Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-399

CWE-399: Resource Management Errors

Weaknesses in this category are related to improper management of system resources.

From the CWE List. © The MITRE Corporation.

Newest

Known exploitedIn KEVPublic exploitFix available

openinfosecfoundation suricataThe SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows...CVE-2014-6603Fix available5.0 MediumOctober 7, 2014
libvirtThe virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean...CVE-2014-3657Fix available5.0 MediumOctober 6, 2014
openstack novaOpenStack Compute (Nova)'s VMWare driver vulnerable to denial of serviceCVE-2014-3608Fix available2.7 LowOctober 6, 2014
rockwell automation allen-bradley micrologix 1400, rockwellautomation ab micrologix controller +1 moreRockwell Automation Micrologix 1400 Improper Input ValidationCVE-2014-54107.1 October 3, 2014
debian exuberant ctags, canonical ubuntu linux, debian linux +1 more +3 morejscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite...CVE-2014-7204Fix available5.0 MediumOctober 2, 2014
xenThe hvm_msr_read_intercept function in arch/x86/hvm/hvm.c in Xen 4.1 through 4.4.x uses an...CVE-2014-7188Fix available8.3 HighOctober 1, 2014
tp-link tl-wdr4300, tl-wdr4300 firmware +1 moreThe web server in the TP-LINK N750 Wireless Dual Band Gigabit Router (TL-WDR4300) with firmware...CVE-2014-47285.0 MediumSeptember 30, 2014
plonePlone denial of service via RSS Feed RequestCVE-2012-5506Fix available5.0 MediumSeptember 30, 2014
plonePlone is vulnerable to denial of serviceCVE-2012-5499Fix available5.0 MediumSeptember 30, 2014
plonePlone DoS via Crafted URLCVE-2012-5496Fix available5.0 MediumSeptember 30, 2014
linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreThe SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS...CVE-2014-7145Fix available7.8 HighSeptember 28, 2014
linux kernel, canonical ubuntu linux +1 morenet/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly validate...CVE-2014-6418Fix available7.1 HighSeptember 28, 2014
linux kernelnet/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly consider...CVE-2014-6417Fix available7.8 HighSeptember 28, 2014
cisco ios, ios xe +1 moreMemory leak in Cisco IOS 15.1 through 15.4 and IOS XE 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3...CVE-2014-33597.8 HighSeptember 25, 2014
linux kernelThe __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not...CVE-2014-6410Fix available4.7 MediumSeptember 24, 2014
cisco unified communications domain manager platformCisco Unified Communications Domain Manager Platform Software 4.4(.3) and earlier allows remote...CVE-2014-33805.0 MediumSeptember 24, 2014
ibm rational clearcaseIBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5...CVE-2014-31045.0 MediumSeptember 23, 2014
wiresharkThe SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark...CVE-2014-6432Fix available5.0 MediumSeptember 20, 2014
wiresharkThe dissect_hip_tlv function in epan/dissectors/packet-hip.c in the HIP dissector in Wireshark 1...CVE-2014-6426Fix available5.0 MediumSeptember 20, 2014
wiresharkThe tvb_raw_text_add function in epan/dissectors/packet-megaco.c in the MEGACO dissector in...CVE-2014-6423Fix available5.0 MediumSeptember 20, 2014
adobe acrobat, acrobat reader +1 moreUse-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0...CVE-2014-056010.0 HighSeptember 17, 2014
d-bus project d-bus, freedesktop dbus, opensuse +2 moreThe dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old...CVE-2014-3639Fix available2.1 LowSeptember 16, 2014
d-bus project d-bus, freedesktop dbus, opensuse +2 moreThe bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x...CVE-2014-3638Fix available2.1 LowSeptember 16, 2014
d-bus project d-bus, freedesktop dbus, opensuse +2 moreD-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a...CVE-2014-3636Fix available1.9 LowSeptember 16, 2014
ibm websphere portalIBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0...CVE-2014-47924.0 MediumSeptember 12, 2014
