CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft office, word +1 moreWord in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows...9.3 High
- microsoft publisherUnspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote...10.0 High
- apple mobile safariMobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of...7.1 High
- clamavThe unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact...10.0 High
- apple mac os xUnspecified vulnerability in NFS in Apple Mac OS X 10.5 through 10.5.1 allows remote attackers to...10.0 High
- adobe acrobat readerThe DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8...4.3 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal...9.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and...9.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey...9.3 High
- linux kernelLinux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does...7.2 High
- hp openview network node managerovtopmd in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers...7.8 High
- openldapThe BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a...4.0 Medium
- linux kernelThe chrp_show_cpuinfo function (chrp/setup.c) in Linux kernel 2.4.21 through 2.6.18-53, when...7.8 High
- icu-project international components for unicodeHeap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International...9.3 High
- icu-project international components for unicodelibicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process...6.8 Medium
- cisco vpn clientCisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a...4.9 Medium
- apple quicktimeUnspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial...9.3 High
- apple quicktimeApple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file...5.8 Medium
- tibco enterprise message service, rtworks, smartsockets rtserver +2 moreTIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message...10.0 High
- apple safariUnspecified vulnerability in Foundation, as used in Apple iPhone 1.0 through 1.1.2, iPod touch 1...6.8 Medium
- apple quicktimeUnspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial...5.8 Medium
- ingate firewall, siparator +1 moreThe SIP module in Ingate Firewall before 4.6.1 and SIParator before 4.6.1 does not reuse SIP...5.0 Medium
- mambo open sourceUnspecified vulnerability in the search component and module in Mambo 4.5.x and 4.6.x allows...5.0 Medium
- debian linux, mandrakesoft mandrake linux, mandrake linux corporate server +1 more +3 moreThe xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause...5.0 Medium
- apache http server** DISPUTED ** Unspecified vulnerability in mod_proxy_balancer for Apache HTTP Server 2.2.x...7.8 High
- postgresql, canonical ubuntu linux, debian linux +1 more +3 moreThe regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1...4.0 Medium
- pragma systems telnetservertelnetd.exe in Pragma TelnetServer 7.0.4.589 allows remote attackers to cause a denial of service...5.0 Medium
- apache http serverThe balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6...4.0 Medium
- asterisk appliance developer kit, business edition, asterisknow +2 more +4 moreThe SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0...5.0 Medium
- opera browserAlgorithmic complexity vulnerability in Opera 9.50 beta and 9.x before 9.25 allows remote...7.8 High
- perforce p4webP4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers...7.8 High
- wiresharkUnspecified vulnerability in the CIP dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6...4.3 Medium
- wiresharkWireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service ...6.1 Medium
- apple mac os xUnspecified vulnerability in Spotlight in Apple Mac OS X 10.4.11 allows user-assisted attackers...6.8 Medium
- apple safariUnspecified vulnerability in Safari RSS in Apple Mac OS X 10.4.11 allows remote attackers to...9.3 High
- apple mac os xUnspecified vulnerability in ColorSync in Apple Mac OS X 10.4.11 allows remote attackers to cause...9.3 High
- aertherwide exiftagsexiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive...5.0 Medium
- linux kernelThe shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly...7.2 High
- microsoft internet explorer, ie +1 moreMicrosoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via ...6.8 Medium
- microsoft internet explorer, ie +1 moreMicrosoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via...6.8 Medium
- microsoft internet explorer, ie +1 moreUse-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet...9.3 High
- flac libflacMultiple double free vulnerabilities in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1...9.3 High
- mit kerberos 5Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5...6.9 Medium
- mit kerberos 5Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue...6.9 Medium
- redhat enterprise linuxMemory leak in the Red Hat Content Accelerator kernel patch in Red Hat Enterprise Linux (RHEL) 4...4.9 Medium
- symantec backupexec system recoveryThe Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build...5.0 Medium
- ibm directorCIM Server in IBM Director 5.20.1 and earlier allows remote attackers to cause a denial of...7.8 High
- sun javamail** DISPUTED ** Javamail does not properly handle a series of invalid login attempts in which the...5.0 Medium
- ibm db2 universal databaseIBM DB2 UDB 9.1 before Fixpak 4 does not properly handle use of large numbers of file descriptors...9.3 High
- ibm websphere mqMultiple unspecified vulnerabilities in IBM WebSphere MQ 6.0 have unknown impact and remote...10.0 High
- Show moreLoading…