CWE-276

1,533 vulnerabilities with CWE-276

CVE-2025-24915 HIGH

Nessus Agent <10.8.3 - Privilege Escalation

CVSS 7.8

CVE-2025-27926 MEDIUM

Nintex Automation 5.6-5.7 - Insufficiently Protected Credentials in K2 SmartForms Designer Configuration

CVSS 4.3

CVE-2025-20910 MEDIUM

Samsung Wear OS Galaxy Watch Gallery - Unprotected Data Exposure via Incorrect Default Permissions

CVSS 6.2

CVE-2025-24864 HIGH

RemoteView Agent <8.1.5.2 - Privilege Escalation

CVSS 7.8

CVE-2025-22447 HIGH

RemoteView Agent <8.1.5.2 - Privilege Escalation

CVSS 7.8

CVE-2025-27682 CRITICAL

Vasion Print < 20.0.1330 and Virtual Appliance < 1.0.735 - Insecure Log Permissions

CVSS 9.8

CVE-2025-27677 CRITICAL

Vasion Print < 20.0.1923 and Virtual Appliance < 22.0.843 - Unauthenticated Symbolic Link File Interaction

CVSS 9.8

CVE-2025-27521 MEDIUM

Huawei HarmonyOS - Improper Access Control

CVSS 6.8

CVE-2025-27154 CRITICAL

spotipy < 2.25.1 - Incorrect Default Permissions in Cache File

CVSS 9.8

CVE-2025-21106 MEDIUM

Dell RecoverPoint for Virtual Machines 6.0.X - Weak File System Permissions

CVSS 5.5

CVE-2025-24891 CRITICAL

DumbDrop - Path Traversal and Arbitrary File Write

CVSS 9.6

CVE-2025-24795 MEDIUM

Snowflake Connector for Python 2.3.7-3.13.0 - Incorrect Default Permissions in Temporary Credential Cache

CVSS 4.4

CVE-2025-24788 MEDIUM

Snowflake Connector for .NET 2.0.12-4.2.0 - Unauthorized Local File Access via World-Readable Temporary Directory

CVSS 5.0

CVE-2025-24790 MEDIUM

Snowflake JDBC 3.6.8-3.21.0 - Incorrect Default Permissions in Temporary Credential Cache

CVSS 4.4

CVE-2025-0797 LOW

MicroWorld eScan Antivirus 7.0.32 - Info Disclosure

CVSS 3.3

CVE-2025-24826 MEDIUM

Acronis Snap Deploy <build 4625 - Privilege Escalation

CVSS 6.7

CVE-2025-24176 HIGH

macOS < 13.7.3, < 14.7.3, < 15.3 - Privilege Escalation via Incorrect Default Permissions

CVSS 7.1

CVE-2025-24140 MEDIUM

macOS < 15.3 - Unprotected User Data Exposure via Quarantine Flag Bypass

CVSS 5.3

CVE-2025-24135 HIGH

macOS < 15.3 - Privilege Escalation via Improved Message Validation

CVSS 7.8

CVE-2025-24107 HIGH

iPadOS < 18.3 - Unauthenticated Privilege Escalation to Root via Permissions Issue

CVSS 7.8

CVE-2025-24093 CRITICAL

macOS < 13.7.3, < 14.7.3, < 15.4 - Unprotected Removable Volume Access

CVSS 9.8

CVE-2025-0543 HIGH

G DATA Security Client - Privilege Escalation

CVSS 7.8

CVE-2025-0542 HIGH

G DATA Management Server - Privilege Escalation

CVSS 7.8

CVE-2025-24399 HIGH

Jenkins Openid Connect Authentication - Incorrect Default Permissions

CVSS 8.8

CVE-2025-21532 HIGH

Oracle Analytics Desktop < 8.1.0 - Incorrect Default Permissions in Install Component

CVSS 7.8