Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-399

CWE-399: Resource Management Errors

Weaknesses in this category are related to improper management of system resources.

From the CWE List. © The MITRE Corporation.

Newest

Known exploitedIn KEVPublic exploitFix available

wiresharkWireshark 1.0.4 and earlier allows remote attackers to cause a denial of service via a long SMTP...CVE-2008-5285Fix available5.0 MediumDecember 1, 2008
zilab zim serverThe Local ZIM Server in Zilab Chat and Instant Messaging (ZIM) Server 2.0 and 2.1 allows remote...CVE-2008-5280Public exploit5.0 MediumNovember 29, 2008
apple iphone os, safari +1 moreSafari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not...CVE-2008-42319.3 HighNovember 25, 2008
apple iphone osImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow...CVE-2008-15867.1 HighNovember 25, 2008
geshiThe highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to...CVE-2008-5185Public exploitFix available5.0 MediumNovember 21, 2008
microsoft office communicatorMicrosoft Communicator allows remote attackers to cause a denial of service (application or...CVE-2008-5181EPSS 12.7%5.0 MediumNovember 20, 2008
zopePythonScripts in Zope 2 2.11.2 and earlier, as used in Conga and other products, allows remote...CVE-2008-5102Public exploit4.0 MediumNovember 17, 2008
xmlsoft libxmlInteger overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent...CVE-2008-4226Fix available10.0 HighNovember 17, 2008
mozilla firefox, seamonkey, thunderbird +2 moreThe AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18...CVE-2008-505210.0 HighNovember 13, 2008
mozilla firefox, seamonkey, thunderbird +2 more +4 moreThe JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18,...CVE-2008-501810.0 HighNovember 13, 2008
mozilla firefox, seamonkey, thunderbird +2 moreThe layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x before 2.0.0.18, and...CVE-2008-50165.0 MediumNovember 13, 2008
mozilla firefox, seamonkey +1 moreMozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not properly check when...CVE-2008-50139.3 HighNovember 13, 2008
ibm hardware management consoleThe Resource Monitoring and Control (RMC) daemon in IBM Hardware Management Console (HMC) 7...CVE-2008-50355.0 MediumNovember 10, 2008
linux kernelThe chip_command function in drivers/media/video/tvaudio.c in the Linux kernel 2.6.25.x before 2...CVE-2008-50337.8 HighNovember 10, 2008
adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute...CVE-2008-4813EPSS 17.3%9.3 HighNovember 5, 2008
university of washington imap toolkitsmtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP...CVE-2008-5006Fix available5.0 MediumNovember 5, 2008
ffmpegFFmpeg 0.4.9, as used by MPlayer, allows context-dependent attackers to cause a denial of service...CVE-2008-486910.0 HighOctober 31, 2008
microsoft debug diagnostic toolThe DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic...CVE-2008-4800Public exploitEPSS 25.8%5.0 MediumOctober 30, 2008
cisco pix security appliance, adaptive security appliance 5500 series +1 moreMemory leak in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 8...CVE-2008-38177.8 HighOctober 23, 2008
wiresharkUse-after-free vulnerability in the dissect_q931_cause_ie function in packet-q931.c in the Q.931...CVE-2008-4685Fix available5.0 MediumOctober 22, 2008
wiresharkpacket-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post...CVE-2008-4684Fix available4.3 MediumOctober 22, 2008
wiresharkThe dissect_btacl function in packet-bthci_acl.c in the Bluetooth ACL dissector in Wireshark 0.99...CVE-2008-4683Fix available5.0 MediumOctober 22, 2008
wiresharkUnspecified vulnerability in the Bluetooth RFCOMM dissector in Wireshark 0.99.7 through 1.0.3...CVE-2008-4681Fix available4.3 MediumOctober 22, 2008
wiresharkpacket-usb.c in the USB dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to...CVE-2008-4680Fix available4.3 MediumOctober 22, 2008
