# CWE-16.

Every Advisory and CVE whose sources give the weakness CWE-16, newest first.

## Records, newest first

- [HCL IEM was affected with X-Content-Type-Options Header Missing](https://agentprime.io/advisories/CVE-2026-56586.md)
  `CVE-2026-56586` · CVE record: HCLSoftware IntelliOps Event Management · CVSS 3.1 Low · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-16
- [This PowerVM Novalink update is being released to address](https://agentprime.io/advisories/CVE-2026-14971.md)
  `CVE-2026-14971` · CVE record: IBM PowerVM Novalink · CVSS 3.9 Low · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-16
- [An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts.](https://agentprime.io/advisories/CVE-2026-4433.md)
  `CVE-2026-4433` · CVE record: Tenable, Inc. Tenable Operation Technology · CVSS 1.9 Low · Not analysed yet · Published 24 Mar 2026 · Tags: CWE-16
- [CSRF Token not Properly Implemented](https://agentprime.io/advisories/CVE-2025-12221.md)
  `CVE-2025-12221` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 2.1 Low · Not analysed yet · Published 25 Oct 2025 · Tags: CWE-16
- [Cisco IOS and IOS XE Software SNMPv3 Configuration Restriction Vulnerability](https://agentprime.io/advisories/CVE-2025-20151.md)
  `CVE-2025-20151` · CVE record: Cisco Cisco IOS XE Catalyst SD-WAN · CVSS 4.3 Medium · Not analysed yet · Published 7 May 2025 · Tags: CWE-16
- [WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-46909.md)
  `CVE-2024-46909` · CVE record: Progress Software Corporation WhatsUp Gold · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.49 · Not analysed yet · Published 2 Dec 2024 · Tags: Path traversal, CWE-16
- [Configurations in Android Build](https://agentprime.io/advisories/CVE-2018-11922.md)
  `CVE-2018-11922` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 26 Nov 2024 · Tags: CWE-16
- [Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2024-47294.md)
  `CVE-2024-47294` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 27 Sept 2024 · Tags: CWE-16
- [Permission vulnerability in the ActivityManagerService (AMS) module Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2024-47291.md)
  `CVE-2024-47291` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.6 Medium · Not analysed yet · Published 27 Sept 2024 · Tags: CWE-16
- [Access permission verification vulnerability in the Settings module.](https://agentprime.io/advisories/CVE-2024-42031.md)
  `CVE-2024-42031` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Aug 2024 · Tags: CWE-16
- [Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2023-52719.md)
  `CVE-2023-52719` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.1 High · Not analysed yet · Published 11 May 2024 · Tags: CWE-16
- [Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability.](https://agentprime.io/advisories/CVE-2024-32991.md)
  `CVE-2024-32991` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 11 May 2024 · Tags: CWE-16
- [Configuration Issue in WLAN Host and Firmware](https://agentprime.io/advisories/CVE-2023-33105.md)
  `CVE-2023-33105` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 4 Mar 2024 · Tags: CWE-16
- [Configuration Issue in Core](https://agentprime.io/advisories/CVE-2023-33076.md)
  `CVE-2023-33076` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 5.9 Medium · Not analysed yet · Published 6 Feb 2024 · Tags: CWE-16
- [Dell Client BIOS contains a pre-boot direct memory access (DMA) vulnerability.](https://agentprime.io/advisories/CVE-2023-43088.md)
  `CVE-2023-43088` · CVE record: Dell CPG BIOS · CVSS 7.2 High · Not analysed yet · Published 22 Dec 2023 · Tags: CWE-16
- [Vulnerability of configuration defects in the media module of certain products..](https://agentprime.io/advisories/CVE-2023-39385.md)
  `CVE-2023-39385` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-16
- [Vulnerability of insecure signatures in the OsuLogin module.](https://agentprime.io/advisories/CVE-2023-39392.md)
  `CVE-2023-39392` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 13 Aug 2023 · Tags: CWE-16
