Vulnerabilities (CVE)

Filtered by CWE-276
Total 1449 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-27461 1 Intel 1 Memory And Storage Tool Gui 2024-09-06 N/A 5.5 MEDIUM
Incorrect default permissions in software installer for Intel(R) MAS (GUI) may allow an authenticated user to potentially enable denial of service via local access.
CVE-2024-34648 1 Samsung 1 Android 2024-09-05 N/A 5.5 MEDIUM
Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive data.
CVE-2024-34661 1 Samsung 1 Assistant 2024-09-05 N/A 4.3 MEDIUM
Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers to access location data. User interaction is required for triggering this vulnerability.
CVE-2024-23495 1 Intel 2 Distribution For Gdb, Oneapi Base Toolkit 2024-08-31 N/A 7.8 HIGH
Incorrect default permissions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-6974 1 Catonetworks 1 Cato Client 2024-08-27 N/A 7.8 HIGH
Cato Networks Windows SDP Client Local Privilege Escalation via self-upgradeThis issue affects SDP Client: before 5.10.34.
CVE-2024-42681 1 Xuxueli 1 Xxl-job 2024-08-19 N/A 8.8 HIGH
Insecure Permissions vulnerability in xxl-job v.2.4.1 allows a remote attacker to execute arbitrary code via the Sub-Task ID component.
CVE-2024-34617 1 Samsung 1 Android 2024-08-12 N/A 3.3 LOW
Improper handling of insufficient permission in Telephony prior to SMR Aug-2024 Release 1 allows local attackers to configure default Message application.
CVE-2024-34616 1 Samsung 1 Android 2024-08-12 N/A 5.5 MEDIUM
Improper handling of insufficient permission in KnoxDualDARPolicy prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive data.
CVE-2024-7525 1 Mozilla 3 Firefox, Firefox Esr, Thunderbird 2024-08-12 N/A 8.1 HIGH
It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.