CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- perlDouble free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreThe JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and...9.3 High
- apple safariApple Safari before 3.1.1, when running on Windows XP or Vista, allows remote attackers to cause...6.8 Medium
- mcafee cmaFrameworkService.exe in McAfee Common Management Agent (CMA) 3.6.0.574 Patch 3 and earlier, as...5.0 Medium
- hp openview network node managerThe ovtopmd service in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other...4.3 Medium
- hp openview network node managerovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions...7.8 High
- hp openview network node managerovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions...5.0 Medium
- clam anti-virus clamavlibclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash)...5.0 Medium
- sun solarisSun Solaris 8, 9, and 10 allows "remote privileged" users to cause a denial of service (panic)...6.8 Medium
- novell edirectoryThe eDirectory Host Environment service (dhost.exe) in Novell eDirectory 8.8.2 allows remote...5.0 Medium
- microsoft windows-ntdhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a...5.0 Medium
- opera browserOpera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly...9.3 High
- operaOpera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly...9.3 High
- ignite realtime openfireIgnite Realtime Openfire allows remote authenticated users to cause a denial of service4.0 Medium
- ibm soliddbIBM solidDB 06.00.1018 and earlier does not validate a certain field that specifies an amount of...4.3 Medium
- ibm soliddbIBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of service (NULL...4.3 Medium
- microsoft visio, office +1 moreUnspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1...9.3 High
- microsoft projectMicrosoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote...9.3 High
- seattle lab software slmail proWebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers...10.0 High
- seattle lab software slmail proStack consumption vulnerability in WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0...5.0 Medium
- gnupgGnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and...9.3 High
- cisco iosThe data-link switching (DLSw) component in Cisco IOS 12.0 through 12.4 allows remote attackers...7.8 High
- cisco iosMemory leak in the virtual private dial-up network (VPDN) component in Cisco IOS before 12.3...7.1 High
- cisco iosThe virtual private dial-up network (VPDN) component in Cisco IOS before 12.3 allows remote...7.1 High
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0...6.8 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0...6.8 Medium
- linux kernelarch/s390/kernel/ptrace.c in Linux kernel 2.6.9, and other versions before 2.6.27-rc6, on s390...4.9 Medium
- panda internet security, antivirus and firewall +1 moreThe cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local...7.2 High
- mg-soft net inspectorMG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a (1)...7.1 High
- vmware ace, player, server +1 more +3 moreUnspecified vulnerability in the DHCP service in VMware Workstation 5.5.x before 5.5.6, VMware...7.8 High
- vmware ace, player, workstation +1 more +3 moreVirtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware...7.1 High
- gnu gccgcc 4.3.x does not generate a cld instruction while compiling functions used for string...7.5 High
- realnetworks realplayerThe RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer...9.3 High
- imagemagick graphicsmagick, imagemagick +1 moreHeap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in (1)...6.8 Medium
- deslockMemory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a...4.9 Medium
- wiresharkThe SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers...4.3 Medium
- symantec scan engine, antivirus clearswift, antivirus filtering domino mpe +7 more +9 moreSymantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan...7.1 High
- miro player, videolan vlc media player +1 moreThe MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and...9.3 High
- lighttpdlighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly calculate the size...5.0 Medium
- easy software products cupsUse-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote...5.0 Medium
- easy software products cupsMemory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause...5.0 Medium
- double-take software double-take, hp storageworks double-take +1 moreStack consumption vulnerability in Double-Take 5.0.0.2865 and earlier, distributed under the HP...5.0 Medium
- double-take software double-takeDouble-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name...5.0 Medium
- double-take software double-take, hp storageworks double-take +1 moreDouble-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name...5.0 Medium
- double-take software double-take, hp storageworks double-take +1 moreDouble-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name...5.0 Medium
- kerio mailserverUnspecified vulnerability in Kerio MailServer before 6.5.0 allows remote attackers to cause a...5.0 Medium
- openldapslapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote...4.0 Medium
- adobe connect enterprise server, flash media server 2 +1 moreUse-after-free vulnerability in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and...10.0 High
- microsoft officeUnspecified vulnerability in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP2, and...9.3 High
- ibm db2IBM DB2 Universal Database (UDB) Administration Server (DAS) 8 before Fix Pack 16 and 9 before...10.0 High
- Show moreLoading…