Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-399

CWE-399: Resource Management Errors

Weaknesses in this category are related to improper management of system resources.

From the CWE List. © The MITRE Corporation.

Newest

Known exploitedIn KEVPublic exploitFix available

apple itunesWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...CVE-2013-09956.8 MediumMay 19, 2013
apple itunesWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...CVE-2013-09946.8 MediumMay 19, 2013
apple itunesWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...CVE-2013-09936.8 MediumMay 19, 2013
apple itunes, microsoft windows xp +1 moreWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...CVE-2013-09926.8 MediumMay 19, 2013
apple itunesWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...CVE-2013-09916.8 MediumMay 19, 2013
mozilla firefox, thunderbird, thunderbird esr +2 moreUse-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla...CVE-2013-168110.0 HighMay 16, 2013
mozilla firefox, thunderbird, thunderbird esr +2 moreUse-after-free vulnerability in the mozilla::plugins::child::_geturlnotify function in Mozilla...CVE-2013-167910.0 HighMay 16, 2013
mozilla firefox, thunderbird, thunderbird esr +2 moreThe gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x...CVE-2013-167710.0 HighMay 16, 2013
mozilla firefox, thunderbird, thunderbird esr +2 moreUse-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6,...CVE-2013-16749.3 HighMay 16, 2013
python, canonical ubuntu linux +1 moreAlgorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,...CVE-2013-2099Fix available4.3 MediumMay 16, 2013
microsoft windows 8, windows rt, windows server 2012 +2 moreHTTP.sys in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to...CVE-2013-1305EPSS 54.7%7.8 HighMay 15, 2013
cisco iosThe crypto engine process in Cisco IOS on Aggregation Services Router (ASR) Route Processor 2...CVE-2013-11364.6 MediumMay 13, 2013
cisco unified presence serverMemory leak in the web framework in the server in Cisco Unified Presence (CUP) allows remote...CVE-2013-12425.0 MediumMay 10, 2013
linux kernelThe veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage...CVE-2013-2017Fix available7.8 HighMay 3, 2013
gnu glibcThe svc_run function in the RPC implementation in glibc before 2.15 allows remote attackers to...CVE-2011-46095.0 MediumMay 2, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...CVE-2013-1338EPSS 20.5%9.3 HighMay 2, 2013
matrikonopc security gatewayThe configuration utility in MatrikonOPC Security Gateway 1.0 allows remote attackers to cause a...CVE-2013-06665.0 MediumMay 1, 2013
xmlsoft libxml2Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow...CVE-2013-19697.5 HighApril 25, 2013
plataformatec devise, opensuse +1 moreDevise does not properly perform type conversion when performing database queriesCVE-2013-0233Fix availableEPSS 14.6%6.8 MediumApril 25, 2013
apache activemqApache ActiveMQ default configuration subject to denial of serviceCVE-2012-6551Fix available5.0 MediumApril 21, 2013
google chrome osUse-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows...CVE-2013-283310.0 HighApril 16, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...CVE-2013-1304EPSS 20.0%9.3 HighApril 9, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...CVE-2013-1303EPSS 20.5%9.3 HighApril 9, 2013
cisco iosMemory leak in Cisco IOS 12.2, 12.4, 15.0, and 15.1, when Zone-Based Policy Firewall SIP...CVE-2013-11457.8 HighMarch 28, 2013
cisco iosMemory leak in the IKEv1 implementation in Cisco IOS 15.1 allows remote attackers to cause a...CVE-2013-11447.8 HighMarch 28, 2013
google chromeUse-after-free vulnerability in the extension bookmarks API in Google Chrome before 26.0.1410.43...CVE-2013-09207.5 HighMarch 28, 2013
google chromeUse-after-free vulnerability in Google Chrome before 26.0.1410.43 on Linux allows remote...CVE-2013-09197.5 HighMarch 28, 2013
google chromeUse-after-free vulnerability in the Web Audio implementation in Google Chrome before 26.0.1410.43...CVE-2013-09167.5 HighMarch 28, 2013
drupalThe Image module in Drupal 7.x before 7.20 allows remote attackers to cause a denial of service ...CVE-2013-03165.0 MediumMarch 27, 2013
ibm lotus dominoMemory leak in the HTTP server in IBM Domino 8.5.x allows remote attackers to cause a denial of...CVE-2013-04864.3 MediumMarch 27, 2013
opensslThe do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0...CVE-2015-1792Public exploitFix availableEPSS 22.9%5.0 MediumMarch 25, 2013
opensslThe BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e...CVE-2015-1788Public exploitFix availableEPSS 20.5%4.3 MediumMarch 25, 2013
opensslMemory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0...CVE-2014-3567Fix availableEPSS 22.7%7.1 HighMarch 25, 2013
opensslMemory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before...CVE-2014-3507Public exploitFix availableEPSS 55.1%5.0 MediumMarch 25, 2013
openssld1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1...CVE-2014-3506Fix availableEPSS 46.1%5.0 MediumMarch 25, 2013
openstack essex, folsom, grizzly +1 more +3 moreOpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp functionCVE-2013-1838Fix available4.0 MediumMarch 22, 2013
linux kernelnet/bridge/br_mdb.c in the Linux kernel before 3.8.4 does not initialize certain structures,...CVE-2013-26361.9 LowMarch 22, 2013
linux kernelThe rtnl_fill_ifinfo function in net/core/rtnetlink.c in the Linux kernel before 3.8.4 does not...CVE-2013-2635Fix available1.9 LowMarch 22, 2013
apple mac os x, mac os x server +1 moreUse-after-free vulnerability in PDFKit in Apple Mac OS X before 10.8.3 allows remote attackers to...CVE-2013-09716.8 MediumMarch 15, 2013
typo3TYPO3 Open redirect vulnerability in the Access tracking mechanismCVE-2013-1843Fix available6.4 MediumMarch 15, 2013
adobe air, air sdk, flash player +2 more +4 moreUse-after-free vulnerability in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602...CVE-2013-065010.0 HighMarch 13, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute...CVE-2013-1288EPSS 18.5%9.3 HighMarch 13, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...CVE-2013-0094EPSS 18.5%9.3 HighMarch 13, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...CVE-2013-0093EPSS 18.5%9.3 HighMarch 13, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...CVE-2013-0092EPSS 28.2%9.3 HighMarch 13, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute...CVE-2013-0091EPSS 19.8%9.3 HighMarch 13, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...CVE-2013-0090Public exploitEPSS 38.2%9.3 HighMarch 13, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...CVE-2013-0089EPSS 18.5%9.3 HighMarch 13, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...CVE-2013-0088EPSS 19.8%9.3 HighMarch 13, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...CVE-2013-0087EPSS 18.5%9.3 HighMarch 13, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open