CWE-276 · Incorrect Default Permissions (page 6)
Page 6 of 16 — CVEs classified under CWE-276, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-6974 | High | 8.8 | 2024-07-31 | Cato Networks Windows SDP Client Local Privilege Escalation via self-upgradeThis issue affects SDP Client: before 5.10.34. |
CVE-2024-40805 | High | 7.1 | 2024-07-29 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, watchOS 10.6. An… |
CVE-2024-27888 | Medium | 5.5 | 2024-07-29 | A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Sonoma 14.4. An app may be able to mod… |
CVE-2024-42053 | High | 7.8 | 2024-07-28 | The MSI installer for Splashtop Streamer for Windows before 3.6.0.0 uses a temporary folder with weak permissions during installation. A local user can exploit… |
CVE-2024-36541 | High | 8.8 | 2024-07-24 | Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token. |
CVE-2024-6122 | Medium | 5.5 | 2024-07-22 | An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via loc… |
CVE-2024-5321 | Medium | 6.1 | 2024-07-18 | A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated… |
CVE-2024-21123 | Low | 2.3 | 2024-07-16 | Vulnerability in the Oracle Database Core component of Oracle Database Server. Supported versions that are affected are 19.3-19.23. Easily exploitable vulnera… |
CVE-2024-21122 | Medium | 5.4 | 2024-07-16 | Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft (component: Text Catalog). The supported version that is affect… |
CVE-2024-6326 | Medium | 5.5 | 2024-07-16 | An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk® System Service. A malicious user could exploit this vulnerabi… |
CVE-2024-6325 | Medium | 6.5 | 2024-07-16 | The v6.40 release of Rockwell Automation FactoryTalk® Policy Manager CVE-2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/a… |
CVE-2024-32861 | High | 7.8 | 2024-07-16 | Under certain circumstances the impacted Software House C•CURE 9000 installer will utilize unnecessarily wide permissions. |
CVE-2024-3779 | Medium | 6.1 | 2024-07-16 | Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoper… |
CVE-2024-6148 | High | 8.8 | 2024-07-10 | Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5 |
CVE-2024-31312 | Medium | 5.5 | 2024-07-09 | In multiple locations, there is a possible information leak due to a missing permission check. This could lead to local information disclosure exposing played… |
CVE-2024-22062 | Medium | 6.3 | 2024-07-09 | There is a permissions and access control vulnerability in ZXCLOUD IRAI.An attacker can elevate non-administrator permissions to administrator permissions by m… |
CVE-2024-3904 | High | 8.8 | 2024-07-04 | Incorrect Default Permissions vulnerability in Smart Device Communication Gateway preinstalled on MELIPC Series MI5122-VW firmware versions "05" to "07" allows… |
CVE-2024-4679 | High | 7.8 | 2024-07-02 | Incorrect Default Permissions vulnerability in Hitachi JP1/Extensible SNMP Agent for Windows, Hitachi JP1/Extensible SNMP Agent on Windows, Hitachi Job Managem… |
CVE-2024-2819 | Medium | 5.1 | 2024-07-02 | Incorrect Default Permissions, Improper Preservation of Permissions vulnerability in Hitachi Ops Center Common Services allows File Manipulation.This issue aff… |
CVE-2024-35139 | Medium | 6.2 | 2024-06-28 | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from the container due to incorrect defau… |
CVE-2024-39347 | Medium | 5.9 | 2024-06-28 | Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-… |
CVE-2023-38370 | High | 7.5 | 2024-06-27 | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1, under certain configurations, could allow a user on the network to install malicious packages. I… |
CVE-2024-6238 | High | 7.4 | 2024-06-25 | pgAdmin <= 8.8 has an installation Directory permission issue. Because of this issue, attackers can gain unauthorised access to the installation directory on t… |
CVE-2024-22385 | Medium | 4.4 | 2024-06-25 | Incorrect Default Permissions vulnerability in Hitachi Storage Provider for VMware vCenter allows local users to read and write specific files.This issue affec… |
