CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- google chrome, opensuse +1 moreUse-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to...7.5 High
- google chrome, opensuse +1 moreUse-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to...7.5 High
- adobe acrobat, acrobat reader +1 moreUse-after-free vulnerability in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5,...10.0 High
- torproject torThe connection_edge_process_relay_cell function in or/relay.c in Tor before 0.2.3.25 maintains...5.0 Medium
- apache tomcatorg/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0...2.6 Low
- siemens automation license managerMemory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows remote...3.3 Low
- xenMultiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to...4.7 Medium
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to...9.3 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to...9.3 High
- microsoft office compatibility pack, office web apps, word +2 more +4 moreMicrosoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack...9.3 High
- xenXen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a...4.6 Medium
- libsshDouble free vulnerability in the sftp_mkdir function in sftp.c in libssh before 0.5.3 allows...7.5 High
- libsshMultiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2)...6.8 Medium
- ps project management team libunity-webappsUse-after-free vulnerability in libunity-webapps before 2.4.1 allows remote attackers to cause a...7.5 High
- apache http serverThe mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node...5.0 Medium
- ibm tivoli endpoint managerUnspecified vulnerability in Tivoli Endpoint Manager for Remote Control Broker 8.2 before 8.2.1...5.0 Medium
- google chrome, opensuse +1 moreUse-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to...7.5 High
- morequick greenbrowserDouble free vulnerability in GreenBrowser before 6.0.1002, when the keyword search bar (F6) is...6.8 Medium
- awcm-cms ar web content managerar web content manager (AWCM) 2.2 does not restrict the number of comment records that can be...5.0 Medium
- lighttpdThe http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote...5.0 Medium
- xenXen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest...2.1 Low
- xenXen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause...1.9 Low
- firebirdsql firebirdTraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated...3.5 Low
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute...9.3 High
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3...7.2 High
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...7.2 High
- microsoft excel, office +1 moreUse-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and...9.3 High
- microsoft internet explorer, ie +1 moreUse-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute...9.3 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute...9.3 High
- c3-ilex eoscadaeosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a...7.8 High
- c3-ilex eoscadaEOSDataServer.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial...7.8 High
- kdeUse-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3,...6.8 Medium
- apple quicktimeUse-after-free vulnerability in the Clear method in the ActiveX control in Apple QuickTime before...9.3 High
- apple quicktimeUse-after-free vulnerability in the plugin in Apple QuickTime before 7.7.3 allows remote...9.3 High
- google chromeGoogle Chrome before 23.0.1271.64 does not properly perform a cast of an unspecified variable...7.5 High
- irfanview flashpix pluginDouble free vulnerability in the Free_All_Memory function in jpeg/dectile.c in libfpx before 1.3...6.8 Medium
- justin dodge hotblocksThe Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the...3.5 Low
- videolan vlc media playerDouble free vulnerability in the get_chunk_header function in modules/demux/ty.c in VideoLAN VLC...9.3 High
- cisco catalyst 6500, 5500 series adaptive security appliance, adaptive security appliance software +8 more +10 moreThe DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA...7.1 High
- openfabrics ibacmibacm before 1.0.6 does not properly manage reference counts for multicast connections, which...5.0 Medium
- google chrome, apple iphone os +1 moreUse-after-free vulnerability in the SVG implementation in WebKit, as used in Google Chrome before...10.0 High
- linux kernelThe (1) do_siocgstamp and (2) do_siocgstampns functions in net/socket.c in the Linux kernel...6.6 Medium
- microsoft office compatibility pack, office web apps, word +2 more +4 moreUse-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word...9.3 High
- google androidThe Zygote process in Android 4.0.3 and earlier accepts fork requests from processes with...7.8 High
- pythonSimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x...5.0 Medium
- wiresharkThe dissect_hsrp function in epan/dissectors/packet-hsrp.c in the HSRP dissector in Wireshark 1.8...3.3 Low
- linux kernelUse-after-free vulnerability in the xacct_add_tsk function in kernel/tsacct.c in the Linux kernel...5.6 Medium
- optipngUse-after-free vulnerability in opngreduc.c in OptiPNG Hg and 0.7.x before 0.7.3 might allow...7.5 High
- drupalAlgorithmic complexity vulnerability in the _filter_url function in the text filtering system ...3.5 Low
- trevor mckay cumin, redhat enterprise mrg +1 moreCumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0,...4.0 Medium
- Show moreLoading…