Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-399

CWE-399: Resource Management Errors

Weaknesses in this category are related to improper management of system resources.

From the CWE List. © The MITRE Corporation.

Newest

Known exploitedIn KEVPublic exploitFix available

apache qpidApache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows...CVE-2012-2145Fix available5.0 MediumSeptember 28, 2012
optimalog optima plcAPIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial...CVE-2012-5048Public exploit7.8 HighSeptember 28, 2012
cisco ios xeCisco IOS XE 03.02.00.XO.15.0(2)XO on Catalyst 4500E series switches, when a Supervisor Engine 7L...CVE-2012-46227.1 HighSeptember 27, 2012
cisco iosThe Device Sensor feature in Cisco IOS 15.0 through 15.2 allows remote attackers to cause a...CVE-2012-46217.8 HighSeptember 27, 2012
cisco ios, 10008 router +1 moreCisco IOS 12.2 and 15.0 through 15.2 on Cisco 10000 series routers, when a tunnel interface...CVE-2012-46207.8 HighSeptember 27, 2012
cisco iosThe NAT implementation in Cisco IOS 12.2, 12.4, and 15.0 through 15.2 allows remote attackers to...CVE-2012-46197.8 HighSeptember 27, 2012
cisco iosThe SIP ALG feature in the NAT implementation in Cisco IOS 12.2, 12.4, and 15.0 through 15.2...CVE-2012-46187.8 HighSeptember 27, 2012
cisco iosThe Intrusion Prevention System (IPS) feature in Cisco IOS 12.3 through 12.4 and 15.0 through 15...CVE-2012-39507.1 HighSeptember 27, 2012
google chromeGoogle Chrome before 22.0.1229.79 does not properly handle graphics-context data structures,...CVE-2012-28946.8 MediumSeptember 26, 2012
google chromeDouble free vulnerability in libxslt, as used in Google Chrome before 22.0.1229.79, allows remote...CVE-2012-2893Fix available6.8 MediumSeptember 26, 2012
google chromeUse-after-free vulnerability in the PDF functionality in Google Chrome before 22.0.1229.79 allows...CVE-2012-28906.8 MediumSeptember 26, 2012
google chrome, opensuse +1 moreUse-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to...CVE-2012-28887.5 HighSeptember 26, 2012
google chrome, opensuse +1 moreUse-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to...CVE-2012-28877.5 HighSeptember 26, 2012
google chrome, opensuse +1 moreDouble free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a...CVE-2012-28857.5 HighSeptember 26, 2012
google chrome, opensuse +1 moreUse-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to...CVE-2012-28787.5 HighSeptember 26, 2012
ibm websphere commerceIBM WebSphere Commerce 7.0 before 7.0.0.6, when persistent sessions and personalization IDs are...CVE-2012-33002.6 LowSeptember 25, 2012
ibm websphere mqThe server message channel agent in the queue manager in the server in IBM WebSphere MQ 7.0.1...CVE-2012-21995.0 MediumSeptember 25, 2012
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers...CVE-2012-2557EPSS 19.5%9.3 HighSeptember 21, 2012
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute...CVE-2012-2548EPSS 19.5%9.3 HighSeptember 21, 2012
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute...CVE-2012-2546EPSS 20.2%9.3 HighSeptember 21, 2012
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to...CVE-2012-1529EPSS 20.2%9.3 HighSeptember 21, 2012
apple iphone osWebKit, as used in Apple iOS before 6, allows remote attackers to execute arbitrary code or cause...CVE-2012-37476.8 MediumSeptember 20, 2012
apple iphone osDouble free vulnerability in ImageIO in Apple iOS before 6 allows remote attackers to execute...CVE-2012-37266.8 MediumSeptember 20, 2012
apple mac os x, iphone os, mac os x server +2 moreThe Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6...CVE-2012-37226.8 MediumSeptember 20, 2012
cisco application control engine moduleThe Cisco Application Control Engine (ACE) module 3.0 for Cisco Catalyst switches and Cisco...CVE-2012-39195.0 MediumSeptember 16, 2012
cisco intrusion prevention system, ips 4240, ips 4250 sx +3 more +5 moresensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory,...CVE-2012-38995.0 MediumSeptember 16, 2012
cisco iosCisco IOS 12.2 allows remote attackers to cause a denial of service (CPU consumption) by...CVE-2012-30797.8 HighSeptember 16, 2012
cisco unity connectionCisco Unity Connection (UC) 8.6, 9.0, and 9.5 allows remote attackers to cause a denial of...CVE-2012-30607.8 HighSeptember 16, 2012
cisco prime security manager, asa cx context-aware security +1 moreThe Cisco ASA-CX Context-Aware Security module before 9.0.2-103 for Adaptive Security Appliances ...CVE-2012-46297.8 HighSeptember 12, 2012
ffmpeg, libav +1 moreDouble free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg...CVE-2012-2803Fix available10.0 HighSeptember 10, 2012
google chrome, xmlsoft libxslt, apple iphone os +2 morelibxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly...CVE-2012-2870Fix available4.3 MediumAugust 31, 2012
wiresharkThe dissect_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and...CVE-2012-3548Fix available4.3 MediumAugust 30, 2012
mozilla firefox, thunderbird, thunderbird esr +2 moreUntrusted search path vulnerability in the installer in Mozilla Firefox before 15.0, Firefox ESR...CVE-2012-39746.9 MediumAugust 29, 2012
mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0...CVE-2012-397010.0 HighAugust 29, 2012
mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the gfxTextRun::GetUserData function in Mozilla Firefox before 15...CVE-2012-396410.0 HighAugust 29, 2012
mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsHTMLEditRules::DeleteNonTableElements function in Mozilla...CVE-2012-395810.0 HighAugust 29, 2012
munin-monitoring muninmunin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote attackers...CVE-2012-4678Fix available5.0 MediumAugust 26, 2012
munin-monitoring muninmunin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or...CVE-2012-2147Fix available5.0 MediumAugust 26, 2012
torUse-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow remote attackers to...CVE-2012-3517Fix available5.0 MediumAugust 26, 2012
openttdOpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a denial of service (game pause) by...CVE-2012-00484.3 MediumAugust 25, 2012
sgi performance co-pilotMultiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause...CVE-2012-3420Fix available5.0 MediumAugust 23, 2012
ffmpeg, libav +1 moreThe Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11...CVE-2012-0858Fix available6.8 MediumAugust 20, 2012
xenXen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU...CVE-2012-3433Fix available4.9 MediumAugust 18, 2012
openstack novaOpenStack Nova Long server names grow nova-api log files significantlyCVE-2012-1585Fix available4.0 MediumAugust 17, 2012
wireshark, opensuse, sun sunos +2 moreBuffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x...CVE-2012-4296Fix available3.3 LowAugust 16, 2012
wireshark, opensuse, redhat enterprise linux +1 more +3 moreThe CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2...CVE-2012-4291Fix available3.3 LowAugust 16, 2012
wireshark, opensuse, redhat enterprise linux +1 more +3 moreThe CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2...CVE-2012-4290Fix available3.3 LowAugust 16, 2012
wireshark, opensuse, redhat enterprise linux +1 more +3 moreepan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before...CVE-2012-4289Fix available3.3 LowAugust 16, 2012
wireshark, sun sunos +1 moreepan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows...CVE-2012-4287Fix available5.0 MediumAugust 16, 2012
microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...CVE-2012-25277.2 HighAugust 15, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open