CWE-254: 7PK - Security Features
Software security is not security software. Here we're concerned with topics like authentication, access control, confidentiality, cryptography, and privilege management.
From the CWE List. © The MITRE Corporation.
Newest
- apple iphone osWeb Media in Apple iOS before 9.3.3 allows attackers to bypass the Private Browsing protection...4.3 Medium
- cisco asr 5000, asr 5000 software +1 moreCisco ASR 5000 devices with software 18.3 through 20.0.0 allow remote attackers to make...6.5 Medium
- adobe acrobat, acrobat reader dc, reader +1 more +3 moreAdobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006...9.8 Critical
- microsoft windows 10, windows 8.1, windows rt 8.1 +1 more +3 moreMicrosoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and...4.4 Medium
- microsoft excel, office, office web apps +6 more +8 moreMicrosoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1,...5.5 Medium
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...8.1 High
- google androidinternal/app/ChooserActivity.java in the ChooserTarget service in Android 6.x before 2016-07-01...7.8 High
- google androidplatform/msm_shared/mmc.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 ...7.8 High
- ibm i accessIBM i Access 7.1 on Windows allows local users to discover registry passwords via unspecified...7.8 High
- cisco amp threat grid applianceThe virtual network stack on Cisco AMP Threat Grid Appliance devices before 2.1.1 allows remote...8.1 High
- phpmyadminphpMyAdmin cookie-attribute injection3.7 Low
- ibm infosphere streams, streams +1 moreIBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement...7.0 High
- symantec endpoint protection managerSymantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 does not properly implement the...5.3 Medium
- symantec endpoint protection managerSymantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users...8.8 High
- symantec endpoint protection managerSymantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users...8.8 High
- symantec endpoint protection managerRace condition in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6 MP5 allows...2.9 Low
- redhat openstackThe image build process for the overcloud images in Red Hat OpenStack Platform 8.0 (Liberty)...8.8 High
- corega cg-wlr300gnv-w firmware, cg-wlr300gnv firmware +1 moreThe Wi-Fi Protected Setup (WPS) implementation on Corega CG-WLR300GNV and CG-WLR300GNV-W devices...5.3 Medium
- cisco asyncosCisco AsyncOS 9.7.0-125 on Email Security Appliance (ESA) devices allows remote attackers to...7.5 High
- apple mac os xIntel Graphics Driver in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel...3.3 Low
- apple mac os xIntel Graphics Driver in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel...3.3 Low
- openstack neutronOpenStack Neutron Intended MAC-spoofing protection mechanism bypass8.2 High
- openstack neutronOpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism8.2 High
- openstack neutronOpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism9.1 Critical
- microsoft edgeMicrosoft Edge allows remote attackers to bypass the Content Security Policy (CSP) protection...6.5 Medium
- huawei wear app, hilink app +1 moreThe Huawei Wear App application before 15.0.0.307 for Android does not validate SSL certificates,...6.5 Medium
- apache cloudstackApache CloudStack 4.5.x before 4.5.2.1, 4.6.x before 4.6.2.1, 4.7.x before 4.7.1.1, and 4.8.x...6.5 Medium
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 ignores Content Security Policy (CSP) directives for cross-domain...6.1 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves...8.8 High
- google chrome, debian linux, opensuse leap +5 more +7 moreThe extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings...8.8 High
- moxa uc-7408 lx-plus, uc-7408 lx-plus firmware +1 moreMoxa UC-7408 LX-Plus devices allow remote authenticated users to write to the firmware, and...5.8 Medium
- google chrome, debian linux, opensuse leap +5 more +7 moreThe ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the...8.8 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreThe ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules...6.1 Medium
- emc isilon onefs, isilonsd edge onefs +1 moreEMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS...5.9 Medium
- meteocontrol web\'log basic 100, web\'log light, web\'log pro +1 more +3 moreMeteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for...9.4 Critical
- ntp, ntpsec +1 morentpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying...3.7 Low
- microsoft windows 10Microsoft Windows 10 Gold and 1511 allows local users to bypass the Virtual Secure Mode...5.5 Medium
- apache cordovaApache Cordova iOS before 4.0.0 might allow attackers to bypass a URL whitelist protection...5.3 Medium
- hyperHTTPS MitM vulnerability due to lack of hostname verification4.8 Medium
- emc rsa data loss preventionEMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to bypass...6.3 Medium
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 moreThe HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in...4.3 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise desktop +6 more +8 moreThe arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does...7.8 High
- google chrome, debian linux, novell suse package hub for suse linux enterprise +1 more +3 moreThe WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents...4.3 Medium
- microsoft edgeMicrosoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors,...6.5 Medium
- microsoft edgeMicrosoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors,...6.5 Medium
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe SAM and LSAD protocol implementations in Microsoft Windows Vista SP2, Windows Server 2008 SP2...6.8 Medium
- samba, canonical ubuntu linux, debian linux +2 moreThe MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before...7.5 High
- samba, canonical ubuntu linux +1 moreSamba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB...5.9 Medium
- samba, canonical ubuntu linux +1 moreThe SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before...5.9 Medium
- samba, canonical ubuntu linux +1 moreThe bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x...5.9 Medium
- Show moreLoading…