Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-399

CWE-399: Resource Management Errors

Weaknesses in this category are related to improper management of system resources.

From the CWE List. © The MITRE Corporation.

Newest

Known exploitedIn KEVPublic exploitFix available

wireshark, oracle linux, solaris +2 moreMultiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the...CVE-2015-3812Fix available7.8 HighNovember 14, 2014
wiresharkThe dissect_write_structured_field function in epan/dissectors/packet-tn5250.c in the TN5250...CVE-2014-8714Fix available5.0 MediumNovember 14, 2014
wiresharkThe build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in...CVE-2014-8712Fix available5.0 MediumNovember 14, 2014
adobe flash playerAdobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X...CVE-2015-0339Fix available10.0 HighNovember 14, 2014
adobe flash playerAdobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X...CVE-2015-0335Fix available10.0 HighNovember 14, 2014
adobe flash playerAdobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X...CVE-2015-0333Fix available10.0 HighNovember 14, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or...CVE-2014-6353EPSS 15.5%9.3 HighNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-6351EPSS 22.5%9.3 HighNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial...CVE-2014-6348EPSS 15.7%9.3 HighNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...CVE-2014-6347EPSS 15.5%9.3 HighNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a...CVE-2014-6344EPSS 15.5%9.3 HighNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-6343EPSS 15.5%9.3 HighNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial...CVE-2014-6342EPSS 15.5%9.3 HighNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-6341EPSS 15.5%9.3 HighNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause...CVE-2014-6337EPSS 15.5%9.3 HighNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-4143EPSS 20.9%9.3 HighNovember 11, 2014
linux kernelThe instruction decoder in arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel before...CVE-2014-84814.9 MediumNovember 10, 2014
linux kernelThe instruction decoder in arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel before...CVE-2014-84804.9 MediumNovember 10, 2014
katelloKatello allows remote attackers to cause a denial of service (memory consumption) via the (1)...CVE-2014-37125.0 MediumNovember 3, 2014
openstack nova, redhat openstack +1 moreOpenStack Nova VMware instance leak potentially leading to compute DoSCVE-2014-8333Fix available4.0 MediumOctober 31, 2014
openstack nova, redhat openstack +1 moreOpenStack Compute (Nova) Denial of Service vulnerabilityCVE-2014-3708Fix available4.0 MediumOctober 31, 2014
apache cxfLoop with Unreachable Exit Condition in Apache CXFCVE-2014-3584Fix available5.0 MediumOctober 30, 2014
ibm websphere portalIBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2...CVE-2014-48143.5 LowOctober 28, 2014
cisco asr901, ios +1 moreCisco IOS 15.4(3)S0b on ASR901 devices makes incorrect decisions to use the CPU for IPv4 packet...CVE-2014-32935.0 MediumOctober 28, 2014
php, apple mac os x, hp system management homepage +9 more +11 moreAlgorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c...CVE-2015-4024Fix availableEPSS 41.8%5.0 MediumOctober 28, 2014
freebsdnamei in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service ...CVE-2014-37115.0 MediumOctober 27, 2014
cisco ios, ios xe +1 moreThe Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and...CVE-2014-34096.1 MediumOctober 25, 2014
calender base project baseThe Calendar Base (cal) extension before 1.5.9 and 1.6.x before 1.6.1 for TYPO3 allows remote...CVE-2014-83257.8 HighOctober 22, 2014
nodejs node.jsDenial-of-Service Memory Exhaustion in qsCVE-2014-7191Fix available5.0 MediumOctober 19, 2014
ioserverIOServer before Beta2112.exe allows remote attackers to cause a denial of service (out-of-bounds...CVE-2014-54255.0 MediumOctober 19, 2014
cisco telepresence mcu softwareThe network stack in Cisco TelePresence MCU Software before 4.3(2.30) allows remote attackers to...CVE-2014-33977.8 HighOctober 19, 2014
cisco expressway software, telepresence video communication server software +1 moreCisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allow...CVE-2014-33707.1 HighOctober 19, 2014
cisco expressway software, telepresence video communication server software +1 moreThe SIP IX implementation in Cisco TelePresence Video Communication Server (VCS) and Expressway...CVE-2014-33697.1 HighOctober 19, 2014
cisco expressway software, telepresence video communication server software +1 moreCisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow...CVE-2014-33687.8 HighOctober 19, 2014
openstack swiftOpenStack Swift metadata constraints are not correctly enforcedCVE-2014-7960Fix available4.0 MediumOctober 17, 2014
jenkins, redhat openshift +1 moreJenkins Denial of Service vulnerabilityCVE-2014-3661Fix available5.0 MediumOctober 16, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or...CVE-2014-4127EPSS 16.4%9.3 HighOctober 15, 2014
microsoft .net frameworkMicrosoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly parse...CVE-2014-4121EPSS 19.2%10.0 HighOctober 15, 2014
microsoft windows server 2003, windows server 2008, windows vista +2 morefastfat.sys (aka the FASTFAT driver) in the kernel-mode drivers in Microsoft Windows Server 2003...CVE-2014-41157.2 HighOctober 15, 2014
juniper junosJuniper Junos 11.4 before R12-S4, 12.1X44 before D35, 12.1X45 before D30, 12.1X46 before D25, 12...CVE-2014-63787.8 HighOctober 14, 2014
juniper junos eJuniper JunosE before 13.3.3p0-1, 14.x before 14.3.2, and 15.x before 15.1.0, when DEBUG severity...CVE-2014-63777.8 HighOctober 14, 2014
huawei e5332, e5332 firmware +1 moreBuffer overflow in the Webserver component on the Huawei E5332 router before 21.344.27.00.1080...CVE-2014-53286.8 MediumOctober 12, 2014
huawei e5332, e5332 firmware +1 moreBuffer overflow in the Webserver component on the Huawei E5332 router before 21.344.27.00.1080...CVE-2014-53276.8 MediumOctober 12, 2014
cisco asaThe DNS inspection engine in Cisco ASA Software 9.0 before 9.0(4.13), 9.1 before 9.1(5.7), and 9...CVE-2014-33887.8 HighOctober 10, 2014
cisco asaThe SunRPC inspection engine in Cisco ASA Software 7.2 before 7.2(5.14), 8.2 before 8.2(5.51), 8...CVE-2014-33877.8 HighOctober 10, 2014
cisco asaThe GPRS Tunneling Protocol (GTP) inspection engine in Cisco ASA Software 8.2 before 8.2(5.51), 8...CVE-2014-33867.8 HighOctober 10, 2014
cisco asaThe IKEv2 implementation in Cisco ASA Software 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 9.0...CVE-2014-33847.8 HighOctober 10, 2014
cisco asaThe IKE implementation in the VPN component in Cisco ASA Software 9.1 before 9.1(5.1) allows...CVE-2014-33837.8 HighOctober 10, 2014
google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as...CVE-2014-3199Fix available5.0 MediumOctober 8, 2014
google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreGoogle V8, as used in Google Chrome before 38.0.2125.101, does not properly track JavaScript heap...CVE-2014-3195Fix available5.0 MediumOctober 8, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open