CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- bitcoin bitcoin-qt, bitcoind, core +2 moreThe CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies...5.0 Medium
- bitcoin bitcoin-qt, bitcoind, core +2 morebitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service ...7.8 High
- bitcoin bitcoin-qt, bitcoind, core +1 more +3 moreThe alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character...7.8 High
- emerson deltav se3006 sd plus controller, deltav ve3005 controller md, deltav ve3006 controller md plus +2 moreThe Emerson DeltaV SE3006 through 11.3.1, DeltaV VE3005 through 10.3.1 and 11.x through 11.3.1,...6.1 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsEditor::IsPreformatted function in editor/libeditor/base...9.3 High
- perlThe rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a...7.5 High
- cisco 200 series smart switches, 200 series smart switches software, 300 series managed switches +1 more +3 moreThe Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series...5.0 Medium
- wireshark, opensuse +1 moreThe dissect_hartip function in epan/dissectors/packet-hartip.c in the HART/IP dissector in...6.1 Medium
- google chromeUse-after-free vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to...7.5 High
- google chromeUse-after-free vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to...7.5 High
- google chromeUse-after-free vulnerability in the frame-loader implementation in Google Chrome before 25.0.1364...7.5 High
- linux kernelThe Linux kernel before 2.6.39 does not properly create transparent huge pages in response to a...5.5 Medium
- ibm lotus dominoOpen redirect vulnerability in the web server in IBM Lotus Domino 8.5.x through 8.5.3 allows...5.8 Medium
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2...5.0 Medium
- cisco unity connectionMemory leak in Cisco Unity Connection 9.x allows remote attackers to cause a denial of service ...5.0 Medium
- linux kernelMemory leak in drivers/net/xen-netback/netback.c in the Xen netback functionality in the Linux...5.2 Medium
- cisco iosThe HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events,...5.4 Medium
- zend frameworkZendframework Local file disclosure via XXE injection in Zend_XmlRpc5.0 Medium
- microsoft windows xpObject Linking and Embedding (OLE) Automation in Microsoft Windows XP SP3 does not properly...9.3 High
- microsoft windows server 2008, windows server 2012 +1 moreThe NFS server in Microsoft Windows Server 2008 R2 and R2 SP1 and Server 2012 allows remote...7.1 High
- microsoft windows 7, windows server 2008 +1 moreThe Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Server 2008 R2 and R2 SP1 and...7.2 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers...9.3 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers...9.3 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...9.3 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute...9.3 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute...9.3 High
- microsoft internet explorer, windows server 2008, windows vista +2 moreUse-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to...9.3 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to...9.3 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute...9.3 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...9.3 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute...9.3 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 7 through 10 allows remote attackers...9.3 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers...9.3 High
- canonical ubuntu linux, qxl graphics driver project xf86-video-qxl, redhat enterprise linux desktop +2 more +4 moreThe QXL display driver in QXL Virtual GPU 0.1.0 allows local users to cause a denial of service ...2.1 Low
- xenMemory leak in Xen 4.2 and unstable allows local HVM guests to cause a denial of service (host...4.7 Medium
- adobe air, air sdk, flash player +2 moreUse-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602...10.0 High
- adobe air, air sdk, flash player +2 moreUse-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602...10.0 High
- adobe air, air sdk, flash player +2 moreUse-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602...10.0 High
- libsshThe publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched...4.3 Medium
- wiresharkDouble free vulnerability in epan/proto.c in the dissection engine in Wireshark 1.6.x before 1.6...2.9 Low
- wiresharkThe rtps_util_add_bitmap function in epan/dissectors/packet-rtps.c in the RTPS dissector in...2.9 Low
- google chromeUse-after-free vulnerability in Google Chrome before 24.0.1312.56 allows remote attackers to...7.5 High
- rockwell automation 1788-enbt flexlogix adapter, 1794-aentr flex i/o ethernet/ip adapter, compactlogix l32e and l35e controllers +21 more +23 moreRockwell Automation ControlLogix PLC Improper Access Control7.8
- cisco nexus 7000, nx-os, nexus 7000 10-slot +2 more +4 moreCisco NX-OS on Nexus 7000 series switches does not properly handle certain line-card replacements...4.9 Medium
- redhat enterprise linux, squirrelmail +1 morefunctions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5,...5.0 Medium
- cisco asa 1000v cloud firewall, adaptive security appliance software +1 moreCisco Adaptive Security Appliance (ASA) software 8.7.1 and 8.7.1.1 for the Cisco ASA 1000V Cloud...7.8 High
- google chrome, v8, opensuse +2 moreGoogle V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, does not properly...6.8 Medium
- google chrome, opensuse +1 moreUse-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to...7.5 High
- google chromeThe PDF functionality in Google Chrome before 24.0.1312.52 does not properly perform a cast of an...6.8 Medium
- google chromeUse-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to...6.8 Medium
- Show moreLoading…