CWE-276

1,512 vulnerabilities with CWE-276

CVE-2020-10792 HIGH

openITCOCKPIT <= 3.7.2 - Unauthenticated Configuration Manipulation via HTTP Host Header

CVSS 7.5

CVE-2020-0514 HIGH

Intel Graphics Driver < 15.45.30.5103 - Authenticated Privilege Escalation via Installer Default Permissions

CVSS 7.8

CVE-2020-0508 HIGH

Intel Graphics Driver < 15.33.49.5100 - Authenticated Privilege Escalation via Incorrect Default Permissions

CVSS 7.8

CVE-2020-9543 HIGH

OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 - Unauthorized Resource Access via UUID Lookup

CVSS 8.3

CVE-2020-7943 HIGH

Puppet Server <6.9.2 & 5.3.12 - Info Disclosure

CVSS 7.5

CVE-2020-9408 HIGH

Tibco Spotfire Analytics Platform For... - Incorrect Default Permissions

CVSS 8.8

CVE-2020-5342 HIGH

Dell Digital Delivery < 3.5.2015 - Authenticated Privilege Escalation via Incorrect Default Permissions

CVSS 7.8

CVE-2020-3838 HIGH

iPadOS < 13.3.1 - Privilege Escalation via Incorrect Default Permissions

CVSS 7.8

CVE-2020-9039 CRITICAL

Couchbase Server 4.0.0-4.6.5, 5.0.0, 5.1.1, 5.5.0-5.5.1 - Unauthenticated Insecure Permissions

CVSS 9.8

CVE-2020-0564 HIGH

Intel RWC3 < 7.010.009.000 - Authenticated Privilege Escalation via Installer Permissions

CVSS 7.8

CVE-2020-0562 HIGH

Intel RWC2 - Incorrect Default Permissions

CVSS 7.8

CVE-2020-0560 HIGH

Intel Renesas Electronics USB 3.0 Driver - Incorrect Default Permissions

CVSS 7.8

CVE-2020-2118 MEDIUM

Jenkins Pipeline GitHub Notify Step Plugin < 1.0.4 - Credential ID Enumeration via Form-Related Methods

CVSS 4.3

CVE-2020-2117 MEDIUM

Jenkins Pipeline GitHub Notify Step Plugin < 1.0.4 - Missing Permission Check

CVSS 4.3

CVE-2020-7977 MEDIUM

GitLab EE <12.7.2 - Info Disclosure

CVSS 5.3

CVE-2020-7972 HIGH

GitLab 12.0-12.5.9 - Insecure Default Permissions

CVSS 7.5

CVE-2020-7967 MEDIUM

GitLab EE <12.7.2 - Info Disclosure

CVSS 4.3

CVE-2020-8114 CRITICAL

GitLab EE <12.7.2 - Info Disclosure

CVSS 9.8

CVE-2020-7979 MEDIUM

GitLab EE <12.7.2 - Privilege Escalation

CVSS 5.3

CVE-2020-5231 MEDIUM

Opencast < 7.6 - Improper Authorization via ROLE_COURSE_ADMIN User Creation

CVSS 4.8

CVE-2020-5196 HIGH

Cerberus FTP Server 10.0.0-10.0.17 - Authenticated Permission Bypass via Zip/Unzip Features

CVSS 8.1

CVE-2020-6166 MEDIUM

WordPress Minimal Coming Soon & Maintenance Mode <2.15 - Info Discl...

CVSS 5.4

CVE-2020-0009 MEDIUM

Android - Incorrect Default Permissions in ashmem.c

CVSS 5.5

CVE-2019-20458 HIGH

Epson Expression Home XP255 - Info Disclosure

CVSS 8.8

CVE-2019-20457 CRITICAL

Brother MFC-J491DW C1806180757 - Info Disclosure

CVSS 9.1