CWE-254: 7PK - Security Features
Software security is not security software. Here we're concerned with topics like authentication, access control, confidentiality, cryptography, and privilege management.
From the CWE List. © The MITRE Corporation.
Newest
- ibm kenexa lcms premier, ibm corporation kenexa lcms premier on cloud +1 moreIBM Kenexa LCMS Premier on Cloud could allow an authenticated user to obtain sensitive user data...4.3 Medium
- ibm jazz reporting serviceIBM Jazz Reporting Service (JRS) could allow a remote attacker to obtain sensitive information,...4.3 Medium
- openntpdOpenNTPD before 6.0p1 does not validate the CN for HTTPS constraint requests, which allows remote...5.9 Medium
- puppetlabs mcollective-puppet-agentThe mcollective-puppet-agent plugin before 1.11.1 for Puppet allows remote attackers to execute...6.6 Medium
- dlink dwr-932b firmwareAn issue was discovered on the D-Link DWR-932B router. A secure_mode=no line exists in /var...7.5 High
- dlink dwr-932b firmwareAn issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 (UDP) launches the "...9.8 Critical
- oracle peoplesoft enterprise peopletools, peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products ...6.1 Medium
- oracle flexcube core bankingVulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services...3.1 Low
- oracle flexcube universal bankingVulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services...7.3 High
- oracle flexcube investor servicingVulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services...5.4 Medium
- oracle flexcube universal bankingVulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services...6.1 Medium
- oracle flexcube private bankingVulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services...5.4 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI)....6.3 Medium
- doorkeeper project doorkeeperDoorkeeper is vulnerable to replay attacks9.1 Critical
- typo3Extbase for TYPO3 allows RCE8.1 High
- uglifyjs project uglifyjsIncorrect Handling of Non-Boolean Comparisons During Minification in uglify-js9.8 Critical
- google chromeThe content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently...8.8 High
- apache groovy ldapmain/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows...7.5 High
- bzrtp project bzrtpThe Bzrtp library (aka libbzrtp) 1.0.x before 1.0.4 allows man-in-the-middle attackers to conduct...7.5 High
- wordpressThe wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6...4.3 Medium
- blackberry enterprise serviceA spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2...8.2 High
- google android, linux kernel +1 moreUnauthenticated messages processed by the UE. Certain NAS messages are processed when no EPS...9.8 Critical
- pivotal software gemfire for pivotal cloud foundryAn issue was discovered in Pivotal GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x...9.8 Critical
- emc scaleioAn issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker...5.5 Medium
- vmware toolsVMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is...5.5 Medium
- kde kscreenlocker, plasma-workspace, fedoraproject fedora +1 more +3 moreTurning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can...6.8 Medium
- microsoft edge, internet explorer +1 moreThe Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows...5.3 Medium
- siemens simatic pcs 7, simatic wincc +1 moreA vulnerability in SIEMENS SIMATIC WinCC (All versions < SIMATIC WinCC V7.2) and SIEMENS SIMATIC...8.1 High
- open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. API requests can be used...5.5 Medium
- cisco firepower, firepower services for adaptive security appliance +1 moreA vulnerability in TCP processing in Cisco FirePOWER system software could allow an...4.3 Medium
- cisco expresswayA vulnerability in the HTTP traffic server component of Cisco Expressway could allow an...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreExternal resources that should be blocked when loaded by SVG images can bypass security...7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreEvent handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP)...6.1 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. A user can be tricked into following a link leading to...4.4 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. Due to a bug in serialized string parsing, it was possible...9.8 Critical
- phpmyadminphpMyAdmin Bypass white-list protection for URL redirection7.5 High
- phpmyadminphpMyAdmin Bypass logout timeout5.3 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. Username matching for the allow/deny rules may result in...5.3 Medium
- ibm qradar security information and event managerIBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 and QRadar Incident Forensics 7.2...6.5 Medium
- ibm bigfix remote controlIBM BigFix Remote Control before 9.1.3 does not properly restrict password choices, which makes...8.1 High
- google androidAn elevation of privilege in the System UI in Android 7.0 before 2016-11-01 could enable a local...5.5 Medium
- ge bently nevada 3500\/22m serial firmware, bently nevada 3500\/22m usb firmware +1 moreGeneral Electric (GE) Bently Nevada 3500/22M USB with firmware before 5.0 and Bently Nevada 3500...10.0 Critical
- ibm security access manager, security access manager for mobile +1 moreIBM Security Access Manager for Mobile 8.x before 8.0.1.4 IF3 and Security Access Manager 9.x...8.1 High
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5...3.7 Low
- ibm security privileged identity managerIBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used,...3.7 Low
- clusterlabs pacemaker, opensuse leap, redhat enterprise linux high availability +3 more +5 morePacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a...7.5 High
- cisco firesight system softwareA vulnerability in the FTP Representational State Transfer Application Programming Interface ...7.5 High
- mozilla firefoxContent Security Policy combined with HTTP to HTTPS redirection can be used by malicious server...5.3 Medium
- siemens primary setup tool, security configuration tool, simatic it production suite +15 more +17 moreA vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1),...6.4 Medium
- novell open enterprise server 11, open enterprise server 2015 +1 moreVulnerability in Novell Open Enterprise Server (OES2015 SP1 before Scheduled Maintenance Update...9.1 Critical
- Show moreLoading…