CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- spice project spice, canonical ubuntu linux +1 moreThe (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server...5.0 Medium
- linux kernelThe fib6_add_rt2node function in net/ipv6/ip6_fib.c in the IPv6 stack in the Linux kernel through...5.4 Medium
- cisco unified communications domain managerCisco Unified Communications Domain Manager does not properly allocate memory for GET and POST...6.8 Medium
- juniper junos, srx1400, srx3400 +1 more +3 moreJuniper Junos 10.4 before 10.4S13, 11.4 before 11.4R7-S1, 12.1 before 12.1R5-S3, 12.1X44 before...5.0 Medium
- google chrome, debian linux +1 moreUse-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to...7.5 High
- google chrome, debian linux +1 moreUse-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote servers to...9.3 High
- openstack folsom, grizzly, havana +2 moreOpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image2.1 Low
- libtirpc project libtirpcThe svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a...4.3 Medium
- xenXen 4.1.x and 4.2.x, when the XSA-45 patch is in place, does not properly maintain references on...7.4 High
- cisco ironport asyncosThe IronPort Spam Quarantine (ISQ) component in the web framework in IronPort AsyncOS on Cisco...7.8 High
- cisco ironport asyncosThe management GUI in the web framework in IronPort AsyncOS on Cisco Web Security Appliance...7.8 High
- mozilla firefox, thunderbird, thunderbird esr +2 moreUse-after-free vulnerability in the mozilla::ResetDir function in Mozilla Firefox before 22.0,...10.0 High
- mozilla firefox, thunderbird, thunderbird esr +2 moreUse-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox...9.3 High
- mozilla firefox, thunderbird, thunderbird esr +2 moreUse-after-free vulnerability in the mozilla::dom::HTMLMediaElement::LookupMediaElementURITable...9.3 High
- cisco telepresence tc software, ip video phone e20, telepresence codec c40 +11 more +13 moreCisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers...7.8 High
- cisco hosted collaboration solutionCisco Hosted Collaboration Mediation allows remote attackers to cause a denial of service (CPU...5.0 Medium
- microsoft windows 7, windows 8, windows server 2003 +3 more +5 moreThe kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows...4.4 Medium
- microsoft windows 7, windows 8, windows rt +3 more +5 moreThe Print Spooler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7...9.0 High
- wireshark, debian linux, opensuse +2 moreepan/dissectors/packet-gmr1_bcch.c in the GMR-1 BCCH dissector in Wireshark 1.8.x before 1.8.8...5.0 Medium
- linux kernelThe fill_event_metadata function in fs/notify/fanotify/fanotify_user.c in the Linux kernel...2.1 Low
- google chrome, debian linux +1 moreUse-after-free vulnerability in the SVG implementation in Google Chrome before 27.0.1453.110...7.5 High
- cisco telepresence system softwareCisco TelePresence System Software does not properly handle inactive t-shell sessions, which...6.8 Medium
- libraw, canonical ubuntu linux, opensuse +2 moreMultiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw...7.5 High
- cisco nexus 1000v, nx-os +1 moreCisco NX-OS on the Nexus 1000V does not assign the proper priority to heartbeat messages from a...5.0 Medium
- redhat libvirtThe remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5...5.0 Medium
- apple quicktimeApple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial...9.3 High
- apple quicktimeApple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial...9.3 High
- 3s-software codesys gateway-serverUse-after-free vulnerability in the server application in 3S CODESYS Gateway 2.3.9.27 allows...10.0 High
- cisco ios xrMemory leak in the SNMP process in Cisco IOS XR allows remote attackers to cause a denial of...5.0 Medium
- google chromeUse-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows...7.5 High
- google chromeUse-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome...7.5 High
- google chromeUse-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to...7.5 High
- google chrome, apple iphone os +1 moreUse-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to...7.5 High
- google chromeUse-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to...7.5 High
- google chromeUse-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows...7.5 High
- google chromeGoogle Chrome before 27.0.1453.93 does not properly perform a cast of an unspecified variable...7.5 High
- google chromeUse-after-free vulnerability in the SVG implementation in Google Chrome before 27.0.1453.93...7.5 High
- apple itunesWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...6.8 Medium
- apple itunes, iphone os +1 moreWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...9.3 High
- apple itunes, iphone os +1 moreWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...9.3 High
- apple itunes, iphone os +1 moreWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...9.3 High
- apple itunes, iphone os +1 moreWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...9.3 High
- apple itunes, iphone os +1 moreWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...9.3 High
- apple itunes, iphone os +1 moreWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...9.3 High
- apple itunes, iphone os +1 moreWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...9.3 High
- apple itunes, iphone os +1 moreWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...9.3 High
- apple itunes, iphone os +1 moreWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...9.3 High
- apple itunesWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...6.8 Medium
- apple itunesWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...6.8 Medium
- apple itunesWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...6.8 Medium
- Show moreLoading…