Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-16

CWE-16: Configuration

Weaknesses in this category are typically introduced during the configuration of the software.

From the CWE List. © The MITRE Corporation.

Newest

Known exploitedIn KEVPublic exploitFix available

citrix xenserver, xen +1 moreXENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when...CVE-2012-3496Fix available4.7 MediumSeptember 8, 2012
websense web filter, web security +1 moreThe default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and...CVE-2009-51204.3 MediumAugust 23, 2012
websense web filter, web security +1 moreThe default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and...CVE-2009-51194.3 MediumAugust 23, 2012
kde pimThe HTMLQuoteColorer::process function in messageviewer/htmlquotecolorer.cpp in KDE PIM 4.6...CVE-2012-34134.3 MediumAugust 7, 2012
bitcoin wxbitcoin, core +1 moreThe Bitcoin protocol, as used in bitcoind before 0.4.4, wxBitcoin, Bitcoin-Qt, and other programs...CVE-2012-19095.0 MediumAugust 6, 2012
moodlemod/forum/unsubscribeall.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not...CVE-2012-33925.5 MediumJuly 23, 2012
moodleMoodle Users Can Bypass Deleted StatusCVE-2012-0797Fix available5.5 MediumJuly 17, 2012
springsource spring frameworkImproper Neutralization of Directives in Dynamically Evaluated Code in Spring FrameworkCVE-2011-2730Fix availableEPSS 11.8%7.5 HighJune 28, 2012
mahara, debian linux +1 moreThe default configuration of the auth/saml plugin in Mahara before 1.4.2 sets the "Match username...CVE-2012-2351Fix available5.0 MediumMay 9, 2012
microsoft forefront unified access gatewayMicrosoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly...CVE-2012-0147EPSS 35.6%5.0 MediumApril 10, 2012
moodlelogin/change_password.php in Moodle 1.9.x before 1.9.15 does not use https for the change...CVE-2011-45855.0 MediumFebruary 29, 2012
technicolor tg585 router, tg585 router firmware +1 moreThe UPnP IGD implementation on the Thomson (aka Technicolor) TG585 with firmware 7.x before 7.4.3...CVE-2011-45067.5 HighNovember 22, 2011
alcatel speedtouch 5x6 router, speedtouch 5x6 router firmware +1 moreThe UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote...CVE-2011-45057.5 HighNovember 22, 2011
genmei mori pseudoics, zyxel p-330w router +1 moreThe UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote...CVE-2011-45047.5 HighNovember 22, 2011
broadcom linux, sitecom wl-111 +1 moreThe UPnP IGD implementation in Broadcom Linux on the Sitecom WL-111 allows remote attackers to...CVE-2011-45037.5 HighNovember 22, 2011
canyon-tech cn-wf512, cn-wf514, edimax 6114wg +9 more +11 moreThe UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25,...CVE-2011-450110.0 HighNovember 22, 2011
linksys wrt54gx, cisco linksys wrt54gx router firmware +1 moreThe UPnP IGD implementation on the Cisco Linksys WRT54GX with firmware 2.00.05, when UPnP is...CVE-2011-45007.5 HighNovember 22, 2011
linksys wrt54g, wrt54gs, cisco linksys wrt54g router firmware +1 more +3 moreThe UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware...CVE-2011-44997.5 HighNovember 22, 2011
vmware vcenter update managerThe default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter...CVE-2011-4404Public exploitEPSS 58.9%5.0 MediumNovember 19, 2011
ibm lotus sametimeThe default configuration of the Sametime configuration servlet (SCS) in the server in IBM Lotus...CVE-2011-13705.0 MediumOctober 29, 2011
apache jservThe default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2...CVE-2000-12472.1 LowOctober 5, 2011
mozilla firefox, seamonkey, thunderbird +2 moreThe event-management implementation in Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird...CVE-2011-29819.3 HighAugust 17, 2011
avaya secure access link gatewayThe default configuration of Avaya Secure Access Link (SAL) Gateway 1.5, 1.8, and 2.0 contains...CVE-2011-30085.0 MediumAugust 5, 2011
digium asteriskThe default configuration of the SIP channel driver in Asterisk Open Source 1.4.x through 1.4.41...CVE-2011-2666Fix available5.0 MediumJuly 6, 2011
