirus · 2012-03-21 | – | 87% | 2012-03-21 |
| CVE-2012-1428The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX…Cat · Quick Heal · 2012-03-21 | – | 87% | 2012-03-21 |
| CVE-2012-1427The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX…Cat · Quick Heal · 2012-03-21 | – | 87% | 2012-03-21 |
| CVE-2012-1424The TAR file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Jiangmin Antivirus 13.0.900, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, and Sop…Antiy · Avl Sdk · 2012-03-21 | – | 87% | 2012-03-21 |
| CVE-2015-6132Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Go…Microsoft · Windows 10 · 2015-12-09 | – | 85% | 2015-12-09 |
| CVE-2013-6955webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1 allows remote attackers to append data to…Synology · Diskstation Manager · 2014-01-09 | – | 85% | 2014-01-09 |
| CVE-2019-1620Cisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution VulnerabilityCisco · Cisco Data Center Network Manager · CVSS 9.8 · 2019-06-27 | 9.8 | 84% | 2019-06-27 |
| CVE-2007-1036The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attackers to bypass authentication and gain a…Jboss · Jboss Application Server · 2007-02-21 | – | 82% | 2007-02-21 |
| CVE-2016-10372The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows remote attackers to execute arbitrary commands via TCP port 7547, as demonstrated by opening WAN a…Eir · D1000 Modem Firmware · 2017-05-16 | – | 82% | 2017-05-16 |
| CVE-2014-7862The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUs…Zohocorp · Desktop Central · 2018-01-04 | – | 81% | 2018-01-04 |
| CVE-2015-7766PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote administrators to bypass SQL query restrictions via a comment in the query to api/json/ad…Zohocorp · Manageengine Opmanager · 2015-10-09 | – | 81% | 2015-10-09 |
| CVE-2014-9583common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check th…Asus · Wrt Firmware · 2015-01-08 | – | 80% | 2015-01-08 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.