CVE-2024-36495 | High | 7.7 | 2024-06-24 | The application Faronics WINSelect (Standard + Enterprise) saves its configuration in an encrypted file on the file system which "Everyone" has read and write… |
CVE-2024-5967 | Low | 2.7 | 2024-06-18 | A vulnerability was found in Keycloak. The LDAP testing endpoint allows changing the Connection URL independently without re-entering the currently configured… |
CVE-2024-38459 | High | 7.8 | 2024-06-16 | langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists bec… |
CVE-2024-34012 | Medium | 4.4 | 2024-06-14 | Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.24135.272. |
CVE-2024-27180 | Medium | 6.7 | 2024-06-14 | An attacker with admin access can install rogue applications. As for the affected products/models/versions, see the reference URL. |
CVE-2024-27171 | High | 7.4 | 2024-06-14 | A remote attacker using the insecure upload functionality will be able to overwrite any Python file and get Remote Code Execution. As for the affected products… |
CVE-2024-27167 | High | 7.4 | 2024-06-14 | Toshiba printers use Sendmail to send emails to recipients. Sendmail is used with several insecure directories. A local attacker can inject a malicious Sendmai… |
CVE-2024-27166 | High | 7.4 | 2024-06-14 | Coredump binaries in Toshiba printers have incorrect permissions. A local attacker can steal confidential information. As for the affected products/models/vers… |
CVE-2024-27155 | High | 7.7 | 2024-06-14 | The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be… |
CVE-2024-27153 | High | 7.4 | 2024-06-14 | The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected… |
CVE-2024-27152 | High | 7.4 | 2024-06-14 | The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected… |
CVE-2024-27151 | High | 7.4 | 2024-06-14 | The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be… |
CVE-2024-27150 | High | 7.4 | 2024-06-14 | The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected… |
CVE-2024-27149 | High | 7.4 | 2024-06-14 | The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected… |
CVE-2024-27148 | High | 7.4 | 2024-06-14 | The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected… |
CVE-2024-27144 | Critical | 9.8 | 2024-06-14 | The Toshiba printers provide several ways to upload files using the web interface without authentication. An attacker can overwrite any insecure files. And the… |
CVE-2024-37038 | High | 7.5 | 2024-06-12 | CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated user with access to the device’s web interface to perform unautho… |
CVE-2024-23847 | Medium | 5.9 | 2024-05-31 | Incorrect default permissions issue exists in Unifier and Unifier Cast. If this vulnerability is exploited, arbitrary code may be executed with LocalSystem pri… |
CVE-2024-32978 | Medium | 6.6 | 2024-05-27 | Kaminari is a paginator for web app frameworks and object relational mappings. A security vulnerability involving insecure file permissions has been identified… |
CVE-2024-27264 | High | 7.4 | 2024-05-22 | IBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 could allow a local user to gain elevated privileges due to an unqualified library call. A malicious actor… |
CVE-2023-43629 | High | 7.8 | 2024-05-16 | Incorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation o… |
CVE-2023-42668 | Medium | 6.7 | 2024-05-16 | Incorrect default permissions in some onboard video driver software before version 1.14 for Intel(R) Server Boards based on Intel(R) 62X Chipset may allow an a… |
CVE-2023-42433 | Medium | 6.7 | 2024-05-16 | Incorrect default permissions in some Endurance Gaming Mode software installers before version 1.3.937.0 may allow an authenticated user to potentially enable… |
CVE-2023-24460 | High | 8.2 | 2024-05-16 | Incorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation o… |
CVE-2024-34223 | Medium | 4.3 | 2024-05-14 | Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve or reject leave ti… |
