CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- No product listedMySQL 5.5.8, when running on Windows, allows remote attackers to cause a denial of service (NULL...4.3 Medium
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreThe CaseInsensitiveHashProvider.getHashCode function in the HashTable implementation in the ASP...7.8 High
- goahead webserverGoAhead WebServer allows remote attackers to cause a denial of service (daemon outage) via...5.0 Medium
- dhttpddhttpd allows remote attackers to cause a denial of service (daemon outage) via partial HTTP...5.0 Medium
- apache http serverThe Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow...7.5 High
- mozilla firefox, seamonkey, thunderbird +2 moreYARR, as used in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey...7.5 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not...7.5 High
- unboundvalidator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for...7.8 High
- unboundUnbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME...5.0 Medium
- microsoft officeUse-after-free vulnerability in Microsoft Office 2007 SP2 and SP3, Office 2010 Gold and SP1, and...9.3 High
- mit kerberosThe process_tgs_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos...6.8 Medium
- opera browserOpera before 11.60 allows remote attackers to cause a denial of service (CPU and memory...5.0 Medium
- linux kernel, avaya 96x1 ip deskphone firmware +1 moreThe udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a...7.1 High
- squid-cache squidThe idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows...5.0 Medium
- xelerance openswanUse-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0...4.0 Medium
- proftpdUse-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote...9.0 High
- apple iphone osThe kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an...7.2 High
- controlsystemworks csworksThe LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of...5.0 Medium
- daemon-tools daemon toolsdtsoftbus01.sys in DAEMON Tools Lite before 4.41.3, Pro Standard before 4.41.0315, and Pro...4.9 Medium
- wiresharkThe csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in...4.3 Medium
- roundcube webmailinclude/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used,...5.0 Medium
- investintech slimpdf readerInvestintech.com SlimPDF Reader does not prevent faulting-address data from affecting branch...9.3 High
- investintech slimpdf readerInvestintech.com SlimPDF Reader does not prevent faulting-instruction data from affecting write...9.3 High
- cisco ios, unified communications manager +1 moreMemory leak in Cisco Unified Communications Manager (CUCM) 6.x before 6.1(5)su2, 7.x before 7.1...7.8 High
- ibm websphere mqIBM WebSphere MQ 7.x before 7.0.1.4 allows remote attackers to cause a denial of service (disk...4.3 Medium
- cisco video surveillance 2421, video surveillance 2600, video surveillance 2500 +1 more +3 moreCisco Video Surveillance 2421 and 2500 series cameras with software 1.1.x and 2.x before 2.4.0...7.8 High
- cisco 5500 series adaptive security appliance, adaptive security appliance software +1 moreThe platform-sw component on Cisco Adaptive Security Appliances (ASA) 5500 series devices with...4.9 Medium
- djangoproject djangoDenial of service in django5.0 Medium
- apple iphone osThe UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of...5.0 Medium
- apple tv, iphone os +1 moreThe kernel in Apple iOS before 5 and Apple TV before 4.4 does not properly recover memory...5.0 Medium
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...7.2 High
- cisco catalyst 6500, 5500 series adaptive security appliance, adaptive security appliance software +2 more +4 moreCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in...7.8 High
- cisco catalyst 6500, 5500 series adaptive security appliance, adaptive security appliance software +3 more +5 moreCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in...7.8 High
- cisco catalyst 6500, 5500 series adaptive security appliance, adaptive security appliance software +3 more +5 moreCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in...7.8 High
- cisco catalyst 6500, 5500 series adaptive security appliance, adaptive security appliance software +3 more +5 moreCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in...7.8 High
- cisco catalyst 6500, 5500 series adaptive security appliance, adaptive security appliance software +3 more +5 moreCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in...7.8 High
- cisco catalyst 6500, 5500 series adaptive security appliance, adaptive security appliance software +3 more +5 moreCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in...7.8 High
- cisco catalyst 6500, catalyst 7600, firewall services module software +2 moreCisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0...7.8 High
- cisco jabber extensible communications platformCisco Jabber Extensible Communications Platform (aka Jabber XCP) 2.x through 5.4.x before 5.4.0...7.8 High
- ibm aixThe Fibre Channel driver for QLogic adapters in IBM AIX 6.1 and 7.1 does not properly handle DMA...2.1 Low
- quaggaThe ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers...5.0 Medium
- quaggaospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of...5.0 Medium
- quaggaThe ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga...5.0 Medium
- quassel-irc quasselThe CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote...5.0 Medium
- cisco ios, ios xe +1 moreMemory leak in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and...7.5 High
- cisco ios, ios xe +1 moreMemory leak in Cisco IOS 12.4, 15.0, and 15.1, and IOS XE 2.5.x through 3.2.x, allows remote...7.8 High
- cisco iosMemory leak in Cisco IOS 15.0 through 15.1, when IPS or Zone-Based Firewall (aka ZBFW) is...7.8 High
- cisco ios, ios xe +1 moreThe IP Service Level Agreement (IP SLA) functionality in Cisco IOS 15.1, and IOS XE 2.1.x through...7.8 High
- cisco ios, ios xe, unified communications manager +2 moreMemory leak in Cisco IOS 12.4, 15.0, and 15.1, Cisco IOS XE 2.5.x through 3.2.x, and Cisco...7.8 High
- Show moreLoading…