CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- cisco telepresence multipoint switchThe Media Snapshot implementation on Cisco TelePresence Multipoint Switch (CTMS) devices allows...6.3 Medium
- redhat libvirtlibvirt 1.1.0 and 1.1.1 allows local users to cause a denial of service (memory consumption) via...2.1 Low
- redhat libvirtDouble free vulnerability in the qemuAgentGetVCPUs function in qemu/qemu_agent.c in libvirt 1.0.6...5.0 Medium
- redhat libvirtDouble free vulnerability in the virConnectListAllInterfaces method in interface...5.0 Medium
- cisco ios, ios xe +1 moreMemory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS...7.8 High
- friends of symfony project fosuserbundleFriendsOfSymfony FOSUserBundle denial of service via login form5.0 Medium
- linux kernelarch/arm/kvm/arm.c in the Linux kernel before 3.10 on the ARM platform, when KVM is used, allows...4.3 Medium
- linux kernel, canonical ubuntu linux +1 moreUse-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local...6.9 Medium
- cisco nx-osThe regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is...5.4 Medium
- microsoft internet explorerUse-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft...9.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreUse-after-free vulnerability in the JS_GetGlobalForScopeChain function in Mozilla Firefox before...9.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreUse-after-free vulnerability in the mozilla::dom::HTMLFormElement::IsDefaultSubmitElement...9.3 High
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsAnimationManager::BuildAnimations function in the Animation...9.3 High
- eucalyptusWalrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory,...4.3 Medium
- openstack cinder, canonical ubuntu linux +1 moreOpenStack Cinder Denial of Service using XML entities4.3 Medium
- wiresharkepan/dissectors/packet-assa_r3.c in the ASSA R3 dissector in Wireshark 1.8.x before 1.8.10 and 1...4.3 Medium
- gnu glibc, canonical ubuntu linux, opensuse +2 moreThe nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS...7.8 High
- microsoft outlookDouble free vulnerability in Microsoft Outlook 2007 SP3 and 2010 SP1 and SP2 allows remote...9.3 High
- microsoft windows 7, windows server 2008 +1 moreDouble free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to...6.9 Medium
- cisco unified computing system 6120xp fabric interconnect, unified computing system 6140xp fabric interconnect +1 moreMemory leak in the CLI component on Cisco Unified Computing System (UCS) 6100 Fabric Interconnect...4.6 Medium
- redhat enterprise virtualizationUnquoted Windows search path vulnerability in the Red Hat Enterprise Virtualization Application...7.2 High
- cisco unified communications managerCisco Unified Communications Manager (Unified CM) 8.5(x) and 8.6(x) before 8.6(2a)su3 and 9.x...7.1 High
- cisco unified communications managerMemory leak in Cisco Unified Communications Manager (Unified CM) 8.5(x) before 8.5(1)su6, 8.6(x)...7.8 High
- cisco unified communications managerCisco Unified Communications Manager (Unified CM) 7.1(x) before 7.1(5b)su6a does not properly...7.8 High
- cisco prime central for hosted collaboration solution assuranceMemory leak in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x...7.8 High
- cisco prime central for hosted collaboration solution assuranceCisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1)...7.8 High
- cisco prime central for hosted collaboration solution assuranceCisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1)...7.8 High
- cisco prime central for hosted collaboration solution assuranceCisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1)...7.8 High
- linux kernelMemory leak in the unshare_userns function in kernel/user_namespace.c in the Linux kernel before...4.7 Medium
- cisco unified communications manager, unified presence +1 moreMemory leak in Cisco Unified Communications Manager IM and Presence Service before 8.6(5)SU1 and...7.8 High
- libtiff, debian linux +1 moreUse-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in...6.8 Medium
- osisoft pi interfaceThe OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a...5.0 Medium
- google chrome, debian linux +1 moreUse-after-free vulnerability in the Document::finishedParsing function in core/dom/Document.cpp...7.5 High
- google chrome, debian linux +1 moreUse-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html...7.5 High
- google chrome, debian linux +1 moreUse-after-free vulnerability in the XSLT ProcessingInstruction implementation in Blink, as used...7.5 High
- apache cxfMissing XML Validation in Apache CXF5.0 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service ...5.0 Medium
- mozilla firefox, seamonkey +1 moreUse-after-free vulnerability in the nsINode::GetParentNode function in Mozilla Firefox before 23...9.3 High
- apache tomcat, oracle virtualization +1 moreUncontrolled Resource Consumption in Apache Tomcat7.8 High
- bitcoin bitcoin-qt, bitcoind, core +1 more +3 morebitcoind and Bitcoin-Qt before 0.4.9rc2, 0.5.x before 0.5.8rc2, 0.6.x before 0.6.5rc2, and 0.7.x...6.4 Medium
- google chrome, debian linux +1 moreUse-after-free vulnerability in Google Chrome before 28.0.1500.95 allows remote attackers to...7.5 High
- google chrome, debian linux +1 moreUse-after-free vulnerability in the DOM implementation in Google Chrome before 28.0.1500.95...7.5 High
- google chrome, debian linux +1 moreUse-after-free vulnerability in Google Chrome before 28.0.1500.95 allows remote attackers to...7.5 High
- wiresharkMemory leak in the dissect_dcom_ActivationProperties function in epan/dissectors/packet-dcom...5.0 Medium
- wiresharkDouble free vulnerability in the dissect_dcom_ActivationProperties function in epan/dissectors...5.0 Medium
- wiresharkepan/proto.c in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allows remote attackers to...5.0 Medium
- linux kernelThe ip6_append_data_mtu function in net/ipv6/ip6_output.c in the IPv6 implementation in the Linux...4.7 Medium
- linux kernelUse-after-free vulnerability in the vhost_net_set_backend function in drivers/vhost/net.c in the...4.7 Medium
- redhat enterprise linux, enterprise linux desktop supplementary, enterprise linux server supplementary +1 more +3 moreUnquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise...7.2 High
- cisco unified ip conference station 7937g, unified ip conference station 7937g firmware +1 moreThe Cisco Unified IP Conference Station 7937G allows remote attackers to cause a denial of...5.0 Medium
- Show moreLoading…