CVE-2024-34221 | High | 8.8 | 2024-05-14 | Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation. |
CVE-2023-46870 | High | 7.3 | 2024-05-14 | extcap/nrf_sniffer_ble.py, extcap/nrf_sniffer_ble.sh, extcap/SnifferAPI/*.py in Nordic Semiconductor nRF Sniffer for Bluetooth LE 3.0.0, 3.1.0, 4.0.0, 4.1.0, a… |
CVE-2024-4030 | High | 7.1 | 2024-05-07 | On Windows a directory returned by tempfile.mkdtemp() would not always have permissions set to restrict reading and writing to the temporary directory by other… |
CVE-2024-34474 | High | 7.8 | 2024-05-05 | Clario through 2024-04-11 for Desktop has weak permissions for %PROGRAMDATA%\Clario and tries to load DLLs from there as SYSTEM. |
CVE-2024-34455 | High | 7.5 | 2024-05-03 | Buildroot before 0b2967e lacks the sticky bit for the /dev/shm directory. A fix was released in 2024.02.2. |
CVE-2024-4226 | Low | 3.5 | 2024-04-30 | It was identified that in certain versions of Octopus Server, that a user created with no permissions could view all users, user roles and permissions. This fu… |
CVE-2024-34011 | Medium | 6.8 | 2024-04-29 | Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37… |
CVE-2023-46270 | Low | 3.3 | 2024-04-29 | MacPaw The Unarchiver before 4.3.6 contains vulnerability related to missing quarantine attributes for extracted items. |
CVE-2022-48685 | High | 7.7 | 2024-04-27 | An issue was discovered in Logpoint 7.1 before 7.1.2. The daily executed cron file clean_secbi_old_logs is writable by all users and is executed as root, leadi… |
CVE-2024-2859 | Medium | 6.8 | 2024-04-27 | By default, SANnav OVA is shipped with root user login enabled. While protected by a password, access to root could expose SANnav to a remote attacker should… |
CVE-2023-23976 | High | 7.5 | 2024-04-24 | Incorrect Default Permissions vulnerability in Metagauss RegistrationMagic allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects R… |
CVE-2023-38295 | High | 7.8 | 2024-04-22 | Certain software builds for the TCL 30Z and TCL 10 Android devices contain a vulnerable, pre-installed app that relies on a missing permission that provides no… |
CVE-2023-38294 | Medium | 6.1 | 2024-04-22 | Certain software builds for the Itel Vision 3 Turbo Android device contain a vulnerable pre-installed app with a package name of com.transsion.autotest.factory… |
CVE-2023-38291 | High | 7.1 | 2024-04-22 | An issue was discovered in a third-party component related to ro.boot.wifimacaddr, shipped on devices from multiple device manufacturers. Various software buil… |
CVE-2024-32368 | High | 7.3 | 2024-04-22 | Insecure Permission vulnerability in Agasta Sanketlife 2.0 Pocket 12-Lead ECG Monitor FW Version 3.0 allows a local attacker to cause a denial of service via t… |
CVE-2024-29967 | Medium | 4.4 | 2024-04-19 | In Brocade SANnav before Brocade SANnav v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance have insecure mount points, allowing read… |
CVE-2024-29962 | Medium | 5.5 | 2024-04-19 | Brocade SANnav OVA before v2.3.1 and v2.3.0a have an insecure file permission setting that makes files world-readable. This could allow a local user without th… |
CVE-2024-21116 | High | 7.8 | 2024-04-16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily… |
CVE-2024-21012 | Low | 3.7 | 2024-04-16 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported ve… |
CVE-2024-21004 | Low | 2.5 | 2024-04-16 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are… |
CVE-2024-21002 | Low | 2.5 | 2024-04-16 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are… |
CVE-2024-28056 | Critical | 9.8 | 2024-04-15 | Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM roles associated with Amplify projects. When the Authentication compo… |
CVE-2024-21615 | Medium | 5.0 | 2024-04-12 | An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker to access confidential… |
CVE-2024-31442 | High | 8.8 | 2024-04-08 | Redon Hub is a Roblox Product Delivery Bot, also known as a Hub. In all hubs before version 1.0.2, all commands are capable of being ran by all users, includin… |
