CWE-276
Medium likelihoodIncorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
1,512 vulnerabilities with CWE-276
CVE-2021-43325
HIGH
Automox Agent 33 - Privilege Escalation
CVSS 7.8
CVE-2021-44833
CRITICAL
Amazon AWS OpenSearch CLI 1.0.0 - Incorrect Default Permissions
CVSS 9.8
CVE-2021-21957
HIGH
Dream Report ODS Remote Connector 20.2.16900.0 - Privilege Escalation via Malicious File
CVSS 7.3
CVE-2021-42711
HIGH
Barracuda Network Access Client < 5.2.2 - Privilege Escalation via Insecure Temporary File Permissions
CVSS 7.8
CVE-2021-31822
HIGH
Octopus Tentacle 3.15.4-6.1.1116 - Local Privilege Escalation via Systemd Service File Permissions
CVSS 7.8
CVE-2021-44140
CRITICAL
Apache JSPWiki < 2.11.0 - Arbitrary File Deletion via Logout Request
CVSS 9.1
CVE-2021-37030
HIGH
Huawei Magic UI - Incorrect Default Permissions
CVSS 7.5
CVE-2021-33071
HIGH
Intel(R) oneAPI Rendering Toolkit <2021.2 - Privilege Escalation
CVSS 7.8
CVE-2021-33062
HIGH
Intel VTune Profiler <2021.3.0 - Privilege Escalation
CVSS 7.8
CVE-2021-0065
HIGH
Intel WiFi Firmware < 22.40 - Authenticated Privilege Escalation via Incorrect Default Permissions
CVSS 7.8
CVE-2021-33092
HIGH
Intel Nuc M15 Laptop Kit Hid Event Filter Driver Pack < 2.2.1.383 - Incorrect Default Permissions
CVSS 7.8
CVE-2021-33090
HIGH
Intel(R) NUC HDMI Firmware Update Tool - Privilege Escalation
CVSS 7.8
CVE-2021-33088
HIGH
Intel Nuc M15 Laptop Kit Integrated Sensor Hub Driver Pack < 5.4.1.4449 - Incorrect Default Permissions
CVSS 7.8
CVE-2021-3720
MEDIUM
Lenovo Legion Phone Pro and Phone2 Pro Firmware - Unprotected GPS Data Exposure via Time Weather Widget
CVSS 5.5
CVE-2021-43199
MEDIUM
JetBrains TeamCity <2021.1.2 - Privilege Escalation
CVSS 5.3
CVE-2021-38420
HIGH
Delta Electronics DIALink <1.2.4.0 - Privilege Escalation
CVSS 7.8
CVE-2021-3579
HIGH
Bitdefender <7.2.1.65 - Privilege Escalation
CVSS 7.8
CVE-2021-36990
CRITICAL
Huawei EMUI and Magic UI - Privilege Escalation via Kernel Tampering
CVSS 9.8
CVE-2021-36989
CRITICAL
Huawei EMUI and Magic UI - Kernel Crash and Privilege Escalation via Incorrect Default Permissions
CVSS 9.8
CVE-2021-22475
MEDIUM
Huawei Smartphone - Info Disclosure
CVSS 5.3
CVE-2021-38379
MEDIUM
CFEngine Enterprise <3.18.0 - Info Disclosure
CVSS 5.5
CVE-2021-37363
HIGH
Gestionale Open 11.00.00 - Insecure Permissions Leading to Privilege Escalation via mysqld.exe Replacement
CVSS 7.8
CVE-2021-42011
HIGH
Trend Micro Apex One - Incorrect Default Permissions
CVSS 7.8
CVE-2021-40123
MEDIUM
Cisco Identity Services Engine - Authenticated Arbitrary File Download via Web Interface
CVSS 4.3
CVE-2021-42055
MEDIUM
ASUSTek ZenBook Pro Due 15 UX582 Firmware < 303 - Insecure Permissions
CVSS 6.8
Details
Vulnerabilities
1,512
Exploit Likelihood
Medium