CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- linux kernelThe nfs_lock function in fs/nfs/file.c in the Linux kernel 2.6.9 does not properly remove POSIX...4.7 Medium
- nlnetlabs unboundUnbound before 1.4.3 does not properly align structures on 64-bit platforms, which allows remote...5.0 Medium
- apple safariUse-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to...9.3 High
- apple safariUse-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to...9.3 High
- apple safariUse-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to...9.3 High
- apple safariUse-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to...9.3 High
- apple safariUse-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to...9.3 High
- apple safariUse-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to...9.3 High
- microsoft internet explorerUse-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft...9.3 High
- perforce serverThe Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a...5.0 Medium
- pidgingtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU...5.0 Medium
- mozilla firefox, seamonkey +1 moreThe Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and...10.0 High
- google chromeStack consumption vulnerability in the ChildProcessSecurityPolicy::CanRequestURL function in...5.0 Medium
- apple webkit, google chrome +1 moreThe image decoder in WebKit before r52833, as used in Google Chrome before 4.0.249.78, does not...9.3 High
- google chromeUse-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote...9.3 High
- debian linux, linux kernel, canonical ubuntu linux +2 moredrivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a...4.9 Medium
- microsoft windows vista, windows server 2008 +1 moreThe TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and...7.8 High
- tuxfamily chronychronyd in Chrony before 1.23.1, and possibly 1.24-pre1, generates a syslog message for each...5.0 Medium
- tuxfamily chronyThe client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount...5.0 Medium
- tuxfamily chronyThe read_from_cmd_socket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1,...5.0 Medium
- apple iphone osRecovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1...4.6 Medium
- lighttpdlighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a...5.0 Medium
- linux kernelUse-after-free vulnerability in the fasync_helper function in fs/fcntl.c in the Linux kernel...7.2 High
- novell netwareNovell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer...7.8 High
- adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows...10.0 High
- opensslMemory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and...5.0 Medium
- adium, pidgin +1 moreslp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium...5.0 Medium
- mozilla firefoxThe nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox...5.0 Medium
- mailsiteLDAP3A.exe in MailSite 8.0.4 allows remote attackers to cause a denial of service (heap memory...7.8 High
- mybbinc/functions_time.php in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier versions,...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.6,...9.3 High
- mozilla firefox, seamonkey +1 moreliboggplay in Mozilla Firefox 3.5.x before 3.5.6 and SeaMonkey before 2.0.1 might allow context...9.3 High
- linux kerneldrivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is...4.7 Medium
- adobe acrobat, acrobat and reader, acrobat reader +3 more +5 moreUse-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader...7.8 High
- linux kernelThe ext4_decode_error function in fs/ext4/super.c in the ext4 filesystem in the Linux kernel...7.1 High
- adobe air, flash player +1 moreAdobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute...9.3 High
- adobe air, flash player +1 moreAdobe Flash Player 10.x before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to...9.3 High
- microsoft windows 2000, windows 2003 server, windows xp +2 moreLSASS.exe in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4...6.8 Medium
- microsoft internet explorer, windows 2000, windows 7 +4 more +6 moreMicrosoft Internet Explorer 8 does not properly handle objects in memory, which allows remote...9.3 High
- microsoft internet explorer, ie, windows 2000 +5 more +7 moreMicrosoft Internet Explorer 8 does not properly handle objects in memory, which allows remote...9.3 High
- microsoft office project, project portfolio server, project server +2 moreMicrosoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle...9.3 High
- xfigStack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers...4.3 Medium
- linux kernelThe fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel before 2...4.9 Medium
- cowonamerica cowon media center-jetaudioJetAudio 7.5.3 COWON Media Center allows remote attackers to cause a denial of service (memory...4.3 Medium
- linux kernelThe do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks...4.9 Medium
- sun opensolarisMemory leak in Solaris TCP sockets in Sun OpenSolaris snv_106 through snv_126 allows local users...4.9 Medium
- microsoft windows 7, windows server 2008 +1 moreThe SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB...7.1 High
- webkitWebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to...5.0 Medium
- microsoft windows 2000, windows server 2008, windows xp +2 more +4 moreStack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000...7.8 High
- apple mac os x, mac os x server +1 moreScreen Sharing in Apple Mac OS X 10.5.8 allows remote VNC servers to execute arbitrary code or...6.8 Medium
- Show moreLoading…