CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- cisco iosMemory leak in the H.323 inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0,...7.8 High
- cisco iosMemory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4,...7.8 High
- cisco iosMemory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause...7.8 High
- linux kernelThe KVM implementation in the Linux kernel before 3.3.6 allows host OS users to cause a denial of...4.9 Medium
- ibm db2The XML feature in IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 allows remote...4.0 Medium
- opensslThe mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0...5.0 Medium
- pidginThe msn_oim_report_to_user function in oim.c in the MSN protocol plugin in libpurple in Pidgin...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x...7.5 High
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in...9.3 High
- mozilla firefox, firefox esr, seamonkey +2 more +4 moreUse-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3,...7.5 High
- gnu gnutlsDouble free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a...7.5 High
- microsoft windows server 2003, windows server 2008 +1 moreThe DNS server in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 does not...5.0 Medium
- ibm maximo asset management, maximo service desk, tivoli asset management for it +3 more +5 moreIBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset...5.0 Medium
- yassl cyasslyaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service (NULL pointer...5.0 Medium
- pypamDouble free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows...7.5 High
- apple safariUse-after-free vulnerability in Apple Safari 5.1.2, when a plug-in with a blocking function is...7.6 High
- adobe flash player, flash player for android +1 moreThe Matrix3D component in Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on...10.0 High
- ibm aix, vios +1 moreIBM AIX 5.3, 6.1, and 7.1, and VIOS 2.1.x and 2.2.x, allows remote attackers to cause a denial of...7.8 High
- apple safariUse-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.6, allows remote...7.5 High
- cisco 2000 wireless lan controller, 2100 wireless lan controller, 2106 wireless lan controller +10 more +12 moreCisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0...7.8 High
- cisco 2000 wireless lan controller, 2100 wireless lan controller, 2106 wireless lan controller +10 more +12 moreCisco Wireless LAN Controller (WLC) devices with software 6.0 and 7.0 before 7.0.220.0, 7.1...7.8 High
- cisco 2000 wireless lan controller, 2100 wireless lan controller, 2106 wireless lan controller +10 more +12 moreThe administrative management interface on Cisco Wireless LAN Controller (WLC) devices with...7.8 High
- cisco unity connectionCisco Unity Connection before 7.1.5b(Su5), 8.0 and 8.5 before 8.5.1(Su3), and 8.6 before 8.6.2...7.8 High
- cisco cius, cius software +1 moreThe Cisco Cius with software before 9.2(1) SR2 allows remote attackers to cause a denial of...7.8 High
- cisco telepresence video communication server, telepresence system software +1 moreCisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers...7.5 High
- cisco telepresence video communication server, telepresence system software +1 moreCisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers...7.8 High
- cisco business edition 3000, unified communications manager, business edition 3000 software +4 more +6 moreCisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0...7.8 High
- xmlsoft libxml2, apple iphone os +1 morelibxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash...5.0 Medium
- process-one ejabberdEjabberd DoS via malformed stanza4.0 Medium
- cisco nexus 1000v, nexus 5000, nexus 7000 +9 more +11 moreCisco NX-OS 4.2.x before 4.2(1)SV1(5.1) on Nexus 1000v series switches; 4.x and 5.0.x before 5.0...7.8 High
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...7.2 High
- phpMemory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreUse-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0...7.5 High
- apple mac os x, mac os x server +1 moreCoreUI in Apple Mac OS X 10.7.x before 10.7.3 does not properly restrict the allocation of stack...6.8 Medium
- apple mac os x, mac os x server +1 moreUse-after-free vulnerability in CoreText in Apple Mac OS X before 10.7.3 allows remote attackers...6.8 Medium
- freebsd, netbsd +1 moreThe Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD, NetBSD, and...7.8 High
- phpThe php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to...7.5 High
- drusus logsurfer, kerry thompson logsurfer\+ +1 moreDouble free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and...7.5 High
- videolan vlc media playerVLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long...4.3 Medium
- opensslOpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote...5.0 Medium
- phpThe tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service...5.0 Medium
- isc dhcpThe logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and...6.1 Medium
- wibu codemeter runtimeWibu-Systems AG CodeMeter Runtime 4.30c, 4.10b, and possibly other versions before 4.40 allows...5.0 Medium
- powerdns authoritative servercommon_startup.cc in PowerDNS (aka pdns) Authoritative Server before 2.9.22.5 and 3.x before 3.0...5.0 Medium
- opensslThe GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST...5.0 Medium
- opensslThe Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f...5.0 Medium
- opensslOpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote...4.3 Medium
- opensslDouble free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is...9.3 High
- apache tomcatImproper Input Validation in Apache Tomcat5.0 Medium
- apache activemqDenial of Service in Apache ActiveMQ5.0 Medium
- Show moreLoading…