CWE-16 (page 4)
Page 4 of 4 — CVEs classified under CWE-16, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2003-1352 | | 2003-12-31 | Gabber 0.8.7 sends an email to a specific address during user login and logout, which allows remote attackers to obtain user session activity and Gabber versio… | |
CVE-2003-1341 | | 2003-12-31 | The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and ga… | |
CVE-2002-2373 | | 2002-12-31 | The default configuration of the TCP/IP printer configuration utility in Apple LaserWriter 12/640 PS printer contains a blank Telnet password, which allows rem… | |
CVE-2002-2336 | | 2002-12-31 | Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service… | |
CVE-2002-2335 | | 2002-12-31 | Killer Protection 1.0 stores the vars.inc include file under the web root with insufficient access control, which allows remote attackers to obtain user names… | |
CVE-2002-2331 | | 2002-12-31 | W3Mail 1.0.2 through 1.0.5 with server side scripting (SSI) enabled in the attachments directory does not properly restrict the types of files that can be uplo… | |
CVE-2002-2285 | | 2002-12-31 | eTrust InoculateIT 6.0 with the "Incremental Scan" option enabled may certify that a file is free of viruses before the file has been completely downloaded, wh… | |
CVE-2002-2280 | | 2002-12-31 | syslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when the machine's IP addressed is changed without rebooting, e.g. v… | |
CVE-2002-2263 | | 2002-12-31 | The installation program for HP-UX Visualize Conference B.11.00.11 running on HP-UX 11.00 and 11.11 installs /etc/dt and its subdirecties with insecure permiss… | |
CVE-2002-2247 | | 2002-12-31 | The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via php… | |
CVE-2002-2234 | | 2002-12-31 | NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests. | |
CVE-1999-0701 | | 2000-04-11 | After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password. | |
CVE-1999-0858 | | 1999-12-02 | Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server. | |
CVE-1999-0766 | | 1999-10-21 | The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment. | |
CVE-1999-0886 | | 1999-09-17 | The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager. | |
CVE-1999-0725 | | 1999-08-19 | When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double B… | |
CVE-1999-0875 | | 1999-08-11 | DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes. | |
CVE-1999-0656 | | 1999-01-01 | The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group n… |