- [Configuration weakness in modem](https://agentprime.io/advisories/CVE-2022-33233.md)
  `CVE-2022-33233` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 9 Feb 2023 · Tags: CWE-16
- [Zabbix Agent installer adds “allow all TCP any any” firewall rule](https://agentprime.io/advisories/CVE-2022-43516.md)
  `CVE-2022-43516` · CVE record: Zabbix Zabbix agent (MSI packages) and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Dec 2022 · Tags: CWE-16
- [Debugging port misconfiguration in Zoom Apps in the Zoom Client for Meetings for macOS](https://agentprime.io/advisories/CVE-2022-28762.md)
  `CVE-2022-28762` · CVE record: Zoom Video Communications Inc Zoom Client for Meetings for MacOS · CVSS 7.3 High · Not analysed yet · Published 14 Oct 2022 · Tags: CWE-16
- [Incorrect configuration of the cJSON library lead a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices.](https://agentprime.io/advisories/CVE-2022-36423.md)
  `CVE-2022-36423` · CVE record: OpenHarmony OpenHarmony · CVSS 7.4 High · Not analysed yet · Published 9 Sept 2022 · Tags: CWE-16
- [The software is vulnerable when using LDAP-based authentication in YCQL with Microsoft’s Active Directory](https://agentprime.io/advisories/CVE-2022-37397.md)
  `CVE-2022-37397` · CVE record: YugaByte, Inc. Yugabyte DB · CVSS 8.3 High · Not analysed yet · Published 12 Aug 2022 · Tags: Authentication bypass, CWE-16
- [Dell SupportAssist Client Consumer versions (3.10.4 and prior) and Dell SupportAssist Client Commercial versions (3.1.1 and prior) contain a cross-site scripting vulnerability.](https://agentprime.io/advisories/CVE-2022-29095.md)
  `CVE-2022-29095` · CVE record: Dell SupportAssist Consumer · CVSS 8.3 High · Not analysed yet · Published 10 Jun 2022 · Tags: CWE-16
- [Cargo prior to Rust 1.26.0 may download the wrong dependency](https://agentprime.io/advisories/GHSA-9f3p-wvj7-q82x.md)
  `GHSA-9f3p-wvj7-q82x`, `CVE-2019-16760`, `GHSA-phjm-8x66-qw4r` · crates.io `cargo`: affected `<0.27.0`, fixed in `0.27.0` · CVSS 4.6 Medium · Not analysed yet · Published 24 May 2022 · Tags: CWE-16, CWE-494
- [Junos OS Evolved: A remote attacker may cause a CPU Denial of Service by sending genuine traffic to a device on a specific IPv4 port.](https://agentprime.io/advisories/CVE-2022-22183.md)
  `CVE-2022-22183` · CVE record: Juniper Networks Junos OS Evolved and 1 more · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2022 · Tags: Information disclosure, Broken access control, CWE-16
- [UniFi Protect application: A Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application…](https://agentprime.io/advisories/CVE-2021-22957.md)
  `CVE-2021-22957` · CVE record: UniFi Protect application · No CVSS score · Not analysed yet · Published 24 Nov 2021 · Tags: CWE-16
- [HTTP TRACK & TRACE Methods Enabled](https://agentprime.io/advisories/CVE-2021-35233.md)
  `CVE-2021-35233` · CVE record: SolarWinds Kiwi Syslog Server · CVSS 5.3 Medium · Not analysed yet · Published 27 Oct 2021 · Tags: CWE-16
- [SRC Series: A remote attacker sending a specially crafted query may cause the web server to delete files](https://agentprime.io/advisories/CVE-2021-31381.md)
  `CVE-2021-31381` · CVE record: Juniper Networks SRC Series · CVSS 6.5 Medium · Not analysed yet · Published 19 Oct 2021 · Tags: Information disclosure, CWE-16
- [SRC Series: A remote attacker sending a specially crafted query may cause the web server to disclose sensitive information](https://agentprime.io/advisories/CVE-2021-31380.md)
  `CVE-2021-31380` · CVE record: Juniper Networks SRC Series · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2021 · Tags: Information disclosure, CWE-16
- [SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol (JDWP) interface security misconfiguration vulnerability which potentially leads to Remote Code Execution.](https://agentprime.io/advisories/CVE-2021-20032.md)
  `CVE-2021-20032` · CVE record: SonicWall SonicWall Analytics On-Prem · No CVSS score · Not analysed yet · Published 10 Aug 2021 · Tags: CWE-16
