CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- php, debian linux +1 moreThe cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and...5.0 Medium
- mumbleThe QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers...5.0 Medium
- clamav, canonical ubuntu linux +1 moreClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a...5.0 Medium
- clamav, canonical ubuntu linux +1 moreClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted...5.0 Medium
- clamav, canonical ubuntu linux +1 moreClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a...5.0 Medium
- clamav, canonical ubuntu linux +1 moreThe upx decoder in ClamAV before 0.98.7 allows remote attackers to cause a denial of service ...5.0 Medium
- linux kernel, redhat mrg realtime +1 moreThe xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux...4.9 Medium
- cisco identity services engine softwareCisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does not properly handle...4.0 Medium
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers...9.3 High
- ibm websphere portalIBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2...5.0 Medium
- gnome gnome-terminal, opensuse, oracle solaris +2 moreThe "insert-blank-characters" capability in caps.c in gnome-terminal (vte) before 0.28.1 allows...3.5 Low
- google chromeUse-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before...7.5 High
- google chromeUse-after-free vulnerability in the StyleElement::removedFromDocument function in core/dom...7.5 High
- unrealircdUse-after-free vulnerability in UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to...5.0 Medium
- spumko project hapi server frameworkFile Descriptor Leak Can Cause DoS Vulnerability in hapi5.0 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) 6.1.0.0 through 6.1.0.47 and 6.0.2.0 through 6.0.2.43...7.1 High
- adobe acrobat, acrobat reader +1 moreDouble free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07...10.0 High
- adobe acrobat, acrobat reader +1 moreUse-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0...10.0 High
- google chromeUse-after-free vulnerability in the FrameSelection::updateAppearance function in core/editing...7.5 High
- google chromeMultiple use-after-free vulnerabilities in net/websockets/websocket_job.cc in the WebSockets...7.5 High
- apache cxfUncontrolled Resource Consumption in Apache CXF4.3 Medium
- apache cxfUncontrolled Resource Consumption in Apache CXF4.3 Medium
- ibm security access manager for web appliance, security access manager for web software +1 moreThe Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager ...7.1 High
- nettyNetty denial of service vulnerability5.0 Medium
- microsoft internet explorerMultiple use-after-free vulnerabilities in Microsoft Internet Explorer 6 through 11 allow remote...7.6 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers...10.0 High
- ruby-lang ruby** DISPUTED ** The openssl extension in Ruby 2.x does not properly maintain the state of process...5.8 Medium
- cisco adaptive security appliance softwareMemory leak in the SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software...5.0 Medium
- cisco iosThe BGP Router process in Cisco IOS before 12.2(50)SY1 allows remote attackers to cause a denial...4.3 Medium
- cisco iosCisco IOS before 12.2(50)SY1 allows remote authenticated users to cause a denial of service ...6.8 Medium
- cisco iosMemory leak in Cisco IOS before 15.1(1)SY, when IKEv2 debugging is enabled, allows remote...5.0 Medium
- djangoproject django, canonical ubuntu linux +1 moreDjango Vulnerable to MySQL Injection10.0 High
- freebsdThe NFS server (nfsserver) in FreeBSD 8.3 through 10.0 does not acquire locks in the proper order...4.0 Medium
- vmware player, workstation +1 morevmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on...4.9 Medium
- juniper screenosJuniper ScreenOS 6.3 and earlier allows remote attackers to cause a denial of service (crash and...7.8 High
- xenThe netback driver in Xen, when using certain Linux versions that do not allow sleeping in...4.4 Medium
- google chromeUse-after-free vulnerability in content/renderer/renderer_webcolorchooser_impl.h in Google Chrome...7.5 High
- google chromeUse-after-free vulnerability in Free(b)soft Laboratory Speech Dispatcher 0.7.1, as used in Google...7.5 High
- google chromeUse-after-free vulnerability in the RenderBlock::addChildIgnoringAnonymousColumnBlocks function...7.5 High
- google chromeUse-after-free vulnerability in the HTMLBodyElement::insertedInto function in core/html...7.5 High
- google chromeUse-after-free vulnerability in the WebSharedWorkerStub::OnTerminateWorkerContext function in...7.5 High
- znc znc-msvcThe CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and...5.0 Medium
- microsoft officeThe XML parser in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013, and Office for Mac 2011,...5.0 Medium
- linux kernelDouble free vulnerability in the ioctx_alloc function in fs/aio.c in the Linux kernel before 3.12...4.6 Medium
- cisco iosThe packet driver in Cisco IOS allows remote attackers to cause a denial of service (device...6.1 Medium
- oracle vm virtualboxMultiple array index errors in programs that are automatically generated by VBox/HostServices...6.9 Medium
- oracle vm virtualboxVBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x...4.4 Medium
- adobe flash playerUse-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x...10.0 High
- siemens simatic s7 cpu-1211c, simatic s7 cpu 1200 firmware, simatic s7 cpu 1212c +3 more +5 moreSiemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause...7.8 High
- siemens simatic s7 cpu-1211c, simatic s7 cpu 1200 firmware, simatic s7 cpu 1212c +3 more +5 moreSiemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause...7.8 High
- Show moreLoading…