Vulnerabilities > Permissions, Privileges, and Access Controls

DATE CVE VULNERABILITY TITLE RISK
2017-02-08 CVE-2016-5934 Permissions, Privileges, and Access Controls vulnerability in IBM Tivoli Storage Manager Fastback
IBM Tivoli Storage Manager FastBack installer could allow a remote attacker to execute arbitrary code on the system.
local
low complexity
ibm CWE-264
7.3
2017-02-08 CVE-2016-8481 Permissions, Privileges, and Access Controls vulnerability in multiple products
An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
google linux CWE-264
7.0
2017-02-08 CVE-2016-8480 Permissions, Privileges, and Access Controls vulnerability in multiple products
An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
google linux CWE-264
7.0
2017-02-08 CVE-2016-8476 Permissions, Privileges, and Access Controls vulnerability in multiple products
An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
google linux CWE-264
7.0
2017-02-08 CVE-2016-8421 Permissions, Privileges, and Access Controls vulnerability in multiple products
An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
google linux CWE-264
7.0
2017-02-08 CVE-2016-8420 Permissions, Privileges, and Access Controls vulnerability in multiple products
An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
google linux CWE-264
7.0
2017-02-08 CVE-2016-8419 Permissions, Privileges, and Access Controls vulnerability in multiple products
An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
google linux CWE-264
7.0
2017-02-07 CVE-2016-2779 Permissions, Privileges, and Access Controls vulnerability in Kernel Util-Linux 2.24.21
runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
local
low complexity
kernel CWE-264
7.8
2017-02-07 CVE-2016-10044 Permissions, Privileges, and Access Controls vulnerability in multiple products
The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an io_setup system call.
local
low complexity
linux google CWE-264
7.8
2017-02-06 CVE-2015-2794 Permissions, Privileges, and Access Controls vulnerability in Dotnetnuke
The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx.
network
low complexity
dotnetnuke CWE-264
critical
9.8