CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- nortel sip multimedia pc clientNortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200 does not limit the number of concurrent...5.0 Medium
- graphicsmagickMultiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to...5.0 Medium
- microsoft office wordMicrosoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file...9.3 High
- redhat vsftpdMemory leak in a certain Red Hat deployment of vsftpd before 2.0.5 on Red Hat Enterprise Linux ...7.1 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe block reflow implementation in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and...10.0 High
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and...10.0 High
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and...10.0 High
- typo3 sql frontend extensionUnspecified vulnerability in the SQL Frontend (mh_omsqlio) extension 1.0.11 and earlier for TYPO3...7.5 High
- typo3 pdf generator 2 extensionUnspecified vulnerability in the PDF Generator 2 (pdf_generator2) extension 0.5.0 and earlier for...5.0 Medium
- openldapliblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service ...5.0 Medium
- pidgin** DISPUTED ** Memory leak in Pidgin 2.0.0, and possibly other versions, allows remote attackers...5.0 Medium
- sun solaris, sunos +1 moreThe SNMP-DMI mapper subagent daemon (aka snmpXdmid) in Solstice Enterprise Agents in Sun Solaris...7.8 High
- ibm tivoli directory serverDouble free vulnerability in IBM Tivoli Directory Server (TDS) 6.1.0.0 through 6.1.0.15 allows...6.0 Medium
- ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreThe rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6...7.8 High
- apple safariUnspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X...9.3 High
- microsoft wordMicrosoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists,...7.1 High
- clam anti-virus clamavlibclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service...5.0 Medium
- sun solarisUnspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users...4.9 Medium
- apple quicktimeUnspecified vulnerability in Apple QuickTime before 7.5 allows remote attackers to cause a denial...6.8 Medium
- altn mdaemonThe WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a...5.0 Medium
- sun service tagUnspecified vulnerability in the Service Tag Registry on Sun Solaris 10, and Sun Service Tag...4.9 Medium
- asterisk asterisk-addonsThe ooh323 channel driver in Asterisk Addons 1.2.x before 1.2.9 and Asterisk-Addons 1.4.x before...5.0 Medium
- cisco pix security appliance, adaptive security appliance software +1 moreCisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(3)2 and...7.8 High
- apple mac os xMail in Apple Mac OS X before 10.5, when an IPv6 SMTP server is used, does not properly...6.8 Medium
- apple mac os x, mac os x server +1 moreUnspecified vulnerability in the Apple Type Services (ATS) server in Apple Mac OS X 10.5 before...9.3 High
- emule x rayUnspecified vulnerability in the web server in eMule X-Ray before 1.4 allows remote attackers to...7.5 High
- mozilla firefoxMozilla Firefox 2.0.0.14 allows remote attackers to cause a denial of service (heap corruption...4.3 Medium
- foresight linux appliances, redhat enterprise linux, fedora +1 more +3 moreMemory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL...7.1 High
- opensslMemory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9...5.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreMemory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5...7.8 High
- cisco unified communications managerMemory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications...7.8 High
- cisco unified communications managerMemory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications...7.8 High
- cisco content switching module, content switching module ssl +1 moreMemory leak in Cisco Content Switching Module (CSM) 4.2(3) up to 4.2(8) and Cisco Content...7.8 High
- microsoft malware protection engine, antigen for exchange, antigen for smtp gateway +6 more +8 moreUnspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0...5.0 Medium
- microsoft malware protection engine, antigen for exchange, antigen for smtp gateway +6 more +8 moreUnspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0...5.0 Medium
- microsoft office, office compatibility pack for word excel ppt 2007, word viewer +2 moreUse-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and...9.3 High
- redhat enterprise linux, enterprise linux desktop +1 moreLinux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows...4.9 Medium
- linux kernelThe Xen hypervisor block backend driver for Linux kernel 2.6.18, when running on a 64-bit host...4.9 Medium
- redhat enterprise linux, enterprise linux desktop +1 moreLinux kernel before 2.4.21 allows local users to cause a denial of service (kernel panic) via...4.9 Medium
- yahoo assistantThe ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers...9.3 High
- linksys spa-2102 phone adapterLinksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service (crash)...7.8 High
- sun solarisUnspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote...7.8 High
- wonderware intouch, suitelink +1 moreThe SuiteLink Service (aka slssvc.exe) in WonderWare SuiteLink before 2.0 Patch 01, as used in...5.0 Medium
- linux kernelThe bdx_ioctl_priv function in the tehuti driver (tehuti.c) in Linux kernel 2.6.x before 2.6.25.1...7.2 High
- linux kernelLinux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set...2.1 Low
- mozilla firefoxMozilla Firefox 3.0 beta 5 allows remote attackers to cause a denial of service (application...5.0 Medium
- apple safariUnspecified vulnerability in Apple Safari 3.1.1 allows remote attackers to cause a denial of...4.3 Medium
- licqlicq before 1.3.6 allows remote attackers to cause a denial of service (file-descriptor...5.0 Medium
- broadcom secure content managerThe eTrust Common Services (Transport) Daemon (eCSqdmn) in CA Secure Content Manager 8.0.28000...7.8 High
- videolan vlcVLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted...6.8 Medium
- Show moreLoading…