CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- virglrenderer project virglrendererMemory leak in the virgl_resource_attach_backing function in virglrenderer before 0.6.0 allows...6.5 Medium
- libtiffLibTIFF allows remote attackers to cause a denial of service (memory consumption and crash) via a...5.5 Medium
- virglrenderer project virglrendererMemory leak in the vrend_renderer_context_create_internal function in vrend_decode.c in...6.5 Medium
- imagemagickMemory leak in the IsOptionMember function in MagickCore/option.c in ImageMagick before 6.9.2-2,...7.5 High
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar 7.2 could allow a remote attacker to consume all resources on the server due to not...7.5 High
- cisco netflow generation appliance softwareA vulnerability in the Stream Control Transmission Protocol (SCTP) decoder of the Cisco NetFlow...7.5 High
- zyxel nwa3560-n firmware, usg50 firmware +1 moreZyxel USG50 Security Appliance and NWA3560-N Access Point allow remote attackers to cause a...7.5 High
- simplesamlphp saml2, simplesamlphp +1 moreSimpleSAMLphp SAML2 spoof SAML responses9.1 Critical
- gnu glibcMemory leak in the __res_vinit function in the IPv6 name server management code in libresolv in...7.5 High
- moxa dacenterAn issue was discovered in Moxa DACenter Versions 1.4 and older. A specially crafted project file...5.5 Medium
- moxa softcmsAn issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver...7.5 High
- nlnetlabs nsdNSD before 4.1.11 allows remote DNS master servers to cause a denial of service (/tmp disk...7.5 High
- linux kernelThe crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the...7.8 High
- alinto sogoMemory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service (memory...6.5 Medium
- lepton project leptonThe setup_imginfo_jpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote...5.5 Medium
- ibm websphere application serverIBM WebSphere Application Server may be vulnerable to a denial of service, caused by allowing...7.5 High
- cisco expressway, telepresence video communication server +1 moreA vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence...8.6 High
- cisco asa cx context-aware security softwareA vulnerability in the data plane IP fragment handler of the Cisco Adaptive Security Appliance ...8.6 High
- pacman project pacmanlibalpm, as used in pacman 5.0.1, allows remote attackers to cause a denial of service (infinite...5.5 Medium
- cryptopp crypto\+\+Crypto++ 5.6.4 incorrectly uses Microsoft's stack-based _malloca and _freea functions. The...7.5 High
- dlink dwr-932b firmwareAn issue was discovered on the D-Link DWR-932B router. /var/miniupnpd.conf has no deny rules.7.5 High
- huawei oceanstor 5800 v3Huawei Oceanstor 5800 before V300R002C10SPC100 allows remote attackers to cause a denial of...7.5 High
- cisco aironet access point softwareA Denial of Service Vulnerability in 802.11 ingress connection authentication handling for the...4.3 Medium
- cisco aironet access point softwareA Denial of Service Vulnerability in 802.11 ingress packet processing of the Cisco Mobility...4.3 Medium
- cisco asr 5000 series softwareAn IKE Packet Parsing Denial of Service Vulnerability in the ipsecmgr process of Cisco ASR 5000...5.3 Medium
- uglifyjs project uglifyjsRegular Expression Denial of Service in uglify-js7.5 High
- nodejs node.jsRegular Expression Denial of Service in semver7.5 High
- ntpntpd in NTP before 4.2.8p9, when running on Windows, allows remote attackers to cause a denial of...7.5 High
- google android, linux kernel +1 moreA denial of service vulnerability in the Qualcomm FUSE file system could enable a remote attacker...5.5 Medium
- google androidA denial of service vulnerability in Mediaserver could enable an attacker to use a specially...5.5 Medium
- google androidA denial of service vulnerability in Mediaserver could enable an attacker to use a specially...5.5 Medium
- python hpack, hyper +1 moreHPACK Denial of Service vulnerability (HPACK Bomb)7.5 High
- python priority librarypriority vulnerable to denial of service7.5 High
- arista dcs-7050q eos software, dcs-7050s eos software, dcs-7050t eos software +2 moreArista EOS 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series...7.5 High
- docker** DISPUTED ** The SwarmKit toolkit 1.12.0 for Docker allows remote authenticated users to cause...6.5 Medium
- imagemagickMultiple memory leaks in the caption and label handling code in ImageMagick allow remote...7.5 High
- ffmpegThe che_configure function in libavcodec/aacdec_template.c in FFmpeg before 3.2.1 allows remote...5.5 Medium
- ffmpegThe avi_read_nikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to...5.5 Medium
- ffmpegThe zlib_refill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers...5.5 Medium
- nvidia gpu driver, nvidia corporation windows gpu display driver +1 moreAll versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer ...5.5 Medium
- sisco ax-s4 iccp firmware, mms-ease firmware +1 moreThe SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers...7.5 High
- cisco ios xrA vulnerability in the HTTP 2.0 request handling code of Cisco IOS XR Software could allow an...7.5 High
- cisco identity services engine (ise), identity services engine +1 moreA vulnerability in the Active Directory integration component of Cisco Identity Services Engine ...7.5 High
- cisco iosA vulnerability in Cisco IOS on Catalyst Switches and Nexus 9300 Series Switches could allow an...6.5 Medium
- cisco web security appliance (wsa), web security appliance +1 moreA vulnerability in HTTP URL parsing of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could...7.5 High
- cisco asr 5000 series softwareA vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services...7.5 High
- pivotal software rabbitmq, oracle solaris +1 moreThe Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain...6.5 Medium
- openbsd openssh** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows...7.5 High
- tats w3mAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote...6.5 Medium
- apache http serverThe mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols...7.5 High
- Show moreLoading…