CWE-16: Configuration
Weaknesses in this category are typically introduced during the configuration of the software.
From the CWE List. © The MITRE Corporation.
Newest
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 morenfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a...4.9 Medium
- cisco ace 4710Cisco ACE 4710 Application Control Engine Appliance before A1(8a) uses default (1) usernames and ...10.0 High
- ibm websphere process serverIBM WebSphere Process Server (WPS) 6.1.2 before 6.1.2.3 and 6.2 before 6.2.0.1 does not properly...4.0 Medium
- drupalincludes/bootstrap.inc in Drupal 5.x before 5.12 and 6.x before 6.6, when the server is...9.3 High
- freebsdsys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment...9.3 High
- ibm websphere application serverThe installation process for the File Transfer servlet in the System Management/Repository...5.0 Medium
- david paleino wicdThe DBus configuration file for Wicd before 1.5.9 allows arbitrary users to own org.wicd.daemon,...2.1 Low
- chipmunk scripts bloggerChipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct...7.5 High
- microsoft windows 2000, windows server 2003, windows server 2008 +2 more +4 moreMicrosoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values,...7.2 High
- microsoft internet information servicesMicrosoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method...5.0 Medium
- phpPHP 5.2.7 contains an incorrect change to the FILTER_UNSAFE_RAW functionality, and...7.5 High
- nokia 6131 nfcThe Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware automatically installs...7.5 High
- invisible-island xtermThe default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the...9.3 High
- avaya communication managerMultiple unspecified vulnerabilities in the web management interface in Avaya Communication...5.0 Medium
- freedesktop dbusThe default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type...4.6 Medium
- powerdnsPowerDNS before 2.9.21.2 allows remote attackers to cause a denial of service (daemon crash) via...4.3 Medium
- adobe flash media serverThe default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable SWF Verification...5.0 Medium
- bsd, bsdi bsd os, cisco catalyst blade switch 3020 firmware +16 more +18 moreThe TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4)...7.1 High
- apple mac os x, mac os x server +1 moreUnspecified vulnerability in rlogind in the rlogin component in Mac OS X 10.4.11 and 10.5.5...10.0 High
- redhat jboss enterprise application platformThe default configuration of the JBossAs component in Red Hat JBoss Enterprise Application...4.3 Medium
- gnu adnsGNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests...6.4 Medium
- openvpnUnspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows...7.6 High
- hp hp-ux, system administration manager +1 moreUnspecified vulnerability in the HP System Administration Manager (SAM) on HP-UX B.11.11 and B.11...10.0 High
- debian python-dnsPyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for...6.4 Medium
- debian python-dnsPyDNS (aka python-dns) before 2.3.1-4 in Debian GNU/Linux does not use random source ports or...6.4 Medium
- joomlaJoomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs7.5 High
- sophos anti-virus, es1000, es4000 +1 more +3 moreSophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure...5.0 Medium
- sun jdk, jre +1 moreSecure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through...7.5 High
- cisco intrusion prevention systemUnspecified vulnerability in Cisco Intrusion Prevention System (IPS) 5.x before 5.1(8)E2 and 6.x...7.8 High
- openofficeUntrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org (OOo) 1...4.4 Medium
- fedora 8 consolehelper, redhat fedora 8 +1 moreThe default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8...7.2 High
- sun sunosThe TCP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to cause a denial of...7.8 High
- redhat enterprise linux, enterprise linux desktop +1 moreThe IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of...7.1 High
- sun solarisUnspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote...7.8 High
- kdestart_kdeinit in KDE 3.5.5 through 3.5.9, when installed setuid root, allows local users to cause...4.6 Medium
- asterisk appliance developer kit, business edition, asterisknow +2 more +4 moreThe IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision...7.1 High
- sun sunosUnspecified vulnerability in the floating point context switch implementation in Sun Solaris 9...6.6 Medium
- cisco iosUnspecified vulnerability in the Multicast Virtual Private Network (MVPN) implementation in Cisco...5.1 Medium
- zyxel prestige 660, prestige 661, zynos +2 moreThe default SNMP configuration on ZyXEL Prestige routers, including P-660 and P-661 models with...5.0 Medium
- zyxel prestige 660, prestige 661, zynos +2 moreThe SNMP service on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40...7.5 High
- zyxel prestige 660, prestige 661, zynos +2 moreZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40...7.5 High
- peelPEEL, possibly 3.x and earlier, has (1) a default info@peel.fr account with password admin, and ...7.5 High
- vmware ace, player, workstation +2 moreThe default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and...10.0 High
- ibm rational clearquestIBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 generates different error messages depending on...5.0 Medium
- dovecotDovecot before 1.0.11, when configured to use mail_extra_groups to allow Dovecot to create...4.4 Medium
- apache tomcatThe SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5...5.0 Medium
- uber uploader uploaderThe default configuration of Uber Uploader (UU) 5.3.6 and earlier does not block uploads of (1) ...5.0 Medium
- sun solarisSolaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate...3.5 Low
- redhat enterprise linuxThe default configuration for autofs 5 (autofs5) in some Linux distributions, such as Red Hat...6.2 Medium
- apple mac os xQuick Look Apple Mac OS X 10.5.1, when previewing an HTML file, does not prevent plug-ins from...9.4 High
- Show moreLoading…