Browse CVEs

HIGH 7.8 CVE-2025-0886 An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to escalate pri… Mitigation only Fix from $1,9502025-07-17 HIGH 8.8 CVE-2024-13972 A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can lead to a local user … Mitigation only Fix from $1,9502025-07-17 HIGH 7.8 CVE-2025-5199 In Canonical Multipass up to and including version 1.15.1 on macOS, incorrect default permissions allow a local attacker to escalate privileges by mo… Multipass 1.16.0+ Fix from $1,9502025-07-12 MEDIUM 6.5 CVE-2025-41665 An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect default permissions of a config… Mitigation only Fix from $1,6002025-07-08 HIGH 8.8 CVE-2025-46014 Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with d… Pc Manager after 16.0.0.118 Fix from $1,9502025-06-30 CRITICAL 9.8 CVE-2014-7210 pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of p… Pdns 3.3.1-1+ Fix from $2,3002025-06-26 MEDIUM 5.5 CVE-2025-52900 File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Th… Filebrowser 2.33.7+ Fix from $1,6002025-06-26 MEDIUM 6.1 CVE-2025-39201 A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to tamper a system file, making… Microscada X Sys600 10.7+ Fix from $1,6002025-06-24 HIGH 7.3 CVE-2025-49144 Notepad++ is a free and open-source source code editor. In versions 8.8.1 and prior, a privilege escalation vulnerability exists in the Notepad++ v8.… Patch available Fix from $1,9502025-06-23 MEDIUM 5.5 CVE-2025-6264 Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do anything and usually run with… Velociraptor 0.74.3+ Fix from $1,6002025-06-20 CRITICAL 9.8 CVE-2025-6179 Permissions Bypass in Extension Management in Google ChromeOS 16181.27.0 on managed Chrome devices allows a local attacker to disable extensi… Chrome Os Mitigation only Fix from $2,3002025-06-16 HIGH 7.8 CVE-2025-36632 In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could execute code with SYSTEM privilege. Nessus Agent 10.8.5+ Fix from $1,9502025-06-16 CRITICAL 9.9 CVE-2025-40585 A vulnerability has been identified in Energy Services (All versions with G5DFR). Affected solutions using G5DFR contain default credentials. This co… Mitigation only Fix from $2,3002025-06-10 HIGH 8.2 CVE-2025-49006 Wasp (Web Application Specification) is a Rails-like framework for React, Node.js, and Prisma. Prior to version 0.16.6, Wasp authentication has a vul… Patch available Fix from $1,9502025-06-09 MEDIUM 6.7 CVE-2025-48959 Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before … Mitigation only Fix from $1,6002025-06-04 MEDIUM 6.2 CVE-2025-20984 Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to access data in Samsung Cloud… Wear Os Mitigation only Fix from $1,6002025-06-04 HIGH 8.8 CVE-2025-48950 MaxKB is an open-source AI assistant for enterprise. Prior to version 1.10.8-lts, Sandbox only restricts the execution permissions of binary files in… Maxkb 1.10.8+ Fix from $1,9502025-06-03 HIGH 7.3 CVE-2025-46355 Incorrect default permissions issue in PC Time Tracer prior to 5.2. If exploited, arbitrary code may be executed with SYSTEM privilege on Windows sys… Mitigation only Fix from $1,9502025-06-03 HIGH 7.8 CVE-2025-23105 An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. A Use-After-Free in the mobile processor leads to privilege escalati… Exynos 2200 Firmware Mitigation only Fix from $1,9502025-06-02 HIGH 7.8 CVE-2025-2502 An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges. Pcmanager 5.1.110.5082+ Fix from $1,9502025-05-30 MEDIUM 5.5 CVE-2025-31261 A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura… macOS 13.7.5 / 14.7.5+ Fix from $1,6002025-05-29 MEDIUM 5.0 CVE-2025-46803 The default mode of pseudo terminals (PTYs) allocated by Screen was changed from 0620 to 0622, thereby allowing anyone to write to any Screen PTYs in… Mitigation only Fix from $1,6002025-05-26 HIGH 7.3 CVE-2024-13948 Windows permissions for ASPECT configuration toolsets are not fully secured allow-ing exposure of configuration informationThis issue affects ASPECT-… Mitigation only Fix from $1,9502025-05-22 CRITICAL 9.8 CVE-2025-43596 An insecure file system permissions vulnerability in MSP360 Backup 8.0 allows a low privileged user to execute commands with SYSTEM level privileges … Backup 8.1.1.19+ Fix from $2,3002025-05-22 HIGH 8.2 CVE-2024-45067 Incorrect default permissions in some Intel(R) Gaudi(R) software installers before version 1.18 may allow an authenticated user to potentially enable… Mitigation only Fix from $1,9502025-05-14 MEDIUM 6.7 CVE-2025-20095 Incorrect Default Permissions for some Intel(R) RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable e… Mitigation only Fix from $1,6002025-05-13 MEDIUM 6.7 CVE-2024-47550 Incorrect default permissions for some Endurance Gaming Mode software installers may allow an authenticated user to potentially enable escalation of … Mitigation only Fix from $1,6002025-05-13 MEDIUM 6.7 CVE-2024-28954 Incorrect default permissions for some Intel(R) Graphics Driver installers may allow an authenticated user to potentially enable escalation of privil… Mitigation only Fix from $1,6002025-05-13 CRITICAL 9.8 CVE-2025-4660 A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The p… Secureconnector 11.3.7+ Fix from $2,3002025-05-13 HIGH 7.8 CVE-2023-31359 Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrar… Aim T Manageability Api 6.0.0.2234+ Fix from $1,9502025-05-13