CVE-2024-26574 | High | 7.8 | 2024-04-08 | Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code via a crafted script to the WSNativePushS… |
CVE-2023-52545 | High | 7.5 | 2024-04-08 | Vulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52717 | Medium | 5.3 | 2024-04-07 | Permission verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-30415 | Critical | 9.1 | 2024-04-07 | Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-30977 | High | 7.8 | 2024-04-05 | An issue in Secnet Security Network Intelligent AC Management System v.1.02.040 allows a local attacker to escalate privileges via the password component. |
CVE-2024-27674 | High | 7.8 | 2024-04-03 | Macro Expert through 4.9.4 allows BUILTIN\Users:(OI)(CI)(M) access to the "%PROGRAMFILES(X86)%\GrassSoft\Macro Expert" folder and thus an unprivileged user can… |
CVE-2024-0259 | High | 7.3 | 2024-03-28 | Fortra's Robot Schedule Enterprise Agent for Windows prior to version 3.04 is susceptible to privilege escalation. A low-privileged user can overwrite the serv… |
CVE-2024-25958 | Medium | 6.7 | 2024-03-26 | Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability. A local authenticated attacker could pote… |
CVE-2024-30204 | Low | 2.8 | 2024-03-25 | In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments. |
CVE-2024-22085 | Medium | 6.2 | 2024-03-20 | An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. The shadow file is world readable. |
CVE-2024-25654 | Medium | 5.5 | 2024-03-18 | Insecure permissions for log files of AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS allow members (with local access to the UMP application serv… |
CVE-2024-1605 | Medium | 6.6 | 2024-03-18 | BMC Control-M branches 9.0.20 and 9.0.21 upon user login load all Dynamic Link Libraries (DLL) from a directory that grants Write and Read permissions to all… |
CVE-2024-28862 | Medium | 5.3 | 2024-03-16 | The Ruby One Time Password library (ROTP) is an open source library for generating and validating one time passwords. Affected versions had overly permissive d… |
CVE-2023-28389 | Medium | 6.7 | 2024-03-14 | Incorrect default permissions in some Intel(R) CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalati… |
CVE-2024-20671 | Medium | 5.5 | 2024-03-12 | Microsoft Defender Security Feature Bypass Vulnerability |
CVE-2024-23295 | Medium | 5.5 | 2024-03-08 | A permissions issue was addressed to help ensure Personas are always protected. This issue is fixed in visionOS 1.1. An unauthenticated user may be able to use… |
CVE-2024-23253 | Low | 3.3 | 2024-03-08 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to access a user's Photos Library. |
CVE-2024-23201 | Medium | 5.5 | 2024-03-08 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.4, macOS Sonoma 14.3, macO… |
CVE-2024-22889 | High | 7.5 | 2024-03-06 | Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request. |
CVE-2024-20841 | Medium | 5.1 | 2024-03-05 | Improper Handling of Insufficient Privileges in Samsung Account prior to version 14.8.00.3 allows local attackers to access data. |
CVE-2024-20830 | Medium | 5.3 | 2024-03-05 | Incorrect default permission in AppLock prior to SMR MAr-2024 Release 1 allows local attackers to configure AppLock settings. |
CVE-2024-20005 | High | 8.2 | 2024-03-04 | In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2024-26280 | Medium | 4.7 | 2024-03-01 | Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all information on audit logs, including dag… |
CVE-2023-49338 | High | 7.5 | 2024-02-28 | Couchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin/stats and /admin/vitals endpoints on TCP port 8093 of localhost. |
CVE-2024-26302 | Medium | 4.8 | 2024-02-27 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sen… |
CVE-2023-48678 | Medium | 5.5 | 2024-02-27 | Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before buil… |
CVE-2023-50975 | High | 8.4 | 2024-02-21 | The TD Bank TD Advanced Dashboard client through 3.0.3 for macOS allows arbitrary code execution because of the lack of electron::fuses::IsRunAsNodeEnabled (i… |