CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- siemens simatic s7 cpu-1211c, simatic s7 cpu 1200 firmware, simatic s7 cpu 1212c +3 more +5 moreSiemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause...7.8 High
- siemens simatic s7 cpu-1211c, simatic s7 cpu 1200 firmware, simatic s7 cpu 1212c +3 more +5 moreSiemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause...6.1 Medium
- cisco catalyst 6500, ios +1 moreCisco IOS 15.1(2)SY3 and earlier, when used with Supervisor Engine 2T (aka Sup2T) on Catalyst...7.1 High
- videolan vlc media playerVideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service ...4.3 Medium
- sophos unified threat management, unified threat management software +1 moreMemory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to...7.8 High
- google chromeUse-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content...7.5 High
- google chromeUse-after-free vulnerability in the DatabaseThread::cleanupDatabaseThread function in modules...7.5 High
- google chromeUse-after-free vulnerability in modules/speech/SpeechSynthesis.cpp in Blink, as used in Google...7.5 High
- plonePlone Authenticated Denial of Service vulnerability4.3 Medium
- openstack novaOpenStack Nova DoS through ephemeral disk backing files4.0 Medium
- cisco wireless lan controller, wireless lan controller software +1 moreCisco Wireless LAN Controller (WLC) devices 7.2, 7.3, and 7.4 before 7.4.110.0 allow remote...7.8 High
- cisco wireless lan controller, wireless lan controller software +1 moreCisco Wireless LAN Controller (WLC) devices 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0...7.8 High
- cisco wireless lan controller, wireless lan controller software +1 moreThe multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7.2...7.1 High
- cisco wireless lan controller, wireless lan controller software +1 moreThe IGMP implementation on Cisco Wireless LAN Controller (WLC) devices 4.x, 5.x, 6.x, 7.0 before...7.1 High
- cisco wireless lan controller softwareCisco Wireless LAN Controller (WLC) devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4...7.8 High
- google chromeUse-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core...7.5 High
- google chromeUse-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics...7.5 High
- file project file, canonical ubuntu linux, freebsd +1 more +3 moresoftmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers...5.0 Medium
- martin nagy bind-dyndb-ldapThe handle_connection_error function in ldap_helper.c in bind-dyndb-ldap before 1.1.0rc1 does not...4.3 Medium
- microsoft windows 8, windows 8.1 +1 moreThe Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier does not properly...5.0 Medium
- google chromeMultiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google...7.5 High
- google chromeUse-after-free vulnerability in Blink, as used in Google Chrome before 33.0.1750.117, allows...7.5 High
- google chromeUse-after-free vulnerability in the web contents implementation in Google Chrome before 33.0.1750...7.5 High
- adobe air, air sdk, flash player +7 more +9 moreDouble free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x...8.8 High
- dell bsafe ssl-j, emc rsa bsafe ssl-j +1 moreThe SSLSocket implementation in the (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before...5.0 Medium
- xenUse-after-free vulnerability in the xc_cpupool_getinfo function in Xen 4.1.x through 4.3.x, when...4.6 Medium
- light speed gaming mumble, mumblekit +1 moreThe (1) opus_packet_get_nb_frames and (2) opus_packet_get_samples_per_frame functions in the...5.0 Medium
- siemens simatic wincc open architectureSiemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to cause a denial of...5.0 Medium
- openstack folsom, grizzly, havana +2 moreOpenStack Nova denial of service through compressed disk images2.1 Low
- pidginutil.c in libpurple in Pidgin before 2.10.8 does not properly allocate memory for HTTP responses...5.0 Medium
- linux kernelStack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock...4.0 Medium
- schneider-electric telvent sage 3030 firmwareThe Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3_P4 and C3413-500...5.0 Medium
- 3s-software codesys runtime toolkit, codesys runtime toolkit +1 moreSmart Software Solutions (3S) CoDeSys Runtime Toolkit NULL Pointer Dereference7.1
- google chrome, debian linux, opensuse +2 moreUse-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg...7.5 High
- isc bindnamed in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC...5.4 Medium
- isc bindISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit...7.8 High
- tntnet cxxtoolsquery_params.cpp in cxxtools before 2.2.1 allows remote attackers to cause a denial of service ...5.0 Medium
- xenThe IRQ setup in Xen 4.2.x and 4.3.x, when using device passthrough and configured to support a...4.4 Medium
- qemu, xen +1 moreThe qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other...2.7 Low
- aveva clearscadaDNP3Driver.exe in the DNP3 driver in Schneider Electric ClearSCADA 2010 R2 through 2010 R3.1 and...4.3 Medium
- adobe acrobat, reader and acrobat +1 moreUse-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0...10.0 High
- apache santuario xml security for javaImproper Input Validation in Apache Santuario XML Security4.3 Medium
- cisco unity connectionThe server in Cisco Unity Connection allows remote authenticated users to cause a denial of...6.8 Medium
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to...9.3 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute...9.3 High
- net-snmp, apple mac os x, canonical ubuntu linux +2 moreNet-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT...4.3 Medium
- janrain ruby-openid, fedoraproject fedora +1 moreDenial of service in ruby-openid4.3 Medium
- microsoft windows 7Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows Server...7.2 High
- ffmpegThe filter_frame function in libavfilter/vf_fps.c in FFmpeg before 2.1 does not properly ensure...6.8 Medium
- ffmpegThe ff_h264_decode_sei function in libavcodec/h264_sei.c in FFmpeg before 0.10 allows remote...6.8 Medium
- Show moreLoading…