Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-399

CWE-399: Resource Management Errors

Weaknesses in this category are related to improper management of system resources.

From the CWE List. © The MITRE Corporation.

Newest

Known exploitedIn KEVPublic exploitFix available

fedoraproject sssdMemory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in...CVE-2015-5292Fix available6.8 MediumOctober 29, 2015
openstack novaOpenStack Compute (nova) allows remote authenticated users to cause a denial of serviceCVE-2015-3280Fix available6.8 MediumOctober 26, 2015
cisco adaptive security appliance softwareThe IKEv1 implementation in Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8...CVE-2015-63277.8 HighOctober 25, 2015
cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before...CVE-2015-63267.8 HighOctober 25, 2015
cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before...CVE-2015-63257.1 HighOctober 25, 2015
cisco adaptive security appliance softwareThe DHCPv6 relay implementation in Cisco Adaptive Security Appliance (ASA) software 9.0 before 9...CVE-2015-63247.1 HighOctober 25, 2015
apple iphone os, mac os x +1 moreThe kernel in Apple iOS before 9.1 and OS X before 10.11.1 mishandles reuse of virtual memory,...CVE-2015-69947.1 HighOctober 23, 2015
juniper junosThe SSH server in Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before...CVE-2015-77527.8 HighOctober 19, 2015
juniper junosJuniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3...CVE-2014-64495.0 MediumOctober 16, 2015
linux kernelThe Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests...CVE-2013-7445Fix available7.8 HighOctober 16, 2015
revive-adserver revive adserverRevive Adserver before 3.2.2 does not restrict access to run-mpe.php, which allows remote...CVE-2015-73715.0 MediumOctober 14, 2015
cisco prime infrastructureCisco Prime Infrastructure 2.2 allows remote attackers to cause a denial of service (daemon hang)...CVE-2015-63325.0 MediumOctober 13, 2015
cisco ucs b-series blade server softwareCisco Unified Computing System (UCS) B Blade Server Software 2.2.x before 2.2.6 allows local...CVE-2015-42654.9 MediumOctober 12, 2015
cisco iosThe RADIUS client implementation in Cisco IOS 15.4(3)M2.2, when a shared RADIUS secret is...CVE-2015-62636.3 MediumOctober 12, 2015
unzip project unzip, canonical ubuntu linux, debian linux +2 moreInfo-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (infinite loop) via empty...CVE-2015-7697Fix available4.3 MediumOctober 12, 2015
apple mac os xlibxpc in launchd in Apple OS X before 10.11 does not restrict the creation of processes for...CVE-2015-77605.0 MediumOctober 9, 2015
cisco wireless lan controllerCisco Wireless LAN Controller (WLC) devices with software 7.0(240.0), 7.3(101.0), and 7.4(1.19)...CVE-2015-63116.1 MediumOctober 8, 2015
cisco unified communications manager im and presence serviceThe REST interface in Cisco Unified Communications Manager IM and Presence Service 11.5(1) allows...CVE-2015-63105.0 MediumOctober 8, 2015
email-address project email-addressAlgorithmic complexity vulnerability in Address.pm in the Email-Address module 1.908 and earlier...CVE-2015-7686Fix available7.8 HighOctober 3, 2015
mitsubishi electric melsec fx3gThe HTTP application on Mitsubishi Electric MELSEC FX3G PLC devices before April 2015 allows...CVE-2015-39387.8 HighOctober 3, 2015
cisco email security appliance, email security appliance firmware +1 moreCisco Email Security Appliance (ESA) 8.5.6-106 and 9.6.0-042 allows remote authenticated users to...CVE-2015-63096.8 MediumOctober 2, 2015
cisco nx-osCisco NX-OS 6.0(2)U6(0.46) on N3K devices allows remote authenticated users to cause a denial of...CVE-2015-63084.0 MediumOctober 2, 2015
apache httpclient, canonical ubuntu linux, fedoraproject fedora +2 moreDenial of service vulnerability in org.apache.httpcomponents:httpclientCVE-2015-5262Fix availableEPSS 18.8%4.3 MediumSeptember 30, 2015