cisco telepresence system edge 75 mxp, telepresence system edge 85 mxp, telepresence system edge 95 mxp +1 more +3 moreMemory leak in Cisco TelePresence System Edge MXP Series Software F9.3.3 and earlier allows...CVE-2014-33627.8 HighSeptember 12, 2014
microsoft .net frameworkMicrosoft .NET Framework 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not...CVE-2014-4072EPSS 30.9%5.0 MediumSeptember 10, 2014
net-snmp, apple mac os x, canonical ubuntu linux +2 moresnmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers...CVE-2014-3565Fix available5.0 MediumSeptember 5, 2014
dhcpcd project dhcpcd, google android +1 moreThe get_option function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote DHCP servers to...CVE-2014-6060Fix available3.3 LowSeptember 4, 2014
cisco ios xrCisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote...CVE-2014-33537.1 HighSeptember 4, 2014
djangoproject django, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreDjango Denial-of-service possibility with strip_tagsCVE-2015-2316Fix available5.0 MediumSeptember 3, 2014
djangoproject django, canonical ubuntu linux +1 moreDjango DoS in django.views.static.serveCVE-2015-0221Fix available5.0 MediumSeptember 3, 2014
cisco ios, 1801 integrated service router, 1802 integrated service router +5 more +7 moreCisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled,...CVE-2014-33475.4 MediumAugust 28, 2014
xen, opensuse +1 moreCertain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables,...CVE-2014-5149Fix available4.7 MediumAugust 22, 2014
xen, opensuse +1 moreCertain MMU virtualization operations in Xen 4.2.x through 4.4.x before the xsa97-hap patch, when...CVE-2014-5146Fix available4.7 MediumAugust 22, 2014
djangoproject django, debian linux, opensuse +2 moreDjango denial of service via file upload namingCVE-2014-0481Fix available4.3 MediumAugust 22, 2014
apache subversion, apple xcode, opensuse +6 more +8 moreThe (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through...CVE-2015-0248Fix availableEPSS 12.8%5.0 MediumAugust 19, 2014
microsoft sql serverMicrosoft SQL Server 2008 SP3, 2008 R2 SP2, and 2012 SP1 does not properly control use of stack...CVE-2014-4061EPSS 26.5%6.8 MediumAugust 12, 2014
microsoft windows 7, windows 8, windows 8.1 +4 more +6 moreMemory leak in the Local RPC (LRPC) server implementation in Microsoft Windows 7 SP1, Windows...CVE-2014-0316EPSS 11.5%7.5 HighAugust 12, 2014
drupal, wordpress, debian linux +2 moreThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33...CVE-2014-5266Fix availableEPSS 25.2%5.0 MediumAugust 9, 2014
drupal, wordpress, debian linux +2 moreThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33...CVE-2014-5265Fix available5.0 MediumAugust 9, 2014
apache http serverMemory leak in the winnt_accept function in server/mpm/winnt/child.c in the WinNT MPM in the...CVE-2014-3523EPSS 16.8%5.0 MediumJuly 20, 2014
apache http serverThe mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism,...CVE-2014-0231Fix availableEPSS 44.7%5.0 MediumJuly 20, 2014
redhat cloudforms 3.0 management engineThe wait_for_task function in app/controllers/application_controller.rb in Red Hat CloudForms 3.0...CVE-2014-01805.0 MediumJuly 7, 2014
christos zoulas file, debian linux, php +2 morefile before 5.19 does not properly restrict the amount of data read during a regex search, which...CVE-2014-3538Fix availableEPSS 11.8%5.0 MediumJuly 3, 2014
apple iphone osCoreGraphics in Apple iOS before 7.1.2 does not properly restrict allocation of stack memory for...CVE-2014-13546.8 MediumJuly 1, 2014
cisco ios xr, asr 9001, asr 9006 +4 more +6 moreCisco IOS XR 4.1.2 through 5.1.1 on ASR 9000 devices, when a Trident-based line card is used,...CVE-2014-21767.1 HighJune 14, 2014
microsoft windows 7, windows 8, windows 8.1 +5 more +7 moreThe TCP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...CVE-2014-1811EPSS 18.2%5.0 MediumJune 11, 2014
misery project miseryThe Misery module 6.x-2.x before 6.x-2.5 and 7.x-2.x before 7.x-2.2 for Drupal, when the "delay...CVE-2013-45994.3 MediumJune 9, 2014
mambo-foundation mambo cmsMambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth...CVE-2013-25645.0 MediumJune 9, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open