cisco iosThe Neighbor Discovery (ND) protocol implementation in Cisco IOS on unspecified switches allows...CVE-2011-23955.0 MediumJune 7, 2011
cisco rvs4000, wrvs4400n, rvs4000 software +1 more +3 moreThe web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x...CVE-2011-16459.3 HighMay 31, 2011
dovecotscript-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration...CVE-2011-2166Fix available6.5 MediumMay 24, 2011
emc sourceone email managementThe default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6...CVE-2011-14243.5 LowMay 24, 2011
maharaMahara before 1.3.6 does not properly handle an https URL in the wwwroot configuration setting,...CVE-2011-14064.3 MediumMay 13, 2011
inventivetec mediacastThe default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8...CVE-2011-20777.5 HighMay 10, 2011
banu tinyproxy, debian linux +1 moreacl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block,...CVE-2011-1499Fix available2.6 LowApril 20, 2011
vmware open-vm-toolsvmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and...CVE-2011-1681Fix available3.3 LowApril 10, 2011
gnu glibcThe addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report...CVE-2011-1089Fix available3.3 LowApril 10, 2011
microsoft windows 7** DISPUTED ** The default configuration of Microsoft Windows 7 immediately prefers a new IPv6...CVE-2011-1652DisputedEPSS 12.3%5.0 MediumApril 6, 2011
apple mac os x, terminal, mac os x server +2 moreThe default configuration of Terminal in Apple Mac OS X 10.6 before 10.6.7 uses SSH protocol...CVE-2011-01895.0 MediumMarch 23, 2011
debian linux, tex-common, canonical ubuntu linux +2 moreThe default configuration of the shell_escape_commands directive in conf/texmf.d/95NonPath.cnf in...CVE-2011-1400Fix available6.8 MediumMarch 22, 2011
apple mac os xApple Mac OS X does not properly warn the user before enabling additional Human Interface Device ...CVE-2011-06396.9 MediumJanuary 25, 2011
microsoft windowsMicrosoft Windows does not properly warn the user before enabling additional Human Interface...CVE-2011-06386.9 MediumJanuary 25, 2011
hastymail hastymail2Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session,...CVE-2009-50515.0 MediumJanuary 18, 2011
matomoCookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https...CVE-2011-04005.0 MediumJanuary 10, 2011
opera browserThe default configuration of Opera before 11.00 enables WebSockets functionality, which has...CVE-2010-458610.0 HighDecember 22, 2010
mit kerberos 5The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the...CVE-2010-4021Fix available2.1 LowDecember 2, 2010
apache tomcatApache Tomcat has cookies without HTTPOnly flag in Set-Cookie headerCVE-2010-4312Fix available6.4 MediumNovember 26, 2010
apache subversionauthz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion...CVE-2010-3315Fix available6.0 MediumOctober 4, 2010
alcatel-lucent ccagent, omnitouch contact center +1 moreThe default configuration of the CCAgent option before 9.0.8.4 in the management server (aka TSA)...CVE-2010-32797.6 HighSeptember 23, 2010
simone rota slim simple login managerThe default configuration of SLiM before 1.3.2 places ./ (dot slash) at the beginning of the...CVE-2010-2945Fix available6.9 MediumAugust 30, 2010
redhat jboss enterprise soa platformThe default configuration of the deployment descriptor (aka web.xml) in picketlink-sts.war in (1)...CVE-2010-24935.0 MediumAugust 9, 2010
cisco unified wireless network solution softwareCisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not properly implement TLS...CVE-2010-297710.0 HighAugust 9, 2010
hp client automation enterprise infrastructureThe default configuration of HP Client Automation (HPCA) Enterprise Infrastructure (aka Radia)...CVE-2010-19729.0 HighJuly 22, 2010
apple mac os x, mac os x server +1 moreThe default configuration of SMB File Server in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4,...CVE-2010-13813.5 LowJune 17, 2010
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open