- [Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redirect a client to an attacker-controlled management…](https://agentprime.io/advisories/CVE-2021-21532.md)
  `CVE-2021-21532` · CVE record: Dell Wyse Proprietary OS (ThinOS) · CVSS 5.0 Medium · Not analysed yet · Published 2 Apr 2021 · Tags: CWE-16
- [Junos OS: Upon receipt of certain protocol packets with invalid payloads a self-propagating Denial of Service may occur.](https://agentprime.io/advisories/CVE-2021-0222.md)
  `CVE-2021-0222` · CVE record: Juniper Networks Junos OS · CVSS 7.4 High · Not analysed yet · Published 15 Jan 2021 · Tags: CWE-16
- [Lenovo PCManager: A privilege escalation vulnerability was reported in Lenovo PCManager prior to version…](https://agentprime.io/advisories/CVE-2020-8351.md)
  `CVE-2020-8351` · CVE record: Lenovo PCManager · CVSS 7.8 High · Not analysed yet · Published 30 Nov 2020 · Tags: CWE-16
- [Lenovo Desktop and Workstation systems: Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with…](https://agentprime.io/advisories/CVE-2020-8353.md)
  `CVE-2020-8353` · CVE record: Lenovo Desktop and Workstation systems · CVSS 6.7 Medium · Not analysed yet · Published 11 Nov 2020 · Tags: CWE-16
- [Cisco Small Business Switches Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2019-15993.md)
  `CVE-2019-15993` · CVE record: Cisco Cisco Small Business 250 Series Smart Switches Software · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.10 · Not analysed yet · Published 23 Sept 2020 · Tags: CWE-16
- [Philips Clinical Collaboration Platform Configuration](https://agentprime.io/advisories/CVE-2020-16247.md)
  `CVE-2020-16247` · CVE record: Philips Clinical Collaboration Platform · CVSS 6.8 Medium · Not analysed yet · Published 18 Sept 2020 · Tags: CWE-16
- [PAN-OS: Management web interface denial-of-service (DoS)](https://agentprime.io/advisories/CVE-2020-2041.md)
  `CVE-2020-2041` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2020 · Tags: CWE-16
- [Cisco Vision Dynamic Signage Director Directory Traversal Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2020-3484.md)
  `CVE-2020-3484` · CVE record: Cisco Cisco Vision Dynamic Signage Director · CVSS 5.3 Medium · Not analysed yet · Published 26 Aug 2020 · Tags: CWE-16
- [ABB eSOMS X-XSS-Protection not enabled](https://agentprime.io/advisories/CVE-2019-19002.md)
  `CVE-2019-19002` · CVE record: ABB eSOMS · CVSS 6.3 Medium · Not analysed yet · Published 2 Apr 2020 · Tags: Cross-site scripting (XSS), CWE-16
- [eSOMS X-FrameOption](https://agentprime.io/advisories/CVE-2019-19001.md)
  `CVE-2019-19001` · CVE record: ABB eSOMS · CVSS 6.5 Medium · Not analysed yet · Published 2 Apr 2020 · Tags: CWE-16
- [eSOMS Cachecontrol (Pragma) HTTP Header](https://agentprime.io/advisories/CVE-2019-19000.md)
  `CVE-2019-19000` · CVE record: ABB eSOMS · CVSS 6.5 Medium · Not analysed yet · Published 2 Apr 2020 · Tags: CWE-16, CWE-202
- [ABB eSOMS: SSL medium strength Cipher Suites](https://agentprime.io/advisories/CVE-2019-19097.md)
  `CVE-2019-19097` · CVE record: ABB eSOMS · CVSS 5.9 Medium · Not analysed yet · Published 2 Apr 2020 · Tags: Weak cryptography or TLS, CWE-16
- [ABB eSOMS: Viewstate without MAC Signature](https://agentprime.io/advisories/CVE-2019-19092.md)
  `CVE-2019-19092` · CVE record: ABB eSOMS · CVSS 3.5 Low · Not analysed yet · Published 2 Apr 2020 · Tags: CWE-16
- [ABB eSOMS: HTTP response information leakage](https://agentprime.io/advisories/CVE-2019-19091.md)
  `CVE-2019-19091` · CVE record: ABB eSOMS · CVSS 4.3 Medium · Not analysed yet · Published 2 Apr 2020 · Tags: CWE-16, CWE-202
- [ABB eSOMS: Secure Flag not set](https://agentprime.io/advisories/CVE-2019-19090.md)
  `CVE-2019-19090` · CVE record: ABB eSOMS · CVSS 3.5 Low · Not analysed yet · Published 2 Apr 2020 · Tags: CWE-16
- [eSOMS: X-Content-Type-Options Header Missing](https://agentprime.io/advisories/CVE-2019-19089.md)
  `CVE-2019-19089` · CVE record: ABB eSOMS · CVSS 6.1 Medium · Not analysed yet · Published 2 Apr 2020 · Tags: CWE-16
