CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- cisco ios, ios xe +1 moreMemory leak in the Data-link switching (aka DLSw) feature in Cisco IOS 12.1 through 12.4 and 15.0...7.8 High
- cisco iosCisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (device...7.8 High
- ffmpegcavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote attackers to...5.0 Medium
- icewarp mail serverserver/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote...6.4 Medium
- opensslThe ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0...5.0 Medium
- wiresharkThe csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in...4.3 Medium
- equis metastockUse-after-free vulnerability in Equis MetaStock 11 and earlier allows remote attackers to execute...10.0 High
- adobe acrobat, acrobat reader +1 moreUse-after-free vulnerability in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and...9.3 High
- adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow...9.3 High
- microsoft excelUse-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute...9.3 High
- hp palm pre webosThe LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape...5.4 Medium
- libpngMemory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows...5.0 Medium
- pidginThe msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in...4.3 Medium
- cisco unified communications managerThe SIP process in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x...7.1 High
- cisco unified communications managerThe Packet Capture Service in Cisco Unified Communications Manager (aka CUCM, formerly...7.8 High
- phpPHP before 5.3.7 does not properly implement the error_log function, which allows context...5.0 Medium
- phpThe (1) ZipArchive::addGlob and (2) ZipArchive::addPattern functions in ext/zip/php_zip.c in PHP...5.0 Medium
- wiresharkThe proto_tree_add_item function in Wireshark 1.6.0 through 1.6.1 and 1.4.0 through 1.4.8, when...2.6 Low
- zabbixzabbix_agentd in Zabbix before 1.8.6 and 1.9.x before 1.9.4 allows context-dependent attackers to...5.0 Medium
- citrix xentools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allows local users to cause a...2.1 Low
- realnetworks realplayer, realplayer sp +1 moreUse-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0...9.3 High
- realnetworks realplayer, realplayer sp +1 moreUse-after-free vulnerability in the AutoUpdate feature in RealNetworks RealPlayer 11.0 through 11...9.3 High
- realnetworks realplayer, realplayer sp +1 moreUse-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0...9.3 High
- cisco iosCisco IOS 12.2(58)SE, when a login banner is configured, allows remote attackers to cause a...7.8 High
- aveva clearscada, schneider-electric scx 67, scx 68 +2 moreUse-after-free vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3...10.0 High
- microsoft windows 7, windows server 2008, windows vista +2 moreThe kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7...4.7 Medium
- microsoft windows server 2003, windows xp, windows 2003 server +2 moreThe Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3 and Windows...7.1 High
- microsoft windows 7, windows server 2008 +1 moreTcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and...7.1 High
- microsoft windows 7, windows server 2008, windows vista +2 moreTcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2...7.8 High
- osgeo mapserverDouble free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0...6.8 Medium
- ibm lotus symphonyThe DataPilot feature in IBM Lotus Symphony 3 before FP3 allows user-assisted remote attackers to...4.3 Medium
- ibm lotus symphonyIBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application...4.3 Medium
- ibm lotus symphonyIBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of service ...4.3 Medium
- ibm lotus symphonyIBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application...4.3 Medium
- ibm lotus symphonyIBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application...4.3 Medium
- google chromeGoogle Chrome 14.0.794.0 does not properly handle a reload of a page generated in response to a...4.3 Medium
- novell file reporterNFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete...5.0 Medium
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...7.2 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...7.2 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...7.2 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...7.2 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...7.2 High
- microsoft windows 7, windows server 2008, windows vista +2 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows Vista...7.2 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...7.2 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...7.2 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...7.2 High
- cisco ios, content services gateway second generation +1 moreCisco IOS 12.4MDA before 12.4(24)MDA5 on the Cisco Content Services Gateway - Second Generation ...7.8 High
- oneidentity syslog-nglib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using...4.3 Medium
- ibm rational doors web accessThe Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote...4.0 Medium
- wiresharkThe Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.4.7, and 1.6.0...4.3 Medium
- Show moreLoading…