CWE-16 · Misconfiguration and Insecure Design
Configuration
297CVEs
0exploited
1with a public check
23likely (EPSS 10%+)
SortMost likely exploited
297 CVEs with CWE-16 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2004-2687CheckDistccd v1 - Remote Code ExecutionApple · Xcode · 2007-09-23 | – | 87% | 2007-09-23 |
| CVE-2009-2335WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumer…Wordpress · Wordpress · 2009-07-10 | – | 85% | 2009-07-10 |
| CVE-2006-3677Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (wind…Mozilla · Firefox · 2006-07-27 | – | 80% | 2006-07-27 |
| CVE-2011-4404The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attacker…Vmware · Vcenter Update Manager · 2011-11-19 | – | 59% | 2011-11-19 |
| CVE-2006-0848The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary commands by tricking a user into downloadin…Apple · Mac Os X · 2006-02-22 | – | 58% | 2006-02-22 |
| CVE-2007-3898The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers t…Microsoft · Windows 2000 · 2007-11-14 | – | 52% | 2007-11-14 |
| CVE-2007-2216The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execu…Microsoft · Internet Explorer · 2007-08-14 | – | 41% | 2007-08-14 |
| CVE-2012-0147Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive info…Microsoft · Forefront Unified Access Gateway · 2012-04-10 | – | 36% | 2012-04-10 |
| CVE-2017-6639A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to access s…Cisco · Cisco Prime Data Center Network Manager Debug Remote Code Execution Vulnerabili… · 2017-06-08 | – | 35% | 2017-06-08 |
| CVE-2008-4609The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to ca…Bsd · Bsd · 2008-10-20 | – | 32% | 2008-10-20 |
| CVE-2012-5613MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative…Mariadb · Mariadb · 2012-12-03 | – | 32% | 2012-12-03 |
| CVE-2003-1566Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method, which allows remote attackers to obtain sensitive information without detection.Microsoft · Internet Information Services · 2009-01-15 | – | 28% | 2009-01-15 |
| CVE-1999-0725When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page".Microsoft · Internet Information Server · 2000-01-04 | – | 25% | 2000-01-04 |
| CVE-1999-0886The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.Microsoft · Windows Nt · 2000-01-04 | – | 22% | 2000-01-04 |
| CVE-2013-1451Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not ensure that the SSL loc…Microsoft · Internet Explorer · 2013-01-29 | – | 20% | 2013-01-29 |
| CVE-2008-0128The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https sessio…Apache · Tomcat · 2008-01-23 | – | 20% | 2008-01-23 |
| CVE-2007-1692The default configuration of Microsoft Windows uses the Web Proxy Autodiscovery Protocol (WPAD) without static WPAD entries, which might allow remote attackers to intercept web tr…Microsoft · Windows 2000 · 2007-03-26 | – | 16% | 2007-03-26 |
| CVE-1999-0858Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server.Microsoft · Internet Explorer · 2000-01-04 | – | 14% | 2000-01-04 |
| CVE-2009-0696The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote…Isc · Bind · 2009-07-29 | – | 13% | 2009-07-29 |
| CVE-2011-1652The default configuration of Microsoft Windows 7 immediately prefers a new IPv6 and DHCPv6 service over a currently used IPv4 and DHCPv4 service upon receipt of an IPv6 Router Adv…Microsoft · Windows 7 · 2011-04-06 | – | 12% | 2011-04-06 |
| CVE-2011-2730VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (EL), evaluates EL expressions in tags tw…Springsource · Spring Framework · 2012-12-05 | – | 12% | 2012-12-05 |
| CVE-2019-15993Cisco Small Business Switches Information Disclosure VulnerabilityCisco · Cisco Small Business 250 Series Smart Switches Software · CVSS 7.5 · 2020-09-23 | 7.5 | 10% | 2020-09-23 |
| CVE-1999-0875DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.Microsoft · Windows 2000 · 2000-01-18 | – | 10% | 2000-01-18 |
| CVE-2005-4837snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of…Net-Snmp · Net-Snmp · 2007-04-10 | – | 10% | 2007-04-10 |
| CVE-2012-6050The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service (CPU consumption), read the router version, and possibly have other i…Mikrotik · Routeros · 2012-11-27 | – | 9.4% | 2012-11-27 |
| CVE-2009-0641sys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a method that was valid only in older FreeBSD distributions, which…Freebsd · Freebsd · 2009-02-18 | – | 9.3% | 2009-02-18 |