ibm websphere application serverThe HTTP_Request_Parser method in the HTTP Transport component in IBM WebSphere Application...CVE-2008-46787.8 HighOctober 22, 2008
mplayerMPlayer allows remote attackers to cause a denial of service (application crash) via (1) a...CVE-2008-4610Public exploitFix available5.0 MediumOctober 20, 2008
linux kernelThe i915 driver in (1) drivers/char/drm/i915_dma.c in the Linux kernel 2.6.24 on Debian GNU/Linux...CVE-2008-38314.7 MediumOctober 16, 2008
microsoft windows 2000Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and...CVE-2008-4023EPSS 39.2%10.0 HighOctober 15, 2008
microsoft internet explorerMicrosoft Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 does not properly validate data in the...CVE-2008-3477EPSS 35.7%9.3 HighOctober 15, 2008
microsoft internet explorerMicrosoft Internet Explorer 5.01 SP4 and 6 does not properly handle errors associated with access...CVE-2008-3476EPSS 31.1%9.3 HighOctober 15, 2008
microsoft windows 2000, windows server 2003, windows server 2008 +1 more +3 moreDouble free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server...CVE-2008-22517.2 HighOctober 15, 2008
videolan vlc media playerArray index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory...CVE-2008-4558Public exploitFix available6.8 MediumOctober 14, 2008
strongswanstrongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service (daemon crash)...CVE-2008-4551Fix available5.0 MediumOctober 14, 2008
adobe flash playerAdobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610,...CVE-2008-4546Public exploitEPSS 65.9%4.3 MediumOctober 14, 2008
cisco unityCisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using...CVE-2008-45437.1 HighOctober 13, 2008
apple cupsThe Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers...CVE-2008-3641Public exploitFix availableEPSS 24.1%10.0 HighOctober 10, 2008
microsoft windows vistaMicrosoft Windows Vista Home and Ultimate Edition SP1 and earlier allows local users to cause a...CVE-2008-4510Public exploit4.9 MediumOctober 9, 2008
xmlsoft libxml2libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities,...CVE-2008-4409Public exploit5.0 MediumOctober 3, 2008
redhat fedoraA certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on Fedora...CVE-2008-3832Public exploit4.9 MediumOctober 3, 2008
trend micro officescanThe CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1...CVE-2008-44035.0 MediumOctober 3, 2008
kde konquerorKonqueror in KDE 3.5.9 allows remote attackers to cause a denial of service (application crash)...CVE-2008-43825.0 MediumOctober 2, 2008
microsoft internet explorerMicrosoft Internet Explorer 7 allows remote attackers to cause a denial of service (application...CVE-2008-4381EPSS 18.4%5.0 MediumOctober 2, 2008
deslockThe Virtual Token driver (vdlptokn.sys) 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a...CVE-2008-4362Public exploit4.9 MediumSeptember 30, 2008
mozilla firefoxThe user interface event dispatcher in Mozilla Firefox 3.0.3 on Windows XP SP2 allows remote...CVE-2008-4324Public exploit5.0 MediumSeptember 29, 2008
lighttpdMemory leak in the http_request_parse function in request.c in lighttpd before 1.4.20 allows...CVE-2008-4298Fix available5.0 MediumSeptember 27, 2008
denora irc stats irc statsUnspecified vulnerability in Denora IRC Stats Server before 1.4.1 allows remote IRC servers to...CVE-2008-42465.0 MediumSeptember 25, 2008
mozilla firefoxMultiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers...CVE-2008-406410.0 HighSeptember 24, 2008
mozilla firefox, seamonkey, thunderbird +2 more +4 moreMultiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2,...CVE-2008-406210.0 HighSeptember 24, 2008
pdnsdThe p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows remote attackers to...CVE-2008-4194Public exploit5.0 MediumSeptember 24, 2008
sun opensolaris, solaris +1 moreUnspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows...CVE-2008-41604.7 MediumSeptember 22, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open