# CWE-277.

Every Advisory and CVE whose sources give the weakness CWE-277, newest first.

## Records, newest first (an older page)

- [Intel(R) NUC Software Studio Service installer: Insecure inherited permissions in the Intel(R) NUC Software Studio Service installer…](https://agentprime.io/advisories/CVE-2022-38103.md)
  `CVE-2022-38103` · CVE record: Intel(R) NUC Software Studio Service installer · CVSS 6.7 Medium · Not analysed yet · Published 10 May 2023 · Tags: CWE-277
- [Intel(R) NUC Pro Software Suite: Insecure inherited permissions for the Intel(R) NUC Pro Software Suite before version…](https://agentprime.io/advisories/CVE-2022-46656.md)
  `CVE-2022-46656` · CVE record: Intel(R) NUC Pro Software Suite · CVSS 6.7 Medium · Not analysed yet · Published 10 May 2023 · Tags: CWE-277
- [Intel(R) NUC P14E Laptop Element software for Windows 10: Insecure inherited permissions in the HotKey Services for some Intel(R) NUC P14E Laptop…](https://agentprime.io/advisories/CVE-2022-41687.md)
  `CVE-2022-41687` · CVE record: Intel(R) NUC P14E Laptop Element software for Windows 10 · CVSS 6.7 Medium · Not analysed yet · Published 10 May 2023 · Tags: CWE-277
- [Intel(R) VTune(TM) Profiler software: Insecure inherited permissions in the Intel(R) VTune(TM) Profiler software before version…](https://agentprime.io/advisories/CVE-2022-41658.md)
  `CVE-2022-41658` · CVE record: Intel(R) VTune(TM) Profiler software · CVSS 6.7 Medium · Not analysed yet · Published 10 May 2023 · Tags: CWE-277
- [Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via the index.php compenent](https://agentprime.io/advisories/CVE-2023-27842.md)
  `CVE-2023-27842` · CVE record · CVSS 8.8 High · Not analysed yet · Published 21 Mar 2023 · Tags: CWE-277
- [Intel(R) Wireless Adapter Driver installation software for…: Insecure inherited permissions in some Intel(R) Wireless Adapter Driver installation…](https://agentprime.io/advisories/CVE-2022-36377.md)
  `CVE-2022-36377` · CVE record: Intel(R) Wireless Adapter Driver installation software for Intel(R) NUC Kits & Mini PCs · CVSS 6.7 Medium · Not analysed yet · Published 11 Nov 2022 · Tags: CWE-277
- [Insecure Inherited Permissions in Apache Hadoop](https://agentprime.io/advisories/GHSA-mf7c-35mq-75pj.md)
  `GHSA-mf7c-35mq-75pj`, `CVE-2016-6811` · Maven `org.apache.hadoop:hadoop-common`: affected `>=2.0.0-alpha, <2.7.4`, fixed in `2.7.4` · CVSS 8.8 High · Not analysed yet · Published 14 May 2022 · Tags: CWE-277
- [Insecure Inherited Permissions in neoan3-apps/template](https://agentprime.io/advisories/GHSA-3v56-q6r6-4gcw.md)
  `GHSA-3v56-q6r6-4gcw`, `CVE-2021-41170`, `PKSA-k4pw-y4px-3tfr` · Packagist `neoan3-apps/template`: affected `<1.1.1`, fixed in `1.1.1` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Nov 2021 · Tags: Other injection, Broken access control, CWE-277
- [Default share permissions not respected for federated reshares](https://agentprime.io/advisories/CVE-2021-32725.md)
  `CVE-2021-32725` · CVE record: nextcloud security-advisories · CVSS 3.5 Low · Not analysed yet · Published 12 Jul 2021 · Tags: CWE-277
- [Facebook Zstandard: Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031…](https://agentprime.io/advisories/CVE-2021-24032.md)
  `CVE-2021-24032` · CVE record: Facebook Zstandard · No CVSS score · Not analysed yet · Published 4 Mar 2021 · Tags: CWE-277
- [Facebook Zstandard: In the Zstandard command-line utility prior to v1.4.1…](https://agentprime.io/advisories/CVE-2021-24031.md)
  `CVE-2021-24031` · CVE record: Facebook Zstandard · No CVSS score · Not analysed yet · Published 4 Mar 2021 · Tags: CWE-277
- [Dell Client platforms restored using a Dell OS recovery image downloaded before December 20, 2019, may contain an insecure inherited permissions vulnerability.](https://agentprime.io/advisories/CVE-2020-5343.md)
  `CVE-2020-5343` · CVE record: Dell CPG SW · CVSS 7.3 High · Not analysed yet · Published 4 May 2020 · Tags: CWE-277
- [An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2.](https://agentprime.io/advisories/CVE-2019-5068.md)
  `CVE-2019-5068` · CVE record: Mesa 3D X11 Graphics library · CVSS 5.1 Medium · Not analysed yet · Published 5 Nov 2019 · Tags: CWE-277

Newest: <https://agentprime.io/advisories/tag/cwe-277.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-277&cursor=WyIyMDIzLTA3LTExVDAyOjI5OjU3LjgxMTAwMFoiLCJDVkUtMjAyMy0zMzk5MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-277/?cursor=WyIyMDIzLTA3LTExVDAyOjI5OjU3LjgxMTAwMFoiLCJDVkUtMjAyMy0zMzk5MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.