freetype, debian linux +1 moreThe t42_parse_encoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly...CVE-2014-9747Fix available7.5 HighSeptember 29, 2015
cisco firepowerCisco FirePOWER (formerly Sourcefire) 7000 and 8000 devices with software 5.4.0.1 allow remote...CVE-2015-63076.1 MediumSeptember 28, 2015
cisco wireless lan controller softwareThe RADIUS functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.0(250.0)...CVE-2015-63025.0 MediumSeptember 25, 2015
cisco ios xeCisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS...CVE-2015-62827.8 HighSeptember 25, 2015
symantec endpoint protectionsysplant.sys in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allows...CVE-2014-92284.9 MediumSeptember 20, 2015
cisco asr 9001, asr 9006, asr 9010 +4 more +6 moreThe DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5.2.0 Base allows remote...CVE-2015-63015.0 MediumSeptember 20, 2015
cisco nx-osCisco NX-OS 6.1(2)I3(4) and 7.0(3)I1(1) on Nexus 9000 (N9K) devices allows remote attackers to...CVE-2015-62954.8 MediumSeptember 20, 2015
cisco ios xrThe DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5.2.0 Base allows remote...CVE-2015-62975.0 MediumSeptember 18, 2015
cisco ios, ios xe +1 moreCisco IOS 15.2(3)E and earlier and IOS XE 3.6(2)E and earlier allow remote attackers to cause a...CVE-2015-62946.1 MediumSeptember 18, 2015
owncloud serverDirectory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows...CVE-2015-65007.5 HighSeptember 18, 2015
ibm websphere portalIBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.x through 7...CVE-2015-19437.8 HighSeptember 14, 2015
cisco content security management applianceCisco Content Security Management Appliance (SMA) 7.8.0-000 does not properly validate...CVE-2015-62885.0 MediumSeptember 14, 2015
cisco web security virtual applianceCisco Web Security Appliance (WSA) 8.0.6-078 and 8.0.6-115 allows remote attackers to cause a...CVE-2015-62875.0 MediumSeptember 14, 2015
cisco application visibility and controlCisco Application Visibility and Control (AVC) 15.3(3)JA, when FlexConnect is enabled, allows...CVE-2015-62865.7 MediumSeptember 14, 2015
ibm websphere mqIBM WebSphere MQ 7.0.1 before 7.0.1.13 allows remote attackers to cause a denial of service ...CVE-2015-20135.0 MediumSeptember 14, 2015
freetype, canonical ubuntu linux, debian linux +1 more +3 moreThe parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to...CVE-2014-9745Fix available5.0 MediumSeptember 10, 2015
openstack novaOpenStack Nova instance migration process does not stop when instance is deletedCVE-2015-3241Fix available6.8 MediumSeptember 8, 2015
invisioncommunity invision power boardInvision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board)...CVE-2015-68127.8 HighSeptember 4, 2015
cisco 1000v, mds 9000, nx-os +1 more +3 moreThe ARP implementation in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 5.2(1)SV3(1.4),...CVE-2015-62776.1 MediumSeptember 2, 2015
mediawikiGeSHi, as used in the SyntaxHighlight_GeSHi extension and MediaWiki before 1.23.10, 1.24.x before...CVE-2015-67335.0 MediumSeptember 1, 2015
cisco ios xeCisco IOS XE 2.1.0 through 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer...CVE-2015-62727.8 HighAugust 31, 2015
cisco ios xeCisco IOS XE 2.1.0 through 2.4.3 and 2.5.0 on ASR 1000 devices, when NAT Application Layer...CVE-2015-62717.8 HighAugust 31, 2015
cisco ios xeCisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of...CVE-2015-62707.8 HighAugust 31, 2015
cisco ios xeCisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of...CVE-2015-62697.8 HighAugust 31, 2015
linux kernelThe perf_callchain_user_64 function in arch/powerpc/perf/callchain.c in the Linux kernel before 4...CVE-2015-6526Fix available4.9 MediumAugust 31, 2015
cisco ios xeCisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment...CVE-2015-62737.8 HighAugust 29, 2015
cisco ios xeCisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of...CVE-2015-62687.8 HighAugust 29, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open