Vulnerabilities > Permissions, Privileges, and Access Controls

DATE CVE VULNERABILITY TITLE RISK
2017-01-18 CVE-2016-6526 Permissions, Privileges, and Access Controls vulnerability in Samsung Mobile 5.0/5.1/6.0
The SpamCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows attackers to cause a denial of service (crash and reboot) or possibly gain privileges via a malformed serializable object.
local
low complexity
samsung CWE-264
7.8
2017-01-18 CVE-2014-9910 Permissions, Privileges, and Access Controls vulnerability in Google Android
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
google CWE-264
7.0
2017-01-18 CVE-2014-9909 Permissions, Privileges, and Access Controls vulnerability in Google Android
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
google CWE-264
7.0
2017-01-13 CVE-2010-5327 Permissions, Privileges, and Access Controls vulnerability in Liferay Portal
Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template.
network
low complexity
liferay CWE-264
8.8
2017-01-13 CVE-2016-8467 Permissions, Privileges, and Access Controls vulnerability in Google Android
An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device.
local
low complexity
google CWE-264
5.5
2017-01-13 CVE-2015-3188 Permissions, Privileges, and Access Controls vulnerability in Apache Storm 0.10.0
The UI daemon in Apache Storm 0.10.0 before 0.10.0-beta1 allows remote attackers to execute arbitrary code via unspecified vectors.
network
low complexity
apache CWE-264
critical
9.8
2017-01-12 CVE-2016-6492 Permissions, Privileges, and Access Controls vulnerability in Google Android
The MT6573FDVT_SetRegHW function in camera_fdvt.c in the MediaTek driver for Linux allows local users to gain privileges via a crafted application that makes an MT6573FDVTIOC_T_SET_FDCONF_CMD IOCTL call.
local
low complexity
google CWE-264
7.8
2017-01-12 CVE-2016-8221 Permissions, Privileges, and Access Controls vulnerability in Lenovo Xclarity Administrator
Privilege Escalation in Lenovo XClarity Administrator earlier than 1.2.0, if LXCA is used to manage rack switches or chassis with embedded input/output modules (IOMs), certain log files viewable by authenticated users may contain passwords for internal administrative LXCA accounts with temporary passwords that are used internally by LXCA code.
local
high complexity
lenovo CWE-264
7.0
2017-01-12 CVE-2016-8468 Permissions, Privileges, and Access Controls vulnerability in Linux Kernel 3.18
An elevation of privilege vulnerability in Binder could enable a local malicious application to execute arbitrary code within the context of a privileged process.
local
high complexity
linux CWE-264
7.0
2017-01-12 CVE-2016-8466 Permissions, Privileges, and Access Controls vulnerability in Linux Kernel 3.10/3.18
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
linux CWE-264
7.0