CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- apple mac os x, mac os x server +1 moreThe server in DirectoryService in Apple Mac OS X 10.5.8 allows remote attackers to execute...7.5 High
- apple mac os x, mac os x server +1 moreAFP Client in Apple Mac OS X 10.5.8 allows remote AFP servers to execute arbitrary code or cause...9.3 High
- linux kernelThe nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2...7.8 High
- sun opensolaris, solaris +1 moreMemory leak in the Sockets Direct Protocol (SDP) driver in Sun Solaris 10, and OpenSolaris snv_57...7.8 High
- sun jdk, jre, sdk +2 moreUnspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6...5.0 Medium
- sun jdk, jre, sdk +2 moreUnspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6...5.0 Medium
- adobe shockwave playerAdobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a...9.3 High
- mozilla firefoxUse-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.4 allows remote attackers to...10.0 High
- foolabs xpdf, poppler, glyphandcog xpdfreader +2 moreThe Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x,...9.3 High
- adium, pidgin +1 moreThe OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows...5.0 Medium
- adobe acrobatAdobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allows attackers...9.3 High
- adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers...9.3 High
- adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers...9.3 High
- adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allow...9.3 High
- linux kernelThe swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2...7.8 High
- microsoft windows vista, windows server 2008 +1 moreMicrosoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate...7.8 High
- microsoft windows server 2003The kernel in Microsoft Windows Server 2003 SP2 does not properly handle unspecified exceptions...4.9 Medium
- ibm informix dynamic serverIBM Informix Dynamic Server (IDS) 10.00 before 10.00.xC11, 11.10 before 11.10.xC4, and 11.50...5.0 Medium
- linux kernelThe kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1,...7.2 High
- apple safariStack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other...5.0 Medium
- opera browserOpera 9.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via...5.0 Medium
- google chromeGoogle Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU...5.0 Medium
- google chromeGoogle Chrome 0.2.149.29 and earlier allows remote attackers to cause a denial of service ...5.0 Medium
- opera browserOpera 9.52 and earlier allows remote attackers to cause a denial of service (unusable browser) by...5.0 Medium
- mozilla firefoxMozilla Firefox 3.0.1 and earlier allows remote attackers to cause a denial of service (browser...5.0 Medium
- apple mac os x, mac os x server +1 moreCarbonCore in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or...6.8 Medium
- valvesoftware counter-strikeValve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service ...5.0 Medium
- apple iphone osThe Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival...7.8 High
- lantronix mss485-tLantronix MSS485-T allows remote attackers to cause a denial of service (unstable performance and...7.8 High
- symantec antivirus, client security, norton antivirus +1 more +3 moreUnspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet...4.3 Medium
- microsoft windows server 2008, windows vista +1 moreArray index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista...10.0 High
- sun opensolarisxscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 10, and OpenSolaris snv_109 through snv_122,...4.9 Medium
- linux kernelThe tty_ldisc_hangup function in drivers/char/tty_ldisc.c in the Linux kernel 2.6.31-rc before 2...4.9 Medium
- thekelleys dnsmasqThe tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows...4.3 Medium
- xysslXySSL before 0.9 allows remote attackers to cause a denial of service (infinite loop) via an X...5.0 Medium
- microfocus visibrokerosagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers...5.0 Medium
- sun opensolaris, solaris +1 moreThe sockfs module in the kernel in Sun Solaris 10 and OpenSolaris snv_41 through snv_122, when...7.1 High
- sun solarisin.lpd in the print service in Sun Solaris 8 and 9 allows remote attackers to cause a denial of...7.8 High
- unica affinium campaignCampaign/CampaignListener in the listener server in Unica Affinium Campaign 7.2.1.0.55 allows...5.0 Medium
- kaspersky anti-virus, internet security +1 moreavp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers...4.3 Medium
- google chromeThe tooltip manager (chrome/views/tooltip_manager.cc) in Google Chrome 0.2.149.29 Build 1798 and...4.3 Medium
- logmein ractrl.dllLogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows remote attackers to cause a...9.3 High
- mozilla firefoxMozilla Firefox 3.0.6 through 3.0.13, and 3.5.x, allows remote attackers to cause a denial of...5.0 Medium
- webdav neonneon before 0.28.6, when expat is used, does not properly detect recursion during entity...4.3 Medium
- ibm db2Memory leak in the Security component in IBM DB2 8.1 before FP18 on Unix platforms allows...5.0 Medium
- ca host-based intrusion prevention systemkmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System (HIPS) 8.1 allows remote...5.0 Medium
- digital extreme pariah, epic games unreal tournament, groove games warpath +3 more +5 moreThe Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man...4.0 Medium
- adium, pidgin +1 moreThe msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used...10.0 High
- linux kernelcfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31...7.8 High
- microsoft windows xp, windows 2003 server, windows server 2008 +1 more +3 moreDouble free vulnerability in the Workstation service in Microsoft Windows allows remote...9.0 High
- Show moreLoading…