Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-399

CWE-399: Resource Management Errors

Weaknesses in this category are related to improper management of system resources.

From the CWE List. © The MITRE Corporation.

Newest

Known exploitedIn KEVPublic exploitFix available

opera browserOpera 11.11 allows remote attackers to cause a denial of service (application crash) by setting...CVE-2011-2641Public exploit5.0 MediumJuly 1, 2011
opera browserOpera before 11.10 allows remote attackers to cause a denial of service (application crash) via...CVE-2011-26405.0 MediumJuly 1, 2011
opera browserOpera before 11.10 does not properly handle hidden animated GIF images, which allows remote...CVE-2011-26395.0 MediumJuly 1, 2011
opera browserThe Cascading Style Sheets (CSS) implementation in Opera before 11.10 allows remote attackers to...CVE-2011-26355.0 MediumJuly 1, 2011
opera browserOpera before 11.50 allows remote attackers to cause a denial of service (application crash) by...CVE-2011-26265.0 MediumJuly 1, 2011
opera browserOpera before 11.50 allows remote attackers to cause a denial of service (application crash) via a...CVE-2011-26255.0 MediumJuly 1, 2011
opera browserOpera before 11.50 allows user-assisted remote attackers to cause a denial of service ...CVE-2011-26244.3 MediumJuly 1, 2011
opera browserOpera before 11.50 allows remote attackers to cause a denial of service (application crash) via a...CVE-2011-26195.0 MediumJuly 1, 2011
opera browserOpera before 11.50 allows remote attackers to cause a denial of service (application crash) via...CVE-2011-26185.0 MediumJuly 1, 2011
opera browserThe SVG implementation in Opera before 11.50 allows remote attackers to cause a denial of service...CVE-2011-26145.0 MediumJuly 1, 2011
opera browserThe Array.prototype.join method in Opera before 11.50 allows remote attackers to cause a denial...CVE-2011-26135.0 MediumJuly 1, 2011
hp openview storage data protectorThe inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers...CVE-2011-15155.0 MediumJuly 1, 2011
opera browserOpera before 11.50 allows remote attackers to cause a denial of service (disk consumption) via...CVE-2011-13374.3 MediumJuly 1, 2011
mozilla firefox, seamonkey, thunderbird +2 moreUse-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird...CVE-2011-23737.6 HighJune 30, 2011
mozilla firefox, seamonkey, thunderbird +2 moreUse-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation...CVE-2011-236310.0 HighJune 30, 2011
mozilla firefox, seamonkey, thunderbird +2 moreUse-after-free vulnerability in the nsXULCommandDispatcher function in Mozilla Firefox before 3.6...CVE-2011-008510.0 HighJune 30, 2011
mozilla firefox, seamonkey, thunderbird +2 moreUse-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation...CVE-2011-008310.0 HighJune 30, 2011
intel g41 driverThe Intel G41 driver 6.14.10.5355 on Windows XP SP3 allows remote attackers to cause a denial of...CVE-2011-26047.1 HighJune 30, 2011
nvidia 9400m driverThe NVIDIA 9400M driver 6.2.6 on Mac OS X 10.6.7 allows remote attackers to cause a denial of...CVE-2011-26037.1 HighJune 30, 2011
nvidia geforce 310 driverThe NVIDIA Geforce 310 driver 6.14.12.7061 on Windows XP SP3 allows remote attackers to cause a...CVE-2011-26027.1 HighJune 30, 2011
apple mac os x serverservermgrd in Apple Mac OS X before 10.6.8 allows remote attackers to read arbitrary files, and...CVE-2011-02126.4 MediumJune 24, 2011
apple mac os x, mac os x server +1 moreAirPort in Apple Mac OS X 10.5.8 allows remote attackers to cause a denial of service (out-of...CVE-2011-01967.8 HighJune 24, 2011
linux kernelThe add_del_listener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does...CVE-2011-24844.9 MediumJune 24, 2011
brad fitzpatrick djabberdXMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files,...CVE-2011-22065.5 MediumJune 22, 2011
prosodyThe json.decode function in util/json.lua in Prosody 0.8.x before 0.8.1 might allow remote...CVE-2011-2532Fix available5.0 MediumJune 22, 2011
prosodyProsody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value...CVE-2011-2531Fix available4.3 MediumJune 22, 2011
prosodyProsody before 0.8.1 does not properly detect recursion during entity expansion, which allows...CVE-2011-2205Fix available5.0 MediumJune 22, 2011
matthewwild luaexpatLuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows...CVE-2011-2188Fix available5.0 MediumJune 21, 2011
brad fitzpatrick djabberdDJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which...CVE-2011-17575.0 MediumJune 21, 2011
microsoft windows server 2008Hyper-V in Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1 allows guest OS users to cause...CVE-2011-1872Public exploit4.7 MediumJune 16, 2011
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreThe Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3, Windows...CVE-2011-1869EPSS 10.3%7.8 HighJune 16, 2011
microsoft windows 7, windows server 2008, windows vista +2 moreThe SMB server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2...CVE-2011-1267EPSS 24.2%7.8 HighJune 16, 2011
wiresharkDouble free vulnerability in the tvb_uncompress function in epan/tvbuff.c in Wireshark 1.2.x...CVE-2011-2174Fix available4.3 MediumJune 6, 2011
wiresharkThe dissect_dcm_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark...CVE-2011-1957Fix available4.3 MediumJune 6, 2011
postrev post revolutioncommon.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of...CVE-2011-19525.0 MediumJune 6, 2011
fetchmailfetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS...CVE-2011-1947Fix available5.0 MediumJune 2, 2011
nlnetlabs unbounddaemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface...CVE-2011-1922Fix available4.3 MediumMay 31, 2011
cisco ios xrCisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor...CVE-2011-16517.8 HighMay 31, 2011
cisco content delivery system, content delivery system engine +1 moreThe Internet Streamer application in Cisco Content Delivery System (CDS) with software 2.5.7, 2.5...CVE-2011-16497.8 HighMay 31, 2011
redhat libvirtlibvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote...CVE-2011-1486Fix available3.3 LowMay 31, 2011
cisco ios xrCisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshd_lock...CVE-2011-09497.8 HighMay 31, 2011
cisco ios xrCisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service (NetIO...CVE-2011-09437.8 HighMay 31, 2011
citadelmodules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion during...CVE-2011-1756Fix available5.0 MediumMay 31, 2011
jabberd jabberd14jabberd14 1.6.1.1 and earlier does not properly detect recursion during entity expansion, which...CVE-2011-1754Fix available5.0 MediumMay 31, 2011
process-one ejabberd, exmpp +1 moreexpat_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does...CVE-2011-1753Fix available5.0 MediumMay 31, 2011
nlnetlabs unboundUnbound before 1.4.4 does not send responses for signed zones after mishandling an unspecified...CVE-2009-4008Fix available5.0 MediumMay 27, 2011
ibm websphere portalThe implementation of OutputMediator objects in IBM WebSphere Portal 6.0.1.7, and 7.0.0.1 before...CVE-2011-21734.0 MediumMay 26, 2011
pythonThe urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location...CVE-2011-1521Fix available6.4 MediumMay 24, 2011
pureftpd pure-ftpdThe STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict...CVE-2011-1575Public exploitFix availableEPSS 33.3%5.8 MediumMay 23, 2011
viewvcViewVC before 1.1.11 allows remote attackers to bypass the cvsdb row_limit configuration setting,...CVE-2009-50245.0 MediumMay 23, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open