CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- google chrome osUse-after-free vulnerability in flimflamd in flimflam in Google Chrome OS before 0.9.130.14 Beta...4.3 Medium
- vmware esx, esxi, cisco 1000v virtual ethernet module \(vem\) +2 moreCisco Nexus 1000V Virtual Ethernet Module (VEM) 4.0(4) SV1(1) through SV1(3b), as used in VMware...7.8 High
- openafsDouble free vulnerability in the Rx server process in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly...7.5 High
- opensslssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to...5.0 Medium
- microsoft excelUse-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office...9.3 High
- apache tomcatApache Tomcat does not enforce the maxHttpHeaderSize limit5.0 Medium
- novell groupwiseDouble free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in...10.0 High
- fedorahosted sssdThe pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD...2.1 Low
- linux-pamThe check_acl function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and...4.9 Medium
- phpUse-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might...6.8 Medium
- torTor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial...5.0 Medium
- torTor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory...2.1 Low
- mysqlMySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated...4.0 Medium
- mysqlMySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated...4.0 Medium
- mysqlMySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type...5.0 Medium
- gnu glibcStack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or...5.0 Medium
- wiresharkThe ASN.1 BER dissector in Wireshark 1.4.0 through 1.4.2 allows remote attackers to cause a...5.0 Medium
- mysqlOracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service ...4.0 Medium
- mysqlOracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service ...4.0 Medium
- mysqlOracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a...4.0 Medium
- microsoft internet explorerUse-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet...9.3 High
- apache subversionMultiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated...3.5 Low
- apache subversionThe walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed...6.8 Medium
- cisco iosCallManager Express (CME) on Cisco IOS before 15.0(1)XA allows remote authenticated users to...6.8 Medium
- cisco 5500 series adaptive security appliance, adaptive security appliance software, asa 5500 +2 moreMemory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before...7.8 High
- cisco 5500 series adaptive security appliance, adaptive security appliance software, asa 5500 +2 moreemWEB on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3)...5.0 Medium
- cisco 5500 series adaptive security appliance, adaptive security appliance software, asa 5500 +2 moreUnspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with...6.8 Medium
- cisco 5500 series adaptive security appliance, adaptive security appliance software, asa 5500 +2 moreUnspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with...7.8 High
- cisco 5500 series adaptive security appliance, adaptive security appliance software, asa 5500 +2 moreCisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(4) and earlier...7.8 High
- cisco 5500 series adaptive security appliance, adaptive security appliance software, asa 5500 +2 moreCisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier...7.8 High
- cisco pix security appliance, 5500 series adaptive security appliance, adaptive security appliance software +1 more +3 moreThe Neighbor Discovery (ND) protocol implementation in the IPv6 stack on Cisco Adaptive Security...7.8 High
- microsoft windows 7, windows server 2008, windows vista +2 more +4 moreThe Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP,...7.8 High
- cisco 5500 series adaptive security appliance, adaptive security appliance software, asa 5500 +2 moreCisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allow...5.0 Medium
- mhonarcMHonArc 2.6.16 allows remote attackers to cause a denial of service (CPU consumption) via start...5.0 Medium
- ibm tivoli access manager for e-businessWebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows...4.0 Medium
- d-bus project d-busStack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a...2.1 Low
- linux kernel, redhat enterprise linux +1 moreThe udp_queue_rcv_skb function in net/ipv4/udp.c in a certain Red Hat build of the Linux kernel 2...4.9 Medium
- ibm lotus mobile connectThe Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (HTTP...4.3 Medium
- ibm lotus mobile connectThe Connection Manager in IBM Lotus Mobile Connect before 6.1.4 does not properly maintain a...4.0 Medium
- ibm lotus mobile connectThe Mobile Network Connections functionality in the Connection Manager in IBM Lotus Mobile...4.3 Medium
- microsoft internet explorerUse-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style...9.3 High
- apple airport express, airport extreme, time capsule +2 more +4 moreThe ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort...6.1 Medium
- ibm lotus notes travelerMemory leak in IBM Lotus Notes Traveler before 8.5.1.1 allows remote attackers to cause a denial...5.0 Medium
- ibm lotus notes travelerIBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of...4.0 Medium
- ibm lotus notes travelerIBM Lotus Notes Traveler before 8.5.0.2 allows remote authenticated users to cause a denial of...4.0 Medium
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreDouble free vulnerability in the OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3,...6.9 Medium
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreDouble free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...7.2 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreDouble free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...7.2 High
- microsoft exchange serverMicrosoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause...4.0 Medium
- realnetworks realplayer, realplayer sp +1 moreUse-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0...9.3 High
- Show moreLoading…