- [ABB eSOMS: HTTPOnly flag not set](https://agentprime.io/advisories/CVE-2019-19003.md)
  `CVE-2019-19003` · CVE record: ABB eSOMS · CVSS 5.3 Medium · Not analysed yet · Published 2 Apr 2020 · Tags: Cross-site scripting (XSS), CWE-16
- [Autocomplete in the form login screens](https://agentprime.io/advisories/CVE-2020-1769.md)
  `CVE-2020-1769` · CVE record: OTRS AG ((OTRS)) Community Edition and 1 more · CVSS 3.5 Low · Not analysed yet · Published 27 Mar 2020 · Tags: CWE-16
- [Settings for the Dell XPS 13 2-in-1 (7390) BIOS versions prior to 1.1.3 contain a configuration vulnerability.](https://agentprime.io/advisories/CVE-2019-18579.md)
  `CVE-2019-18579` · CVE record: Dell CPG BIOS · CVSS 7.6 High · Not analysed yet · Published 16 Dec 2019 · Tags: CWE-16
- [Cisco Webex Meetings Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2019-1868.md)
  `CVE-2019-1868` · CVE record: Cisco Cisco WebEx Meetings Server · CVSS 5.3 Medium · Not analysed yet · Published 5 Jun 2019 · Tags: CWE-16
- [Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials admin/admin and moderator/moderator for the web interface.](https://agentprime.io/advisories/CVE-2019-3939.md)
  `CVE-2019-3939` · CVE record: Crestron Crestron AirMedia · No CVSS score · Not analysed yet · Published 30 Apr 2019 · Tags: CWE-16
- [Cisco Aironet Series Access Points Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2019-1829.md)
  `CVE-2019-1829` · CVE record: Cisco Cisco Aironet Access Point Software · CVSS 6.7 Medium · Not analysed yet · Published 18 Apr 2019 · Tags: CWE-16
- [Cisco IOS XE Software Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2019-1742.md)
  `CVE-2019-1742` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2019 · Tags: CWE-16
- [Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1585.md)
  `CVE-2019-1585` · CVE record: Cisco Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode · CVSS 6.7 Medium · Not analysed yet · Published 6 Mar 2019 · Tags: CWE-16
- [Cisco Registered Envelope Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2018-15448.md)
  `CVE-2018-15448` · CVE record: Cisco Cisco Registered Envelope Service · CVSS 5.3 Medium · Not analysed yet · Published 8 Nov 2018 · Tags: CWE-16
- [Cisco Digital Network Architecture Center Unauthenticated Access Vulnerability](https://agentprime.io/advisories/CVE-2018-15386.md)
  `CVE-2018-15386` · CVE record: Cisco Cisco Digital Network Architecture Center (DNA Center) · No CVSS score · Not analysed yet · Published 5 Oct 2018 · Tags: CWE-16
- [A vulnerability in Cisco Meeting Server (CMS) could allow an unauthenticated, adjacent attacker to access services running on internal device interfaces of an affected system.](https://agentprime.io/advisories/CVE-2018-0263.md)
  `CVE-2018-0263` · CVE record: Cisco Meeting Server unknown · No CVSS score · Not analysed yet · Published 7 Jun 2018 · Tags: CWE-16
- [Cisco Meeting Server: A vulnerability in Cisco Meeting Server could allow an unauthenticated…](https://agentprime.io/advisories/CVE-2018-0262.md)
  `CVE-2018-0262` · CVE record: Cisco Meeting Server · No CVSS score · Not analysed yet · Published 2 May 2018 · Tags: CWE-16
- [Cisco Identity Services Engine: A vulnerability in the support tunnel feature of Cisco Identity Services Engine (ISE)…](https://agentprime.io/advisories/CVE-2018-0275.md)
  `CVE-2018-0275` · CVE record: Cisco Identity Services Engine · No CVSS score · Not analysed yet · Published 19 Apr 2018 · Tags: CWE-16
- [Cisco Spark Board: A vulnerability in the upgrade process of Cisco Spark Board could allow an authenticated…](https://agentprime.io/advisories/CVE-2017-12306.md)
  `CVE-2017-12306` · CVE record: Cisco Spark Board · No CVSS score · Not analysed yet · Published 16 Nov 2017 · Tags: CWE-16

Older: <https://agentprime.io/advisories/tag/cwe-16.md?cursor=WyIyMDE3LTExLTE2VDA3OjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxNy0xMjMwNiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-16>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-16/>. Everything for agents: <https://agentprime.io/llms.txt>.