CWE-276

1,533 vulnerabilities with CWE-276

CVE-2025-35062 MEDIUM

Newforma Project Center < 2023.1 - Unauthenticated Incorrect Default Permissions

CVSS 5.3

CVE-2025-11535 HIGH

MongoDB Connector for BI <2.14.24 - Privilege Escalation

CVE-2025-54086 LOW

Absolute Secure Access < 14.10 - Unauthenticated Sensitive Data Exposure via Warehouse Java Keystore

CVSS 3.3

CVE-2025-23297 HIGH

NVIDIA Installer for NvAPP for Windows - Privilege Escalation

CVSS 7.8

CVE-2025-57852 MEDIUM

KServe ModelMesh - Privilege Escalation

CVSS 6.4

CVE-2025-36857 LOW

Rapid7 Appspider Pro < 7.5.021 - Broken Access Control via Configuration File Override

CVSS 3.3

CVE-2025-34191 HIGH

Vasion Print Virtual Appliance Host < 22.0.843 & Application < 20.0.1923 - Arbitrary File Write

CVSS 8.4

CVE-2025-53947 HIGH

Software <unknown> - Info Disclosure

CVSS 7.7

CVE-2025-57625 HIGH

CYRISMA Sensor <444 - Privilege Escalation

CVSS 8.8

CVE-2025-55111 MEDIUM

Control-M/Agent <9.0.20 - Info Disclosure

CVSS 5.5

CVE-2025-43887 HIGH

Dell PowerProtect Data Manager 19.19-19.20 - Incorrect Default Permissions

CVSS 7.0

CVE-2025-43725 HIGH

Dell PowerProtect Data Manager 19.19-19.20 - Incorrect Default Permissions

CVSS 7.8

CVE-2025-10231 HIGH

n-able n-central < 2025.3 - Privilege Escalation via Incorrect File Handling Permissions

CVSS 7.0

CVE-2025-22425 MEDIUM

Android - Local Privilege Escalation via InstallStart Input Validation Bypass

CVSS 5.1

CVE-2025-57846 HIGH

i- - Incorrect Default Permissions

CVSS 7.8

CVE-2025-9190 MEDIUM

Cursor macOS RunAsNode - Local TCC Permission Code Execution

CVE-2025-53813 MEDIUM

Nozbe < 2025.11 - Local Privilege Escalation via TCC Permission Inheritance

CVE-2025-53811 MEDIUM

Mosh-Pro 1.3.2 - Local Privilege Escalation via TCC Permission Inheritance

CVE-2025-8098 HIGH

Lenovo PC Manager < 5.1.120.7041 - Privilege Escalation via Incorrect Default Permissions

CVSS 7.8

CVE-2025-27559 MEDIUM

AI Playground <v2.3.0 alpha - Privilege Escalation

CVSS 6.7

CVE-2025-26470 MEDIUM

Intel(R) Distribution for Python <2025.1.0 - Privilege Escalation

CVSS 6.7

CVE-2025-20087 MEDIUM

Intel(R) oneAPI DPC++/C++ Compiler - Privilege Escalation

CVSS 6.7

CVE-2025-20023 MEDIUM

Intel(R) Graphics Driver - Privilege Escalation

CVSS 6.7

CVE-2025-8672 HIGH

GIMP < 3.1.4.2 - Unauthenticated TCC Permission Bypass via Bundled Python Interpreter

CVSS 7.8

CVE-2025-7195 MEDIUM

Operator-SDK < 0.15.2 - Incorrect Default Permissions via user_setup Script

CVSS 6.4