| CVE-2013-1450Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not properly reuse TCP sess…Microsoft · Internet Explorer · 2013-01-29 | – | 9.0% | 2013-01-29 |
| CVE-2004-2760sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection after a root login attempt with the correct password, but leaves the connection open…Openbsd · Openssh · 2008-08-04 | – | 8.7% | 2008-08-04 |
| CVE-2009-1892dhcpd in ISC DHCP 3.0.4 and 3.1.1, when the dhcp-client-identifier and hardware ethernet configuration settings are both used, allows remote attackers to cause a denial of service…Isc · Dhcp · 2009-07-17 | – | 8.6% | 2009-07-17 |
| CVE-2013-4316Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default, which has unknown impact and attack vectors.Apache · Struts · 2013-09-30 | – | 8.4% | 2013-09-30 |
| CVE-2009-3956The default configuration of Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, does not enable the Enhanced Security feature, which has unspecif…Adobe · Acrobat · 2010-01-13 | – | 7.7% | 2010-01-13 |
| CVE-2003-1341The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web…Trend Micro · Officescan · 2007-10-14 | – | 7.7% | 2007-10-14 |
| CVE-2006-7236The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code…Invisible-Island · Xterm · 2009-01-02 | – | 7.5% | 2009-01-02 |
| CVE-2004-0605Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which…Ircd-Hybrid · Ircd-Hybrid · 2004-06-30 | – | 7.3% | 2004-06-30 |
| CVE-1999-0766The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment.Microsoft · Java Virtual Machine · 2000-01-04 | – | 7.2% | 2000-01-04 |
| CVE-2008-3115Secure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through 15, does not properly prevent execution of applets on older JRE releases, which m…Sun · Jdk · 2008-07-09 | – | 7.0% | 2008-07-09 |
| CVE-2014-8657The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to cause a denial of service (disconnect al…Compal Broadband Networks · Firmware · 2014-11-06 | – | 6.8% | 2014-11-06 |
| CVE-2009-0243Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by (1) insert…Microsoft · Windows 2000 · 2009-01-21 | – | 6.3% | 2009-01-21 |
| CVE-2009-1312Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting…Mozilla · Firefox · 2009-04-22 | – | 5.6% | 2009-04-22 |
| CVE-2007-4074The default configuration of Centre for Speech Technology Research (CSTR) Festival 1.95 beta (aka 2.0 beta) on Gentoo Linux, SUSE Linux, and possibly other distributions, is run l…Centre For Speech Technology Research · Gentoo Linux · 2007-07-30 | – | 5.4% | 2007-07-30 |
| CVE-2009-2336The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password request depending on whether the user account exists, which allo…Wordpress · Wordpress · 2009-07-10 | – | 5.4% | 2009-07-10 |
| CVE-2008-3177Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to…Sophos · Sophos Anti-Virus · 2008-07-15 | – | 5.1% | 2008-07-15 |
| CVE-2010-1913The default configuration of pluginlicense.ini for the SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance, when downloa…Consona · Consona Live Assistance · 2010-05-11 | – | 5.0% | 2010-05-11 |
| CVE-2004-2692The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands via a backtick oper…Kyberdigi Labs · Php-Exec-Dir · 2007-10-06 | – | 4.5% | 2007-10-06 |
| CVE-2008-1662Unspecified vulnerability in the HP System Administration Manager (SAM) on HP-UX B.11.11 and B.11.23, when used to configure NFS, might allow remote attackers to read or modify ar…Hp · System Administration Manager · 2008-08-01 | – | 4.4% | 2008-08-01 |
| CVE-2010-3315authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is en…Apache · Subversion · 2010-10-04 | – | 4.2% | 2010-10-04 |
| CVE-2011-4501The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with…Edimax · Br-6104k · 2011-11-22 | – | 4.2% | 2011-11-22 |
| CVE-2007-6199rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to c…Rsync · Rsync · 2007-12-01 | – | 4.1% | 2007-12-01 |
| CVE-2011-1400The default configuration of the shell_escape_commands directive in conf/texmf.d/95NonPath.cnf in the tex-common package before 2.08.1 in Debian GNU/Linux squeeze, Ubuntu 10.10 an…Debian · Tex-Common · 2011-03-25 | – | 4.1% | 2011-03-25 |
| CVE-2012-4690Rockwell Automation Allen-Bradley MicroLogix controller 1100, 1200, 1400, and 1500; SLC 500 controller platform; and PLC-5 controller platform, when Static status is not enabled,…Rockwellautomation · Plc-5 Controller · 2012-12-08 | – | 4.0% | 2012-12-08 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.