CWE-16: Configuration
Weaknesses in this category are typically introduced during the configuration of the software.
From the CWE List. © The MITRE Corporation.
Newest
- gabberGabber 0.8.7 sends an email to a specific address during user login and logout, which allows...5.0 Medium
- trend micro officescan, virus buster +1 moreThe default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote...7.5 High
- apple tcp ip configuration utilityThe default configuration of the TCP/IP printer configuration utility in Apple LaserWriter 12/640...7.5 High
- symantec norton personal firewallNorton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote...4.3 Medium
- john drake killer protectionKiller Protection 1.0 stores the vars.inc include file under the web root with insufficient...5.0 Medium
- cascadesoft w3mailW3Mail 1.0.2 through 1.0.5 with server side scripting (SSI) enabled in the attachments directory...5.8 Medium
- broadcom inoculateiteTrust InoculateIT 6.0 with the "Incremental Scan" option enabled may certify that a file is free...4.3 Medium
- openbsdsyslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when...2.1 Low
- hp visualize conference ftpThe installation program for HP-UX Visualize Conference B.11.00.11 running on HP-UX 11.00 and 11...6.6 Medium
- mambo site serverThe administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to...5.0 Medium
- netscreen screenosNetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking...4.3 Medium
- microsoft windows ntAfter an unattended installation of Windows NT 4.0, an installation file could include sensitive...7.2 High
- microsoft internet explorerInternet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a...5.0 Medium
- microsoft java virtual machineThe Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands...9.3 High
- microsoft windows ntThe security descriptor for RASMAN allows users to point to an alternate location via the Windows...9.0 High
- microsoft internet information serverWhen IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote...7.1 High
- microsoft windows 2000, windows 95, windows 98se +2 more +4 moreDHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify...7.5 High
- linux kernelThe ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by...5.0 Medium