Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-16

CWE-16: Configuration

Weaknesses in this category are typically introduced during the configuration of the software.

From the CWE List. © The MITRE Corporation.

Newest

Known exploitedIn KEVPublic exploitFix available

sourcefire 3d1000, 3d2000, 3d9900 +1 more +3 moreThe default installation of Sourcefire 3D Sensor 1000, 2000, and 9900; and Defense Center 1000;...CVE-2010-23064.3 MediumJune 16, 2010
dojotoolkit dojoThe default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1...CVE-2010-227610.0 HighJune 14, 2010
consona dynamic agent, live assistance, subscriber assistance +2 moreThe default configuration of pluginlicense.ini for the SdcWebSecureBase interface in tgctlcm.dll...CVE-2010-19139.3 HighMay 11, 2010
apple mac os x, mac os x server +1 morefreshclam in ClamAV in Apple Mac OS X 10.5.8 with Security Update 2009-005 has an incorrect...CVE-2010-00586.4 MediumMarch 30, 2010
apple safariPubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies...CVE-2010-00444.3 MediumMarch 12, 2010
moinmo moinmoinMoinMoin has improper default configurationCVE-2010-0717Fix available7.5 HighFebruary 26, 2010
linux kernelThe pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM...CVE-2010-0309Fix available6.8 MediumFebruary 12, 2010
sun opensolarisThe default configuration of Oracle OpenSolaris snv_91 through snv_131 allows attackers to have...CVE-2010-05597.5 HighFebruary 5, 2010
sun opensolarisThe default configuration of Oracle OpenSolaris snv_77 through snv_131 allows attackers to have...CVE-2010-05587.5 HighFebruary 5, 2010
ibm websphere service registry and repositoryIBM WebSphere Service Registry and Repository (WSRR) 6.3.0 before FP2 does not have the intended...CVE-2009-27505.5 MediumFebruary 4, 2010
sun java system application serverThe default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP...CVE-2010-03864.3 MediumJanuary 25, 2010
ibm lotus domino serverThe default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0,...CVE-2008-72534.3 MediumJanuary 25, 2010
jce-tech php calendars scriptinstall.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass...CVE-2010-0380Public exploit5.0 MediumJanuary 22, 2010
adobe acrobat, acrobat reader +1 moreThe default configuration of Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on...CVE-2009-395610.0 HighJanuary 13, 2010
sun java system directory serverDirectory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6...CVE-2009-44425.0 MediumDecember 28, 2009
intel q43 express chipset, gm45 chipset, pm45 express chipset +2 more +4 moreIntel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code...CVE-2009-44197.2 HighDecember 24, 2009
sql-ledgerThe default configuration of SQL-Ledger 2.8.24 allows remote attackers to perform unspecified...CVE-2009-44027.5 HighDecember 23, 2009
sql-ledgerSQL-Ledger 2.8.24 does not set the secure flag for the session cookie in an https session, which...CVE-2009-35845.0 MediumDecember 23, 2009
iij seil\/b1, seil\/b1 firmware, seil\/x1 +3 more +5 moreInternet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.30 through 2.51, when NAT is...CVE-2009-42937.1 HighDecember 10, 2009
opera browserOpera before 10.10, when exception stacktraces are enabled, places scripting error messages from...CVE-2009-40715.8 MediumNovember 24, 2009
mozilla firefox, seamonkey +1 moreMozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly...CVE-2009-33769.3 HighOctober 28, 2009
sun solarisXScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically...CVE-2009-37461.9 LowOctober 22, 2009
openbsd opensshA certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in...CVE-2009-2904Fix available6.9 MediumOctober 1, 2009
ibm websphere application serverThe Migration component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0...CVE-2009-20892.1 LowAugust 13, 2009
cisco ios, ios xe +1 moreCisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 through 12.0(33)S4, 12.0(32)SY8 through...CVE-2009-20495.4 MediumJuly 30, 2009
isc bindThe dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5...CVE-2009-0696Public exploitFix availableEPSS 12.6%4.3 MediumJuly 29, 2009
isc dhcpdhcpd in ISC DHCP 3.0.4 and 3.1.1, when the dhcp-client-identifier and hardware ethernet...CVE-2009-1892Fix available5.0 MediumJuly 17, 2009
wordpress, wordpress mu +1 moreThe forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different...CVE-2009-2336Fix available5.0 MediumJuly 10, 2009
wordpress, wordpress mu +1 moreWordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt...CVE-2009-2335Public exploitFix availableEPSS 85.0%5.0 MediumJuly 10, 2009
yasinkaplan tekradiusThe default configuration of TekRADIUS 3.0 uses the sa account to communicate with Microsoft SQL...CVE-2009-235710.0 HighJuly 7, 2009
suse linuxThe YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 (aka SLE11) does...CVE-2009-16487.5 HighJuly 5, 2009
debian linux, linux kernel, canonical ubuntu linux +2 moreThe personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting...CVE-2009-18957.2 HighJune 28, 2009
ibm db2The db2fmp process in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 on Windows runs...CVE-2008-682010.0 HighJune 3, 2009
ibm db2IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 provides an INSTALL_JAR (aka sqlj...CVE-2008-21546.0 MediumJune 3, 2009
sun iplanet web server, one web server +1 moreThe default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through...CVE-2004-27635.8 MediumJune 1, 2009
apache http serverThe Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options...CVE-2009-1195Fix available4.9 MediumMay 28, 2009
apple mac os x, mac os x server +1 moreCFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie...CVE-2009-01444.3 MediumMay 13, 2009
linux kernelThe selinux_ip_postroute_iptables_compat function in security/selinux/hooks.c in the SELinux...CVE-2009-11844.4 MediumMay 5, 2009
apport, ubuntu +1 moreApport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5...CVE-2009-12951.9 LowApril 30, 2009
mozilla firefox, seamonkey +1 moreMozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh...CVE-2009-1312Public exploit4.3 MediumApril 22, 2009
mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same...CVE-2009-13094.3 MediumApril 22, 2009
mozilla firefox, seamonkey, thunderbird +2 moreThe jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not...CVE-2009-13064.3 MediumApril 22, 2009
mozilla firefox, seamonkey, thunderbird +2 moreThe browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey...CVE-2009-13035.0 MediumApril 22, 2009
versalsoft http file upload activex controlInsecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control ...CVE-2008-66388.8 HighApril 7, 2009
bluecoat proxysg, proxysg sg210-10, proxysg sg210-25 +16 more +18 moreBlue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to...CVE-2009-12115.8 MediumApril 1, 2009
vidalia-project vidalia bundleVidalia bundle before 0.1.2.18, when running on Windows, installs Privoxy with a configuration...CVE-2007-67245.0 MediumMarch 31, 2009
anonymityanywhere torkTorK before 0.22, when running on Windows and Mac OS X, installs Privoxy with a configuration...CVE-2007-67234.3 MediumMarch 31, 2009
vidalia-project vidalia bundleVidalia bundle before 0.1.2.18, when running on Windows and Mac OS X, installs Privoxy with a...CVE-2007-67225.0 MediumMarch 31, 2009
sun javaThe Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update...CVE-2009-11045.8 MediumMarch 25, 2009
sun jdk, jre, sdk +2 moreLdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5...CVE-2009-10935.0 MediumMarch 25, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open