CWE-16: Configuration
Weaknesses in this category are typically introduced during the configuration of the software.
From the CWE List. © The MITRE Corporation.
Newest
- cisco webex meetings serverCisco Webex Meetings Server Information Disclosure Vulnerability5.3 Medium
- crestron am-100 firmware, am-101 firmware, airmedia +2 moreCrestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials...9.8 Critical
- cisco aironet access point firmware, aironet access point software +1 moreCisco Aironet Series Access Points Command Injection Vulnerability6.7 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Information Disclosure Vulnerability7.5 High
- cisco application policy infrastructure controller software, nx-os software for nexus 9000 series fabric switches aci mode, nx-os +2 moreCisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Privilege Escalation Vulnerability6.7 Medium
- cisco registered envelope serviceCisco Registered Envelope Service Information Disclosure Vulnerability5.3 Medium
- cisco digital network architecture center, digital network architecture center (dna center) +1 moreCisco Digital Network Architecture Center Unauthenticated Access Vulnerability9.8 Critical
- fujitsu displayview click, displayview click suite, hp display assistant +4 more +6 moreApplications developed using the Portrait Display SDK, versions 2.30 through 2.34, default to insecure configurations which allow arbitrary code execution7.8 High
- cisco meeting serverA vulnerability in Cisco Meeting Server (CMS) could allow an unauthenticated, adjacent attacker...7.4 High
- cisco meeting serverA vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain...8.1 High
- cisco identity services engineA vulnerability in the support tunnel feature of Cisco Identity Services Engine (ISE) could allow...6.7 Medium
- qualcomm mdm9206 firmware, mdm9650 firmware, sd 205 firmware +6 more +8 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile,...7.5 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +18 more +20 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and...9.8 Critical
- cisco conference directorA vulnerability in the upgrade process of Cisco Spark Board could allow an authenticated, local...4.4 Medium
- cisco meeting serverA vulnerability in the Traversal Using Relay NAT (TURN) server included with Cisco Meeting Server...9.1 Critical
- google android, qualcomm, inc. all qualcomm products +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration...9.8 Critical
- cisco prime data center network managerA vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center...9.8 Critical
- elipse e3Elipse E3 3.x and earlier allows remote attackers to cause a denial of service (application crash...5.0 Medium
- compal broadband networks cg6640e wireless gateway, firmware, ch664oe wireless gateway +2 moreThe Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640...5.0 Medium
- apple mac os xThe MCX Desktop Config Profiles implementation in Apple OS X before 10.10 retains web-proxy...2.6 Low
- ibm security access manager for web 8.0 firmware, security access manager for web appliance +1 moreThe reverse-proxy feature in IBM Security Access Manager (ISAM) for Web 8.0 with firmware 8.0.0.2...3.3 Low
- asus wl-330nulThe ASUS WL-330NUL router has a configuration process that relies on accessing the 192.168.1.1 IP...5.0 Medium
- apple mac os xCFNetwork in Apple Mac OS X before 10.9 does not properly support Safari's deletion of session...5.0 Medium
- restletRestlet is vulnerable to Arbitrary Java Code Execution via crafted XML7.5 High
- apache struts, oracle flexcube private banking, mysql enterprise monitor +1 more +3 moreCode injection in Apache Struts10.0 High
- redhat jboss enterprise application platformRed Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations...6.4 Medium
- wordpressThe default configuration of SWFUpload in WordPress before 3.5.2 has an unrestrictive security...4.3 Medium
- cisco unified customer voice portalThe Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9...7.8 High
- cisco unified customer voice portalThe Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9...10.0 High
- motorola android, atrix hd, razr hd +2 more +4 moreThe TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on...6.2 Medium
- apache mavenThe default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL...5.8 Medium
- cogentdatahub cascade datahub, cogent datahub, datahub quicktrend +1 more +3 moreThe DataSim and DataPid demonstration clients in Cogent Real-Time Systems Cogent DataHub before 7...7.1 High
- ibm netezza performance portalHTTPD in IBM Netezza Performance Portal 1.0.2 allows remote authenticated users to list...4.0 Medium
- redhat enterprise linuxThe default configuration for IPA servers in Red Hat Enterprise Linux 6, when revoking a...4.3 Medium
- video project videoThe Video module 7.x-2.x before 7.x-2.9 for Drupal, when using the FFmpeg transcoder, allows...4.4 Medium
- david king vinoVino before 2.99.4 can connect external networks contrary to the statement in the vino...4.6 Medium
- ibm tivoli application dependency discovery managerThe SSL configuration in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before...5.8 Medium
- rsa authentication agent for windowsEMC RSA Authentication Agent 7.1.x before 7.1.2 on Windows does not enforce the Quick PIN Unlock...5.4 Medium
- cs-cartCS-Cart before 3.0.6, when PayPal Standard Payments is configured, allows remote attackers to set...5.0 Medium
- xenXen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure...6.1 Medium
- microsoft internet explorerMicrosoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy...4.0 Medium
- microsoft internet explorerMicrosoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy...4.0 Medium
- citrix xenserverArray index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS...3.2 Low
- hp openvmsHP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the...2.1 Low
- rockwellautomation plc-5 controller, slc 500 controller, ab micrologix controller +2 moreRockwell Automation Allen-Bradley MicroLogix controller 1100, 1200, 1400, and 1500; SLC 500...7.1 High
- mariadb, oracle mysql +1 more** DISPUTED ** MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other...6.0 Medium
- mikrotik routerosThe winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a...6.4 Medium
- xenXen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p...2.1 Low
- andy armstrong cgi.pmCGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P...5.0 Medium
- linux kernelThe override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local...4.9 Medium
- Show moreLoading…