CWE-16: Configuration
Weaknesses in this category are typically introduced during the configuration of the software.
From the CWE List. © The MITRE Corporation.
Newest
- hclsoftware intelliops event management HCL IEM was affected with X-Content-Type-Options Header Missing 3.1 Low
- ibm powervm novalink This PowerVM Novalink update is being released to address 3.9 Low
- tenable operational technology exposure, tenable, inc. tenable operation technology +1 more An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket,... 1.9 Low
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more CSRF Token not Properly Implemented 2.1 Low
- cisco ios xe catalyst sd-wan, ios xe sd-wan +1 more Cisco IOS and IOS XE Software SNMPv3 Configuration Restriction Vulnerability 4.3 Medium
- progress whatsup gold WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability 9.8 Critical
- qualcomm 215 firmware, mdm9206 firmware, mdm9607 firmware +20 more +22 more Configurations in Android Build 7.5 High
- huawei emui, harmonyos +1 more Access permission verification vulnerability in the input method framework module Impact:... 4.4 Medium
- huawei emui, harmonyos +1 more Permission vulnerability in the ActivityManagerService (AMS) module Impact: Successful... 5.6 Medium
- huawei emui, harmonyos +1 more Access permission verification vulnerability in the Settings module. Impact: Successful... 7.5 High
- huawei emui, harmonyos +1 more Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this... 7.1 High
- huawei emui, harmonyos +1 more Permission verification vulnerability in the wpa_supplicant module Impact: Successful... 7.5 High
- qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +158 more +160 more Configuration Issue in WLAN Host and Firmware 7.5 High
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +149 more +151 more Configuration Issue in Core 5.9 Medium
- dell cpg bios, precision 7865 tower firmware +1 more Dell Client BIOS contains a pre-boot direct memory access (DMA) vulnerability. An authenticated... 7.2 High
- huawei emui, harmonyos +1 more Vulnerability of configuration defects in the media module of certain products.. Successful... 9.1 Critical
- huawei emui, harmonyos +1 more Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this... 7.5 High
- qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +199 more +201 more Configuration weakness in modem 7.8 High
- microsoft windows firewall, zabbix, zabbix agent (msi packages) +1 more +3 more Zabbix Agent installer adds “allow all TCP any any” firewall rule 6.5 Medium
- zoom meetings, zoom video communications inc client for meetings for macos +1 more Debugging port misconfiguration in Zoom Apps in the Zoom Client for Meetings for macOS 7.3 High
- openatom openharmony Incorrect configuration of the cJSON library lead a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices. 7.4 High
- yugabyte yugabytedb, yugabyte, inc. yugabyte db +1 more The software is vulnerable when using LDAP-based authentication in YCQL with Microsoft’s Active Directory 8.3 High
- dell supportassist consumer, supportassist for business pcs, supportassist for home pcs +2 more Dell SupportAssist Client Consumer versions (3.10.4 and prior) and Dell SupportAssist Client... 8.3 High
- juniper junos os evolved, juniper networks junos os +1 more Junos OS Evolved: A remote attacker may cause a CPU Denial of Service by sending genuine traffic to a device on a specific IPv4 port. 7.5 High
- ubiquiti inc unifi protect application, ui unifi protect +1 more A Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application Version 1... 8.8 High
- solarwinds kiwi syslog server HTTP TRACK & TRACE Methods Enabled 5.3 Medium
- juniper networks src series, juniper session and resource control +1 more SRC Series: A remote attacker sending a specially crafted query may cause the web server to delete files 6.5 Medium
- juniper networks src series, juniper session and resource control +1 more SRC Series: A remote attacker sending a specially crafted query may cause the web server to disclose sensitive information 5.3 Medium
- sonicwall analytics, analytics on-prem +1 more SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol (JDWP) interface... 9.8 Critical
- dell wyse thinos, wyse proprietary os (thinos) +1 more Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation... 5.0 Medium
- juniper junos, juniper networks junos os +1 more Junos OS: Upon receipt of certain protocol packets with invalid payloads a self-propagating Denial of Service may occur. 7.4 High
- honor pcmanager A privilege escalation vulnerability was reported in Lenovo PCManager prior to version 3.0.50... 7.8 High
- lenovo desktop and workstation systems, thinkcentre m80s firmware, thinkcentre m80t firmware +12 more +14 more Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the... 6.7 Medium
- cisco small business 250 series smart switches software, sf200-24 firmware, sf200-24fp firmware +112 more +114 more Cisco Small Business Switches Information Disclosure Vulnerability 7.5 High
- philips clinical collaboration platform Philips Clinical Collaboration Platform Configuration 6.8 Medium
- palo alto networks pan-os PAN-OS: Management web interface denial-of-service (DoS) 7.5 High
- cisco vision dynamic signage director Cisco Vision Dynamic Signage Director Directory Traversal Information Disclosure Vulnerability 5.3 Medium
- abb esoms ABB eSOMS X-XSS-Protection not enabled 6.3 Medium
- abb esoms eSOMS X-FrameOption 6.5 Medium
- abb esoms eSOMS Cachecontrol (Pragma) HTTP Header 6.5 Medium
- abb esoms ABB eSOMS: SSL medium strength Cipher Suites 5.9 Medium
- abb esoms ABB eSOMS: Viewstate without MAC Signature 3.5 Low
- abb esoms ABB eSOMS: HTTP response information leakage 4.3 Medium
- abb esoms ABB eSOMS: Secure Flag not set 3.5 Low
- abb esoms eSOMS: X-Content-Type-Options Header Missing 6.1 Medium
- abb esoms ABB eSOMS: HTTPOnly flag not set 5.3 Medium
- otrs, otrs ag ((otrs)) community edition, opensuse backports sle +1 more +3 more Autocomplete in the form login screens 3.5 Low
- dell cpg bios, xps 7390 firmware +1 more Settings for the Dell XPS 13 2-in-1 (7390) BIOS versions prior to 1.1.3 contain a configuration... 7.6 High
- rust cargo, rust-lang rust +1 more Cargo prior to Rust 1.26.0 may download the wrong dependency 4.6 Medium
- arlo basestation firmware, vmb3010 firmware, vmb3500 firmware +3 more +5 more Arlo Basestation firmware 1.12.0.1_27940 and prior firmware contain a networking misconfiguration... 9.8 Critical
- Show olderLoading…