CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- sun jdk, jre, sdk +2 moreThe BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6...4.3 Medium
- amavis, rahul dhesi zoo, unzoo +9 more +11 moreunzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers...7.8 High
- microsoft officeUnspecified vulnerability in MSO.dll in Microsoft Office 2000 SP3, 2002 SP3, 2003 SP2, 2004 for...9.3 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server...9.3 High
- linux kernelThe nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel before 2.6.20.8 allows...4.9 Medium
- pi3web web serverPi3Web Web Server 2.0.3 PL1 allows remote attackers to cause a denial of service (application...5.0 Medium
- 3com tippingpoint ips** DISPUTED ** 3Com TippingPoint IPS allows remote attackers to cause a denial of service ...7.8 High
- sendmailUnspecified vulnerability in HP-UX B.11.00 and B.11.11, when running sendmail 8.9.3 or 8.11.1;...7.8 High
- clam anti-virus clamavFile descriptor leak in the PDF handler in Clam AntiVirus (ClamAV) allows remote attackers to...7.8 High
- oracle application serverThe Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0...7.8 High
- cisco wireless lan controller softwareThe Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.171.5, 4...6.1 Medium
- cisco wireless lan controller softwareCisco Wireless LAN Controller (WLC) before 3.2.116.21, and 4.0.x before 4.0.155.0, allows remote...2.9 Low
- microsoft windows vistaUse-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows...7.2 High
- microsoft windows 2000, windows 2003 server, windows xp +2 moreUnspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1...7.1 High
- microsoft windows xp, windows vista +1 moreMicrosoft Windows XP and Vista overwrites ARP table entries included in gratuitous ARP, which...5.0 Medium
- linux kernelThe do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and...4.4 Medium
- kde konquerorecma/kjs_html.cpp in KDE JavaScript (KJS), as used in Konqueror in KDE 3.5.5, allows remote...4.3 Medium
- microsoft officeMicrosoft Office 2003 allows user-assisted remote attackers to cause a denial of service ...4.3 Medium
- ftpx ftp explorerFTP Explorer 1.0.1 Build 047, and other versions before 1.0.1.52, allows remote servers to cause...7.1 High
- linux kernelThe Linux kernel 2.6.13 and other versions before 2.6.20.1 allows remote attackers to cause a...7.8 High
- apple ichatThe Bonjour functionality in iChat in Apple Mac OS X 10.3.9 allows remote attackers to cause a...2.1 Low
- apache spamassassinApache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long...4.3 Medium
- microsoft visual c\+\+The 64-bit versions of Microsoft Visual C++ 8.0 standard library (MSVCR80.DLL) time functions,...5.0 Medium
- apple mac os x, webkit, omnigroup omniweb +1 more +3 moreWebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null...4.3 Medium
- apple mac os x, freebsd +1 moreThe ufs_lookup function in the Mac OS X 10.4.8 and FreeBSD 6.1 kernels allows local users to...6.6 Medium
- squidsquid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of...5.0 Medium
- apple mac os xFinder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of...6.8 Medium
- adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 7.0.8 and earlier allows user-assisted remote attackers to execute code...9.3 High
- microsoft outlook, office +1 moreMicrosoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of...4.3 Medium
- microsoft windows 2000, windows xp +1 moreThe Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause...7.8 High
- chetcpasswdPedro Lineu Orso chetcpasswd 2.3.3 does not have a rate limit for client requests, which might...7.5 High
- linux kernelThe mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user...4.6 Medium
- microsoft windows xp, windows media player +1 moreWindows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote...4.3 Medium
- linux kernelThe do_coredump function in fs/exec.c in the Linux kernel 2.6.19 sets the flag variable to O_EXCL...7.5 High
- yukihiro matsumoto rubyThe read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries...5.0 Medium
- kde kdegraphicsStack consumption vulnerability in the KFILE JPEG (kfile_jpeg) plugin in kdegraphics 3, as used...5.0 Medium
- microsoft windows 2000, windows xp +1 moreThe RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows...6.1 Medium
- panda activescanPanda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to (1)...6.4 Medium
- jgaa warftpdWar FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenticated users to cause a denial of...4.0 Medium
- linux kernelRace condition in the __find_get_block_slow function in the ISO9660 filesystem in Linux 2.6.18...1.2 Low
- dxmsoft xm easy personal ftp serverXM Easy Personal FTP Server 5.2.1 and earlier allows remote authenticated users to cause a denial...4.0 Medium
- vilistextumMemory leak in the push_align function in src/util.c in Vilistextum before 2.6.9 allows remote...5.0 Medium
- sophos anti-virus, endpoint security +1 moreSophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and...5.0 Medium
- novell imanagerNovell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service (crash) in the...7.8 High
- linux kernelThe seqfile handling (ip6fl_get_n function in ip6_flowlabel.c) in Linux kernel 2.6 up to 2.6.18...2.1 Low
- yukihiro matsumoto rubyThe cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service ...5.0 Medium
- datawizard ftpxqFtpXQ Server 3.0.1 allows remote attackers to cause a denial of service (CPU exhaustion) via a...5.0 Medium
- justsystem ichitaroUnspecified vulnerability in Justsystem Ichitaro 2006, 2006 trial version, and Government 2006...5.1 Medium
- opensslOpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause...7.8 High
- opensslOpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of...7.8 High
- Show moreLoading…