Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-399

CWE-399: Resource Management Errors

Weaknesses in this category are related to improper management of system resources.

From the CWE List. © The MITRE Corporation.

Newest

Known exploitedIn KEVPublic exploitFix available

cisco unified communications domain managerCisco Unified Communication Domain Manager Platform Software allows remote attackers to cause a...CVE-2014-80205.0 MediumJanuary 10, 2015
ibm sterling b2b integrator, sterling file gateway +1 moreThe HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2...CVE-2014-61995.0 MediumJanuary 10, 2015
file project fileThe ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via...CVE-2014-9620Fix available5.0 MediumJanuary 8, 2015
apache poi, fedoraproject fedora +1 moreLoop with Unreachable Exit Condition in Apache POICVE-2014-9527Fix available5.0 MediumJanuary 6, 2015
linux kernelThe batadv_frag_merge_packets function in net/batman-adv/fragmentation.c in the B.A.T.M.A.N....CVE-2014-9428Fix available7.8 HighJanuary 2, 2015
imagemagick, canonical ubuntu linux, opensuse leap +3 more +5 morecoders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application...CVE-2014-9854Fix available7.5 HighDecember 31, 2014
imagemagick, canonical ubuntu linux, novell leap +7 more +9 moreMemory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service ...CVE-2014-9853Fix available5.5 MediumDecember 31, 2014
imagemagick, canonical ubuntu linux, opensuse +5 more +7 moreLogic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource...CVE-2014-9850Fix available7.5 HighDecember 31, 2014
imagemagick, canonical ubuntu linux, opensuse leap +6 more +8 moreMemory leak in ImageMagick allows remote attackers to cause a denial of service (memory...CVE-2014-9848Fix available7.5 HighDecember 31, 2014
gnu patch, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreGNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service (memory...CVE-2014-9637Fix available5.5 MediumDecember 31, 2014
sensiolabs symfonySymfony Denial of Service Via Long Password HashingCVE-2013-5958Fix available5.0 MediumDecember 27, 2014
cisco ironport email security appliancesThe Cisco IronPort Email Security Appliance (ESA) allows remote attackers to cause a denial of...CVE-2014-80165.0 MediumDecember 19, 2014
ibm db2IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before...CVE-2014-89014.0 MediumDecember 18, 2014
file project file, canonical ubuntu linux, freebsd +1 more +3 moreThe ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of...CVE-2014-8116Fix available5.0 MediumDecember 17, 2014
zenoss coreZenoss Core through 5 Beta 3 does not properly detect recursion during entity expansion, which...CVE-2014-62595.0 MediumDecember 15, 2014
zenoss coreAn unspecified endpoint in Zenoss Core through 5 Beta 3 allows remote attackers to cause a denial...CVE-2014-62585.0 MediumDecember 15, 2014
bsd, freebsd, netbsd +1 more +3 moreThe TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly...CVE-2014-72505.0 MediumDecember 12, 2014
microsoft internet explorer, vbscript +1 morevbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11...CVE-2014-6363Public exploitEPSS 28.4%9.3 HighDecember 11, 2014
apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows...CVE-2014-44756.8 MediumDecember 10, 2014
apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows...CVE-2014-44746.8 MediumDecember 10, 2014
apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows...CVE-2014-44736.8 MediumDecember 10, 2014
apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows...CVE-2014-44726.8 MediumDecember 10, 2014
apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows...CVE-2014-44716.8 MediumDecember 10, 2014
apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows...CVE-2014-44706.8 MediumDecember 10, 2014
apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows...CVE-2014-44696.8 MediumDecember 10, 2014
apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows...CVE-2014-44686.8 MediumDecember 10, 2014
apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows...CVE-2014-44667.5 HighDecember 10, 2014
