Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-399

CWE-399: Resource Management Errors

Weaknesses in this category are related to improper management of system resources.

From the CWE List. © The MITRE Corporation.

Newest

Known exploitedIn KEVPublic exploitFix available

microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...CVE-2011-06657.2 HighApril 13, 2011
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...CVE-2011-06627.2 HighApril 13, 2011
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to...CVE-2011-0094EPSS 21.9%9.3 HighApril 13, 2011
mono, novell moonlight +1 moreUse-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is...CVE-2011-09925.8 MediumApril 13, 2011
mark pilgrim feedparserfeedparser denial of service vulnerabilityCVE-2011-1156Fix available5.0 MediumApril 11, 2011
linux util-linuxmount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first...CVE-2011-1675Fix available3.3 LowApril 10, 2011
gnu eglibc, glibc +1 moreThe GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context...CVE-2011-1071Public exploitFix availableEPSS 14.3%5.1 MediumApril 8, 2011
foolabs xpdf, t1lib, glyphandcog xpdfreader +2 moreUse-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX,...CVE-2011-1553Fix available4.3 MediumMarch 31, 2011
digium asteriskmanager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24, 1.6.2.x before 1.6.2.17.2, and 1.8.x...CVE-2011-1174Fix available5.0 MediumMarch 31, 2011
gentoo logrotateThe writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context...CVE-2011-1155Fix available1.9 LowMarch 30, 2011
honeywell scanserver activex controlUse-after-free vulnerability in the addOSPLext method in the Honeywell ScanServer ActiveX control...CVE-2011-03319.3 HighMarch 22, 2011
ibm lotus quickrIBM Lotus Quickr 8.1 before 8.1.0.15 services for Lotus Domino on AIX allows remote authenticated...CVE-2009-50623.5 LowMarch 22, 2011
ibm lotus quickrIBM Lotus Quickr 8.1 before 8100.003 services for Lotus Domino allows remote authenticated users...CVE-2008-72843.5 LowMarch 22, 2011
quaggabgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset...CVE-2010-16755.0 MediumMarch 21, 2011
phpMultiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers...CVE-2011-1468Public exploitEPSS 13.3%4.3 MediumMarch 20, 2011
openldapmodrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of...CVE-2011-1081Public exploitFix availableEPSS 14.5%5.0 MediumMarch 20, 2011
mit kerberos 5Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution...CVE-2011-0284Fix available7.6 HighMarch 20, 2011
phpUse-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows...CVE-2011-11487.5 HighMarch 18, 2011
zaal tgtDouble free vulnerability in the iscsi_rx_handler function (usr/iscsi/iscsid.c) in the tgt daemon...CVE-2011-0001Fix available5.0 MediumMarch 15, 2011
apple safari, iphone os +1 moreUse-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2...CVE-2011-13446.8 MediumMarch 10, 2011
ibm websphere application serverThe SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM...CVE-2011-13225.0 MediumMarch 8, 2011
ibm websphere application serverThe Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x...CVE-2011-13194.0 MediumMarch 8, 2011
ibm websphere application serverMemory leak in org.apache.jasper.runtime.JspWriterImpl.response in the JavaServer Pages (JSP)...CVE-2011-13185.0 MediumMarch 8, 2011
ibm websphere application serverMemory leak in com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl in the JavaServer Pages (JSP) component...CVE-2011-13175.0 MediumMarch 8, 2011
ibm websphere application serverThe Session Initiation Protocol (SIP) Proxy in the HTTP Transport component in IBM WebSphere...CVE-2011-13165.0 MediumMarch 8, 2011
ibm websphere application serverMemory leak in the messaging engine in IBM WebSphere Application Server (WAS) before 7.0.0.15...CVE-2011-13155.0 MediumMarch 8, 2011
ibm websphere application serverThe Service Integration Bus (SIB) messaging engine in IBM WebSphere Application Server (WAS)...CVE-2011-13145.0 MediumMarch 8, 2011
ibm websphere application serverDouble free vulnerability in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7...CVE-2011-13135.0 MediumMarch 8, 2011
apple itunes, safari, webkit +2 moreUse-after-free vulnerability in the Runin box functionality in the Cascading Style Sheets (CSS) 2...CVE-2011-01327.6 HighMarch 3, 2011
apple itunes, webkit +1 moreUse-after-free vulnerability in the setOuterText method in the htmlelement library in WebKit, as...CVE-2011-01167.6 HighMarch 3, 2011
wiresharkepan/dissectors/packet-ldap.c in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3...CVE-2011-1141Fix available4.3 MediumMarch 3, 2011
wiresharkMultiple stack consumption vulnerabilities in the dissect_ms_compressed_string and...CVE-2011-1140Fix availableEPSS 13.1%4.3 MediumMarch 3, 2011
wiresharkwiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote...CVE-2011-1139Fix available4.3 MediumMarch 3, 2011
mozilla firefox, seamonkey +1 moreUse-after-free vulnerability in the Web Workers implementation in Mozilla Firefox before 3.5.17...CVE-2011-005710.0 HighMarch 2, 2011
mozilla firefox, seamonkey +1 moreUse-after-free vulnerability in the JSON.stringify method in js3250.dll in Mozilla Firefox before...CVE-2011-005510.0 HighMarch 2, 2011
gnu glibcThe glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated...CVE-2010-47564.0 MediumMarch 2, 2011
freebsd, netbsd, openbsd +1 more +3 moreThe (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH...CVE-2010-47554.0 MediumMarch 2, 2011
apple mac os x, freebsd, netbsd +1 more +3 moreThe glob implementation in libc in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, and OpenBSD 4.7, and...CVE-2010-47544.0 MediumMarch 2, 2011
cisco adaptive security appliance, adaptive security appliance software, asa 5500 +14 more +16 moreCisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20),...CVE-2011-03957.8 HighFebruary 25, 2011
cisco adaptive security appliance, firewall services module, 5500 series adaptive security appliance +4 more +6 moreCisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11),...CVE-2011-03947.8 HighFebruary 25, 2011
cisco 5500 series adaptive security appliance, adaptive security appliance software, asa 5500 +1 more +3 moreCisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.12),...CVE-2011-03937.8 HighFebruary 25, 2011
cisco telepresence recording server, telepresence recording server software +1 moreCisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a...CVE-2011-03917.8 HighFebruary 25, 2011
cisco telepresence multipoint switch, telepresence multipoint switch software +1 moreThe XML-RPC implementation on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1...CVE-2011-03907.8 HighFebruary 25, 2011
cisco telepresence multipoint switch, telepresence multipoint switch software +1 moreCisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x...CVE-2011-03897.8 HighFebruary 25, 2011
cisco telepresence multipoint switch, telepresence recording server, telepresence multipoint switch software +1 more +3 moreCisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint...CVE-2011-03887.8 HighFebruary 25, 2011
cisco telepresence system 1000, telepresence system 1100, telepresence system 1300 series +4 more +6 moreCisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to...CVE-2011-03777.8 HighFebruary 25, 2011
clamavDouble free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav...CVE-2011-1003Fix available6.8 MediumFebruary 23, 2011
isc bindISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote...CVE-2011-0414Fix availableEPSS 13.7%7.1 HighFebruary 23, 2011
fedoraproject 389 directory server, redhat directory server +1 moreThe setup scripts in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x), when...CVE-2011-00224.7 MediumFebruary 23, 2011
fedoraproject 389 directory serverMultiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5...CVE-2010-47465.0 MediumFebruary 23, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open