CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- ibm websphere portalIBM WebSphere Portal 8.5 through CF05 allows remote attackers to cause a denial of service (CPU...7.8 High
- cisco telepresence tc software, telepresence te software +1 moreThe network drivers in Cisco TelePresence T, Cisco TelePresence TE, and Cisco TelePresence TC...7.8 High
- wouter verhelst nbdThe modern style negotiation in Network Block Device (nbd-server) 2.9.22 through 3.3 allows...7.8 High
- cisco adaptive security appliance softwareThe Protocol Independent Multicast (PIM) application in Cisco Adaptive Security Appliance (ASA)...5.0 Medium
- ibm websphere mqThe cluster repository manager in IBM WebSphere MQ 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2...4.0 Medium
- unzoounzoo allows remote attackers to cause a denial of service (infinite loop and resource...7.8 High
- cisco wireless lan controller softwareThe wireless web-authentication subsystem on Cisco Wireless LAN Controller (WLC) devices 7.5.x...6.1 Medium
- cisco iosThe ISDN implementation in Cisco IOS 15.3S allows remote attackers to cause a denial of service ...6.1 Medium
- openinfosecfoundation suricata, debian linux +1 moreThe DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service ...5.0 Medium
- powerdns authoritative, recursor, fedoraproject fedora +2 moreThe label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x...7.8 High
- cisco starosThe session-manager service in Cisco StarOS 12.0, 12.2(300), 14.0, and 14.0(600) on ASR 5000...5.0 Medium
- cisco starosThe hamgr service in the IPv6 Proxy Mobile (PM) implementation in Cisco StarOS 18.1.0.59776 on...5.0 Medium
- cisco ios xeThe Overlay Transport Virtualization (OTV) implementation in Cisco IOS XE 3.10S allows remote...6.1 Medium
- cisco ios, ios xe +1 moreCisco IOS 15.5S and IOS XE allow remote authenticated users to cause a denial of service (device...6.8 Medium
- cisco ios, ios xe +1 moreCisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a...6.1 Medium
- ibm websphere portalThe Remote Document Conversion Service (DCS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27,...7.8 High
- python pillow, opensuse +1 morePillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin5.0 Medium
- debian linux, linux kernel +1 moreA certain backport in the TCP Fast Open implementation for the Linux kernel before 3.18 does not...4.9 Medium
- qemu, debian linux +1 moreThe (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have...4.9 Medium
- cisco ios xrCisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is...7.8 High
- inspire ircd inspircd, debian linux +1 moreInspIRCd before 2.0.7 allows remote attackers to cause a denial of service (infinite loop).7.5 High
- microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft office, office compatibility pack, office web apps +3 more +5 moreMicrosoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word...7.8 High
- mediawikiMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM, allows...7.1 High
- quassel-irc quasselStack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1...5.0 Medium
- quassel-irc quasselQuassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows...5.0 Medium
- mediawikiMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM or Zend...7.1 High
- mediawikiMediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers...7.1 High
- cisco ios xeCisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor (ESP) module, when...7.1 High
- cisco iosThe SNMP implementation in Cisco IOS 15.1(2)SG4 on Catalyst 4500 devices, when single-switch...6.3 Medium
- cisco nx-osThe SNMP implementation in Cisco NX-OS 6.1(2)I2(3) on Nexus 9000 devices, when a Reset High...6.3 Medium
- apache subversion, opensuse +1 moreThe mod_dav_svn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a...7.8 High
- redhat slapi-nisThe slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user...7.8 High
- mcafee data loss prevention endpointThe ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9...4.0 Medium
- gluster glusterfs, opensuse +1 moreThe __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a...5.0 Medium
- cisco ios xrThe DHCPv4 server in Cisco IOS XR 5.2.2 on ASR 9000 devices allows remote attackers to cause a...5.0 Medium
- cisco iosMemory leak in Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a...7.8 High
- cisco ios, ios xe +1 moreMemory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS...7.8 High
- cisco ios, ios xe +1 moreCisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3...7.8 High
- ibm general parallel file systemThe mmfslinux kernel module in IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5...4.9 Medium
- cisco videoscape delivery system for internet streamerThe DNS implementation in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.2...5.0 Medium
- moodleMoodle allows attackers to cause a denial of service6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows...6.8 Medium
- Show moreLoading…