CWE-16: Configuration
Weaknesses in this category are typically introduced during the configuration of the software.
From the CWE List. © The MITRE Corporation.
Newest
- gadu-gadu instant messengerThe gg protocol handler in Gadu-Gadu, when this product is installed but not running, does not...4.3 Medium
- badblueBadBlue 2.72b and earlier allows remote attackers to obtain sensitive information via an invalid...5.0 Medium
- redhat enterprise linuxThe default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise...6.9 Medium
- zabbix agentdzabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might...2.1 Low
- rsyncrsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows...9.3 High
- redhat fedora corebuttonpressed.sh in scanbuttond 0.2.3 allows local users to overwrite arbitrary files via a...2.1 Low
- apple mac os x, mac os x server +1 moreThe remote_cmds component in Apple Mac OS X 10.4 through 10.4.10 contains a symbolic link from...9.3 High
- simple machines forumSimple Machines Forum (SMF) 1.1.4 allows remote attackers to read a message in private forums by...5.0 Medium
- microsoft windows 2000, windows 2003 server, windows server 2003 +2 moreThe DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses...6.4 Medium
- symantec altiris deployment solutionAclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain...7.2 High
- denyhostsDenyHosts 2.6 processes OpenSSH sshd "not listed in AllowUsers" log messages with an incorrect...4.3 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute...9.3 High
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 can hide the window's titlebar when...4.3 Medium
- sun sunosUnspecified vulnerability in "Solaris Auditing" in the Basic Security Module (BSM) in Sun Solaris...4.9 Medium
- 3com 3crwe554g72tThe 3Com 3CRWER100-75 router with 1.2.10ww software, when remote management is disabled but a web...2.6 Low
- 3com 3crwe554g72tThe 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server,...10.0 High
- sun java virtual machineInterpretation conflict in the Sun Java Virtual Machine (JVM) allows user-assisted remote...2.6 Low
- apple safariSafari in Apple iPhone 1.1.1, when requested to disable Javascript, does not disable it until...6.8 Medium
- alexander palmo simple php blogIncomplete blacklist vulnerability in upload_img_cgi.php in Simple PHP Blog before 0.5.1 allows...7.5 High
- autodesk backburnerThe cmdjob utility in Autodesk Backburner 3.0.2 allows remote attackers to execute arbitrary...6.8 Medium
- cisco content switching module with ssl, content switching modules +1 moreCisco Content Switching Modules (CSM) 4.2 before 4.2.7, and Cisco Content Switching Module with...7.8 High
- microsoft internet explorerThe tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses...9.3 High
- apple safariWebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly...4.3 Medium
- centre for speech technology research gentoo linux, suse linux +1 moreThe default configuration of Centre for Speech Technology Research (CSTR) Festival 1.95 beta (aka...10.0 High
- linux kernelThe Distributed Lock Manager (DLM) in the cluster manager for Linux kernel 2.6.15 allows remote...5.0 Medium
- microsoft windows 2000, windows 2003 server +1 moreThe default configuration of Microsoft Windows uses the Web Proxy Autodiscovery Protocol (WPAD)...7.5 High
- openafsThe default configuration in OpenAFS 1.4.x before 1.4.4 and 1.5.x before 1.5.17 supports setuid...7.5 High
- web-app.org webappThe default configuration of WebAPP before 0.9.9.5 has a CAPTCHA setting of "no," which makes it...5.0 Medium
- mozilla firefoxMozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which...6.8 Medium
- bluez project bluezhidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1)...5.4 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute...7.5 High
- cisco iosThe web interface on Cisco IOS 12.3(8)JA and 12.3(8)JA1, as used on the Cisco Wireless Access...9.3 High
- limbo cms cmsSQL injection vulnerability in the weblinks option (weblinks.html.php) in Limbo CMS allows remote...5.1 Medium
- apple mac os x, mac os x server +1 moreThe "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user...5.1 Medium
- sun java plug-inThe Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet>...5.0 Medium
- net-snmpsnmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2...10.0 High
- cisco iosCisco IOS 12.1T, 12.2, 12.2T, 12.3 and 12.3T, with Multi Protocol Label Switching (MPLS)...6.1 Medium
- openbsd opensshsshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection...6.8 Medium
- kyberdigi labs php-exec-dirThe exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote...9.3 High
- apple xcode, samba +1 moredistcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server...9.3 High
- ircd-hybrid, ircd-ratbox +1 moreNon-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and...5.0 Medium
- kerio personal firewallKerio Personal Firewall (KPF) 2.1.4 has a default rule to accept incoming packets from DNS (UDP...7.5 High
- auerswald comsuite cti controlcenterAuerswald COMsuite CTI ControlCenter 3.1 creates a default "runasositron" user account with an...4.6 Medium
- qualcomm qpopperUntrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to...3.6 Low
- aladdin knowledge systems esafe gatewayAladdin Knowlege Systems eSafe Gateway 3.5.126.0 does not check the entire stream of Content...7.5 High
- cpanelOpenwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPT_FILENAME...3.3 Low
- gentoo syslinuxMultiple unspecified vulnerabilities in the installer for SYSLINUX 2.01, when running setuid root...10.0 High
- great circle associates majordomoThe which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set...7.8 High
- hp bastilleBastille B.02.00.00 of HP-UX 11.00 and 11.11 does not properly configure the (1) NOVRFY and (2)...7.8 High
- replicom proxyviewProxyView has a default administrator password of Administrator for Embedded Windows NT, which...10.0 High
- Show moreLoading…