CWE-254: 7PK - Security Features
Software security is not security software. Here we're concerned with topics like authentication, access control, confidentiality, cryptography, and privilege management.
From the CWE List. © The MITRE Corporation.
Newest
- ploggerPlogger 1.0 RC1 and earlier, when the Lucid theme is used, does not assign new values for certain...5.0 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.x before 7.0.0.37, 8.0.x before 8.0.0.10, and 8.5.x before 8.5...4.3 Medium
- ibm security access manager for mobile, security access manager for web +1 moreIBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x...4.3 Medium
- wordpress, debian linux, mageia project mageia +2 morewp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4...4.3 Medium
- apache cordovaApache Cordova Android before 3.5.1 allows remote attackers to bypass the HTTP whitelist and...4.3 Medium
- modwsgi mod wsgimod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle...6.9 Medium
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 morePHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...5.3 Medium
- mount.ecrpytfs private project privatemount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group3.8 Low
- gnu groff, apple mac os x +1 morecontrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program...6.5 Medium
- sun jdk, jre, sdk +1 more +3 moreUnspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier...9.3 High
- sun jdk, jre, sdk +2 moreUnspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0...6.8 Medium
- mozilla firefox, seamonkey, thunderbird +2 more +4 moreMozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and...6.8 Medium
- 3com tippingpoint ips tosTippingPoint IPS running the TippingPoint Operating System (TOS) before 2.2.4.6519 allows remote...5.0 Medium
- apache tomcatApache Tomcat may be started without proper security settings7.5 High
- microsoft excelMicrosoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM)...7.2 High