CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- cisco 300 series managed switch firmwareThe web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote...5.3 Medium
- cisco wide area application servicescifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and...7.5 High
- wolfsslwolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service ...7.5 High
- f5 big-ip analytics, big-ip edge gateway, big-iq cloud +15 more +17 moreMemory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2...7.5 High
- ibm websphere mq lightIBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service ...5.3 Medium
- juniper junosJuniper Junos OS before 13.2X51-D36, 14.1X53 before 14.1X53-D25, and 15.2 before 15.2R1 on EX4300...5.3 Medium
- juniper junosJuniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3...5.3 Medium
- cisco aironet access point softwareThe IP ingress packet handler on Cisco Aironet 1800 devices with software 8.1(112.3) and 8.1(112...7.5 High
- huawei espace 7910, espace 7950 +1 moreHuawei eSpace 7910 and 7950 IP phones with software before V200R002C00SPC800 allow remote...7.5 High
- huawei espace 8950Memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 allows remote...7.5 High
- owncloud, owncloud server +1 moreownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote...8.5 High
- google androidThe System V IPC implementation in the kernel in Android before 6.0 2016-01-01 allows attackers...6.2 Medium
- cisco ios xrCisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly...7.5 High
- ibm mashups centerThe Lotus Mashups component in IBM Mashup Center 3.0.0.1 allows remote authenticated users to...7.7 High
- spi-inc ganetiThe RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2...7.5 High
- cisco ios xeCisco IOS XE 16.1.1 allows remote attackers to cause a denial of service (device reload) via a...6.5 Medium
- ibm websphere portalIBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0...4.3 Medium
- xenThe libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of...7.8 High
- cisco unified communications managerThe WebApplications Identity Management subsystem in Cisco Unified Communications Manager 10.5(0...5.0 Medium
- samba, canonical ubuntu linux, debian linux +2 moreThe LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return...7.5 High
- sambaThe ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP...5.3 Medium
- cisco integrated management controller supervisorThe Supervisor 1.0.0.0 and 1.0.0.1 in Cisco Integrated Management Controller (IMC) before 2.0(9)...6.8 Medium
- cisco unified communications domain managerThe self-service application in Cisco Unified Communications Domain Manager (CUCDM) 10.6(1)...4.0 Medium
- cisco unified computing systemCisco Unified Computing System (UCS) 2.2(3f)A on Fabric Interconnect 6200 devices allows remote...7.1 High
- moodleAtto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote attackers to cause a...6.8 Medium
- cisco nx-osThe kernel in Cisco NX-OS 5.2(9)N1(1) on Nexus 5000 devices allows local users to cause a denial...4.9 Medium
- cisco unified sip phone 3900 firmwareCisco Unified SIP 3905 phones allow remote attackers to cause a denial of service (resource...7.8 High
- cisco web security applianceThe passthrough FTP feature on Cisco Web Security Appliance (WSA) devices with software 8.0.7-142...5.0 Medium
- qemu, debian linux +1 moreThe eepro100 emulator in QEMU qemu-kvm blank allows local guest users to cause a denial of...6.5 Medium
- cisco asr 5000 series softwareCisco ASR 5000 devices with software 16.0(900) allow remote attackers to cause a denial of...5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +10 more +12 moreNokogiri subject to DoS via libxml2 vulnerability7.1 High
- cisco adaptive security appliance softwareThe XML parser in the management interface in Cisco Adaptive Security Appliance (ASA) Software 8...6.8 Medium
- cisco virtual topology systemCisco Virtual Topology System (VTS) 2.0(0) and 2.0(1) allows remote attackers to cause a denial...7.8 High
- huawei ne router softwareHuawei NE20E-S, NE40E-M, and NE40E-M2 routers with software before V800R007C10SPC100 and NE40E...5.0 Medium
- debian linux, linux kernel, xen +3 more +5 moreThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS...4.7 Medium
- ibm websphere portalIBM WebSphere Portal 8.0.0.1 before CF19 and 8.5.0 before CF09 allows remote attackers to cause a...7.8 High
- cisco aironet access point softwareCisco Aironet 1800 devices with software 8.1(131.0) allow remote attackers to cause a denial of...7.8 High
- microsoft windows 10, windows 8, windows 8.1 +3 more +5 moreIPSec in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8...6.8 Medium
- debian linux, linux kernel, xen +2 more +4 moreThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS...4.9 Medium
- cisco web security applianceThe proxy-cache implementation in Cisco AsyncOS 8.0.x before 8.0.7-151, 8.1.x and 8.5.x before 8...7.8 High
- cisco content security management appliance, email security appliance, web security appliance +2 moreCisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x...7.8 High
- cisco web security applianceCisco AsyncOS 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7...7.8 High
- mediawikiMediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not throttle file...6.8 Medium
- mediawikiThe chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x...6.8 Medium
- xmlsoft libxml2, apple iphone os, mac os x +4 more +6 moreThe xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors,...2.6 Low
- cisco iosThe SIP implementation in Cisco IOS 15.5(3)M on Cisco Unified Border Element (CUBE) devices...5.0 Medium
- xenThe (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post...2.1 Low
- xenThe p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is...4.9 Medium
- xenXen 4.4.x, 4.5.x, and 4.6.x does not limit the number of printk console messages when reporting...2.1 Low
- xenMultiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with...4.9 Medium
- Show moreLoading…