CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft internet explorer, ie +1 moreMicrosoft Internet Explorer 6.0.2900.2180 and 8.0.7600.16385 allows remote attackers to cause a...4.3 Medium
- mozilla firefoxMozilla Firefox 3.0.19, 3.5.x, and 3.6.x allows remote attackers to cause a denial of service ...4.3 Medium
- phpUse-after-free vulnerability in the request shutdown functionality in PHP 5.2 before 5.2.13 and 5...5.0 Medium
- frederico caldeira knabben fckeditor.javaFCKeditor.Java 2.4 allows remote attackers to cause a denial of service (infinite loop) via a...5.0 Medium
- apple javaApple Java for Mac OS X 10.5 before Update 7 and Java for Mac OS X 10.6 before Update 2 do not...6.8 Medium
- linux kernelgfs2 in the Linux kernel 2.6.18, and possibly other versions, does not properly handle when the...4.9 Medium
- opera browserOpera 9.52 does not properly handle an IFRAME element with a mailto: URL in its SRC attribute,...5.0 Medium
- google chromeGoogle Chrome 1.0.154.48 executes a mail application in situations where an IFRAME element has a...5.0 Medium
- microsoft internet explorer, ie +1 moreMicrosoft Internet Explorer 6.0.2900.2180, 7, and 8.0.7600.16385 executes a mail application in...5.0 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox 3.6.x, 3.5.x, 3.0.19, and earlier, and SeaMonkey, executes a mail application in...5.0 Medium
- opera browserOpera 9.52 executes a mail application in situations where an IMG element has a SRC attribute...5.0 Medium
- mozilla firefoxMozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service ...5.0 Medium
- mozilla firefoxMozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service ...5.0 Medium
- dovecotUnspecified vulnerability in Dovecot 1.2.x before 1.2.11 allows remote attackers to cause a...5.0 Medium
- ibm websphere application serverUnspecified vulnerability in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1...5.0 Medium
- cisco pgw 2200 softswitchUnspecified vulnerability in the SIP implementation on the Cisco PGW 2200 Softswitch with...7.8 High
- apple safariUse-after-free vulnerability in Apple Safari 4.0.5 on Windows allows remote attackers to execute...7.6 High
- phpStack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context...5.0 Medium
- phpThe sysvshm extension for PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent...6.4 Medium
- apple safari, webkit +1 moreWebKit.dll in WebKit, as used in Safari.exe 4.531.9.1 in Apple Safari, allows remote attackers to...4.3 Medium
- opera browserOpera before 10.53 on Windows and Mac OS X does not properly handle a series of document...9.3 High
- openttdOpenTTD before 1.0.1 allows remote attackers to cause a denial of service (file-descriptor...4.0 Medium
- mit kerberos 5Double free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 ...4.0 Medium
- linux kernelThe proc_oom_score function in fs/proc/base.c in the Linux kernel before 2.6.34-rc4 uses...2.1 Low
- ibm advanced management moduleThe IBM BladeCenter with Advanced Management Module (AMM) firmware before bpet50g does not...5.0 Medium
- microsoft windows 7, windows server 2008 +1 moreThe SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1)...10.0 High
- microsoft windows server 2003, windows server 2008, windows 2003 server +2 more +4 moreThe SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server...10.0 High
- microsoft windows 2000, windows 7, windows server 2003 +4 more +6 moreThe SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2,...10.0 High
- microsoft windows 2000, windows 2003 server, windows server 2003 +2 more +4 moreThe kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does...7.2 High
- debian linux, linux kernel +1 moreThe ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux...7.8 High
- linux kernelThe processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32...4.7 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2...9.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0...9.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreUse-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0...9.3 High
- google chromeGoogle Chrome before 4.1.249.1036 allows remote attackers to cause a denial of service (memory...5.0 Medium
- google chromeThe sandbox infrastructure in Google Chrome before 4.1.249.1036 does not properly use pointers,...10.0 High
- ibm websphere application serverIBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7...4.0 Medium
- microsoft internet explorer, windows 2000, windows 2003 server +2 more +4 moreUse-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 allows remote...9.3 High
- apple itunesApple iTunes before 9.1 allows remote attackers to cause a denial of service (infinite loop) via...4.3 Medium
- linux kernelUse-after-free vulnerability in net/ipv4/tcp_input.c in the Linux kernel 2.6 before 2.6.20, when...7.1 High
- apple mac os x serverUse-after-free vulnerability in iChat Server in Apple Mac OS X Server 10.5.8 allows remote...6.5 Medium
- apple iphone os, mac os x, safari +1 more +3 moreUse-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6...10.0 High
- cisco iosMemory leak in the H.323 implementation in Cisco IOS 12.1 through 12.4, and 15.0M before 15.0(1...7.8 High
- cisco iosCisco IOS 12.2 through 12.4, when certain PMTUD, SNAT, or window-size configurations are used,...7.1 High
- mozilla firefoxUse-after-free vulnerability in the imgContainer::InternalAddFrameHelper function in src...9.3 High
- microsoft windows vista, windows xp +1 moreThe ANI parser in Microsoft Windows before 7 on the x86 platform, as used in Internet Explorer...7.1 High
- mozilla seamonkey, thunderbird +1 moreThe nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird before 2...4.3 Medium
- apple safari, google chrome +1 moreStack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple...5.0 Medium
- linux kernelThe sctp_rcv_ootb function in the SCTP implementation in the Linux kernel before 2.6.23 allows...7.8 High
- debian linux, linux kernel, redhat enterprise linux +2 moreThe gfs2_lock function in the Linux kernel before 2.6.34-rc1-next-20100312, and the gfs_lock...4.9 Medium
- Show moreLoading…