powerdns recursor, debian linux +1 morePowerDNS Recursor before 3.6.2 does not limit delegation chaining, which allows remote attackers...CVE-2014-8601Fix availableEPSS 68.9%5.0 MediumDecember 10, 2014
nlnetlabs unbound, canonical ubuntu linux, debian linux +2 moreiterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation chaining, which allows...CVE-2014-8602Fix availableEPSS 32.2%4.3 MediumDecember 10, 2014
elipse e3, power, scada +2 moreDNP Master Driver 3.02 and earlier in Elipse SCADA 2.29 build 141 and earlier, E3 1.0 through 4.6...CVE-2014-54295.0 MediumDecember 6, 2014
iij seil b1 firmware, seil plus, seil plus firmware +5 more +7 moreThe (1) PPP Access Concentrator (PPPAC) and (2) Dial-Up Networking Internet Initiative Japan Inc....CVE-2014-72567.8 HighDecember 5, 2014
phpmyadminlibraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.7, 4.1.x before 4.1.14.8, and 4.2.x...CVE-2014-9218Public exploitFix availableEPSS 11.5%5.0 MediumDecember 5, 2014
gnome gnome-shell, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 moreGNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the...CVE-2014-7300Fix available7.2 HighDecember 1, 2014
openvpn, canonical ubuntu linux, debian linux +3 more +5 moreOpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote...CVE-2014-8104Fix available6.8 MediumDecember 1, 2014
cisco ios xrCisco IOS XR allows remote attackers to cause a denial of service (LISP process reload) by...CVE-2014-80045.0 MediumNovember 25, 2014
digium asterisk, certified asterisk +1 moreConfBridge in Asterisk 11.x before 11.14.1 and Certified Asterisk 11.6 before 11.6-cert8 does not...CVE-2014-8414Fix available5.0 MediumNovember 24, 2014
openstack neutron, redhat openstack, fedoraproject fedora +2 moreOpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users...CVE-2014-7821Fix available4.0 MediumNovember 24, 2014
ibm security network protection firmware, security network protection xgs 5000, security network protection xgs 5100 +2 moreIBM Security Network Protection 5.1 before 5.1.0.0 FP13, 5.1.1 before 5.1.1.0 FP8, 5.1.2 before 5...CVE-2014-61834.0 MediumNovember 23, 2014
ibm sterling selling and fulfillment foundationSterling Order Management in IBM Sterling Selling and Fulfillment Suite 9.3.0 before FP8 allows...CVE-2014-48074.0 MediumNovember 23, 2014
polarsslMemory leak in PolarSSL before 1.2.12 and 1.3.x before 1.3.9 allows remote attackers to cause a...CVE-2014-8628Fix available7.8 HighNovember 22, 2014
moodleMoodle allows attackers to cause a denial of serviceCVE-2014-7847Fix available5.0 MediumNovember 22, 2014
faronics deep freezeThe DfDiskLo.sys driver in Faronics Deep Freeze Standard and Enterprise 8.10 and earlier allows...CVE-2014-23827.2 HighNovember 20, 2014
google chromeUse-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows...CVE-2014-79067.5 HighNovember 19, 2014
google chromeUse-after-free vulnerability in the CPDF_Parser::IsLinearizedFile function in fpdfapi/fpdf_parser...CVE-2014-7900Fix available7.5 HighNovember 19, 2014
google chromeMultiple use-after-free vulnerabilities in modules/screen_orientation/ScreenOrientationController...CVE-2014-7907Fix available7.5 HighNovember 19, 2014
apple iphone os, tvos +1 moreWebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to...CVE-2014-44625.8 MediumNovember 18, 2014
apple iphone os, itunes, safari +1 more +3 moreWebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to...CVE-2014-44525.4 MediumNovember 18, 2014
canonical ubuntu linux, debian linux, freedesktop dbus +1 more +3 moreD-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local...CVE-2014-7824Fix available2.1 LowNovember 15, 2014
cisco iosThe DHCP implementation in Cisco IOS on Aironet access points does not properly handle error...CVE-2014-79976.1 MediumNovember 15, 2014
redhat enterprise linux desktop, enterprise linux server, enterprise linux server aus +4 more +6 moreThe mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service ...CVE-2014-8567Fix available9.4 HighNovember 14, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open