CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- powerdns authoritativePowerDNS (aka pdns) Authoritative Server before 3.4.10 allows remote attackers to cause a denial...7.5 High
- juniper junosJuniper Junos OS before 13.3R9, 14.1R6 before 14.1R6-S1, and 14.1 before 14.1R7, when configured...6.5 Medium
- huawei rh1288 v3 server firmware, rh2288 v3 server firmware, rh2288h v3 server firmware +4 more +6 moreThe Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software...5.5 Medium
- f5 big-ip analytics, big-ip edge gateway, big-ip access policy manager +11 more +13 moreThe RESOLV::lookup iRule command in F5 BIG-IP LTM, APM, ASM, and Link Controller 10.2.1 through...7.5 High
- siemens en100 ethernet module firmwareA vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module :...7.5 High
- cisco webex wrf player t29Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to...5.5 Medium
- cisco wireless lan controller, wireless lan controller 6.0, wireless lan controller 7.0 +3 more +5 moreThe Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller...6.5 Medium
- phpmyadminphpMyAdmin Denial of service (DOS) attack with dbase extension5.9 Medium
- phpmyadminphpMyAdmin DoS Vulnerability5.9 Medium
- imagemagickMemory leak in AcquireVirtualMemory in ImageMagick before 7 allows remote attackers to cause a...7.5 High
- imagemagickcoders/dds.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of...6.5 Medium
- cisco ios xrMemory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on...7.5 High
- busyboxThe recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers...7.5 High
- cisco unified communications manager im and presence serviceCisco Unified Communications Manager IM and Presence Service 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7,...7.5 High
- wiresharkepan/dissectors/packet-mmse.c in the MMSE dissector in Wireshark 1.12.x before 1.12.13 allows...5.9 Medium
- linux kernelarch/powerpc/kvm/book3s_hv_rmhandlers.S in the Linux kernel through 4.7 on PowerPC platforms,...6.5 Medium
- juniper junosJuniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D23, 12.3X48 before 12.3X48-D25, and...5.9 Medium
- wiresharkepan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not...5.9 Medium
- wiresharkepan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to...5.9 Medium
- wiresharkepan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x...5.9 Medium
- wiresharkepan/dissectors/packet-wsp.c in the WSP dissector in Wireshark 1.12.x before 1.12.13 and 2.x...5.9 Medium
- cisco videoscape session resource managerCisco Videoscape Session Resource Manager (VSRM) allows remote attackers to cause a denial of...6.5 Medium
- cisco nx-osCisco Nexus 1000v Application Virtual Switch (AVS) devices before 5.2(1)SV3(1.5i) allow remote...6.5 Medium
- cisco wireless lan controller softwareCisco Wireless LAN Controller (WLC) devices 7.4(121.0) and 8.0(0.30220.385) allow remote...6.5 Medium
- cisco ios, ios xe +1 moreCisco IOS 12.4 and 15.0 through 15.5 and IOS XE 3.13 through 3.17 allow remote authenticated...5.3 Medium
- cisco ios xrCisco IOS XR 5.x through 5.2.5 on NCS 6000 devices allows remote attackers to cause a denial of...7.5 High
- google androidThe MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to...7.8 High
- google androiddecoder/impeg2d_bitstream.c in mediaserver in Android 6.x before 2016-07-01 allows attackers to...7.7 High
- google androidmediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before...7.5 High
- broadcom tcpreplaytcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial of service ...7.5 High
- apache http serverThe Apache HTTP Server 2.4.17 and 2.4.18, when mod_http2 is enabled, does not limit the number of...5.9 Medium
- phpmyadmin, opensuse leap, opensuse +2 morephpMyAdmin Denial Of Service (DOS) attack7.5 High
- cisco web security applianceThe proxy process on Cisco Web Security Appliance (WSA) devices through 9.1.0-070 allows remote...5.3 Medium
- huawei ar3200 firmwareMemory leak in Huawei AR3200 before V200R007C00SPC900 allows remote attackers to cause a denial...7.5 High
- huawei fusioncomputeHuawei FusionCompute before V100R005C10SPC700 allows remote authenticated users to cause a denial...6.5 Medium
- ibm websphere mqMemory leak in queue-manager agents in IBM WebSphere MQ 8.x before 8.0.0.5 allows remote...7.5 High
- siemens simatic s7-300 with profitnet support firmware, simatic s7-300 without profitnet support firmware +1 moreSiemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMATIC S7...7.5 High
- huawei firmwareMemory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500,...5.9 Medium
- cisco ios xeDouble free vulnerability in Cisco IOS XE 3.15S, 3.16S, and 3.17S allows remote authenticated...6.5 Medium
- cisco iosCisco IOS 15.5(3)M on Integrated Services Router (ISR) 800, 819, and 829 devices allows remote...7.5 High
- cisco ios xeCisco IOS XE 3.15S and 3.16S on cBR-8 Converged Broadband Router devices allows remote...6.5 Medium
- wiresharkepan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 1.12.x before 1.12.12...5.9 Medium
- wiresharkepan/dissectors/packet-dcerpc-spoolss.c in the SPOOLS component in Wireshark 1.12.x before 1.12...7.5 High
- canonical ubuntu linux, debian linux, google android +1 more +3 moreThe XML parser in Expat does not use sufficient entropy for hash initialization, which allows...7.5 High
- sensiolabs symfony, debian linux +1 moreSymphony Denial of Service Via Overlong Usernames7.5 High
- cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) Software 9.0 through 9.5.1 mishandles IPsec error...6.5 Medium
- cisco adaptive security appliance softwareThe XML parser in Cisco Adaptive Security Appliance (ASA) Software through 9.5.2 allows remote...6.5 Medium
- cisco web security appliance \(wsa\)Memory leak in Cisco AsyncOS through 8.8 on Web Security Appliance (WSA) devices allows remote...7.5 High
- cisco web security applianceMemory leak in Cisco AsyncOS 8.5 through 9.0 before 9.0.1-162 on Web Security Appliance (WSA)...7.5 High
- libgd, php +1 moreThe gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd)...7.5 High
- Show moreLoading…