CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- cisco ios xeCisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of...7.8 High
- polarssl, opensuse +1 moreMemory leak in PolarSSL before 1.3.9 allows remote attackers to cause a denial of service (memory...7.8 High
- f5 big-iq adc, big-iq cloud, big-ip access policy manager +9 more +11 moreMemory leak in the virtual server component in F5 Big-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM,...7.8 High
- apache tapestryApache Tapestry Unsafe Object Storage7.8 High
- cisco telepresence video communication server softwareCisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote attackers to...5.0 Medium
- cisco telepresence video communication server softwareCisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote attackers to...5.0 Medium
- cisco nx-osNexus Data Broker (NDB) on Cisco Nexus 3000 devices with software 6.0(2)A6(1) allows remote...5.0 Medium
- cisco nx-osThe global-configuration implementation on Cisco ASR 9000 devices with software 5.1.3 and 5.3.0...4.9 Medium
- cisco nx-osCisco NX-OS on Nexus 9000 devices 11.1(1c) allows remote authenticated users to cause a denial of...6.8 Medium
- linux kernelThe vhost_dev_ioctl function in drivers/vhost/vhost.c in the Linux kernel before 4.1.5 allows...2.1 Low
- djangoproject django, canonical ubuntu linux, oracle solaris +2 moreDenial-of-service possibility in logout() view by filling session store5.0 Medium
- djangoproject django, canonical ubuntu linux, oracle solaris +2 moreDjango denial of service via empty session record creation5.0 Medium
- apple mac os xThe fasttrap driver in the kernel in Apple OS X before 10.10.5 allows local users to cause a...4.9 Medium
- openstack glanceOpenStack Glance before 2015.1.1 (kilo) allows remote authenticated users to cause a denial of...4.0 Medium
- owncloud, owncloud server +1 moreThe filename sanitization component in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0...7.8 High
- garrettcom magnum 10k firmware, magnum 6k firmware +1 moreThe web-server component in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K...3.5 Low
- ibm websphere mq lightIBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk...7.8 High
- ibm websphere mq lightIBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk...7.8 High
- ibm websphere mq lightIBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk...7.8 High
- ibm websphere mq lightIBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (CPU consumption...7.8 High
- cisco ios xeCisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers...7.8 High
- cisco ios xeThe packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to...5.0 Medium
- cisco ios, ios xe +1 moreThe TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.4(23)JY,...7.1 High
- cisco ios xrThe Local Packet Transport Services (LPTS) implementation in Cisco IOS XR 5.1.2, 5.1.3, 5.2.1,...5.0 Medium
- cisco videoscape policy resource managerCisco Videoscape Policy Resource Manager (PRM) 3.5.4 allows remote attackers to cause a denial of...7.8 High
- cisco prime collaborationCisco Prime Collaboration Assurance 10.0 allows remote attackers to cause a denial of service ...5.0 Medium
- ruby-lang rubyThe URI.decode_www_form_component method in Ruby before 1.9.2-p330 allows remote attackers to...7.5 High
- cisco asr 5000 series softwareThe Packet Data Network Gateway (aka PGW) component on Cisco ASR 5000 devices with software 18.0...5.0 Medium
- juniper junosIPv6 sendd in Juniper Junos 12.1X44 before 12.1X44-D51, 12.1X46 before 12.1X46-D36, 12.1X46...5.0 Medium
- juniper junosThe Juniper EX4600, QFX3500, QFX3600, and QFX5100 switches with Junos 13.2X51-D15 through 13.2X51...5.0 Medium
- juniper junosThe BFD daemon in Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12...9.3 High
- juniper junosJuniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47...7.1 High
- djangoproject djangoDjango ReDoS in validators.URLValidator7.8 High
- cisco unified communications managerThe Tomcat throttling feature in Cisco Unified Communications Manager 10.5(1.99995.9) allows...4.0 Medium
- cisco email security appliance, email security appliance firmware +1 moreCisco AsyncOS on Email Security Appliance (ESA) devices with software 8.5.6-073, 8.5.6-074, and 9...4.3 Medium
- powerdns authoritative, recursor +1 moreThe label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3...7.8 High
- cisco ios xeThe PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote...6.1 Medium
- cisco ip communicatorCisco IP Communicator 8.6(4) allows remote attackers to cause a denial of service (service outage...5.0 Medium
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango Denial-of-service by filling session store7.8 High
- cisco headend system releaseMemory leak in Cisco Headend System Release allows remote attackers to cause a denial of service ...7.8 High
- linux kernel, redhat enterprise linux server aus +1 moreThe (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide...5.0 Medium
- cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) Software 9.3(2.243) and 100.13(0.21) allows remote...6.1 Medium
- apple iphone osMobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs,...4.3 Medium
- xmlsoft libxml, apple iphone os, mac os x +8 more +10 moreNokogiri vulnerable to libxml XML Entity Expansion5.0 Medium
- cisco adaptive security appliance softwareThe SNMP implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4(7) and 8.6(1.2)...6.8 Medium
- cisco digital content managerCisco Digital Content Manager (DCM) 15.0.0 might allow remote ad servers to cause a denial of...5.4 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreThe (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not...7.8 High
- cisco unified ip phones 9900 series firmwareThe packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support...7.1 High
- cisco headend system releaseMemory leak in Cisco Headend System Release allows remote attackers to cause a denial of service ...7.8 High
- cisco ios xrCisco IOS XR 5.1.3 allows remote attackers to cause a denial of service (process reload) via...5.0 Medium
- Show moreLoading…