CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- cisco ios, ios software +1 moreA vulnerability in the implementation of a protocol in Cisco Integrated Services Routers...6.5 Medium
- cisco ios, ios software +1 moreA vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco...7.5 High
- cisco ios xeA vulnerability in the wireless controller manager of Cisco IOS XE could allow an unauthenticated...6.5 Medium
- mapsplugin googlemapsThe Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub...5.9 Medium
- cisco wide area application servicesA vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS) could...5.3 Medium
- cisco spa 301 firmware, spa 303 firmware, spa 500ds firmware +8 more +10 moreA vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and...7.5 High
- debian linux, nodejs node.js, uronode uro node +2 morenode 0.3.2 and URONode before 1.0.5r3 allows remote attackers to cause a denial of service ...6.5 Medium
- cisco connected grid network management system, iot field network director +1 moreA vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND)...7.5 High
- cisco yesmax hd firmware, yesmaxtotal firmware, yesquattro firmware +2 moreA vulnerability in the HTTP remote procedure call (RPC) service of set-top box (STB) receivers...7.5 High
- cisco ios, ios xe, ios and ios xe software +2 moreA vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14...7.5 High
- cisco ios, ios xe +1 moreA vulnerability in the IPv6 Simple Network Management Protocol (SNMP) code of Cisco IOS and Cisco...5.3 Medium
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, when downloading...9.8 Critical
- apache xerces-c\+\+Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a...7.5 High
- cisco data center network managerCisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java...7.5 High
- cisco iosCisco IOS before 15.2(4)S6 does not initialize an unspecified variable, which might allow remote...6.5 Medium
- candlepinproject candlepinCandlepin allows remote attackers to obtain sensitive information by obtaining Java exception...6.5 Medium
- cisco virtualized packet coreA vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet...7.5 High
- cisco telepresence ce software, telepresence tc software +1 moreA vulnerability in the Session Initiation Protocol (SIP) of the Cisco TelePresence Codec (TC) and...7.5 High
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +2 moreIt was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x...7.5 High
- cisco identity services engineA vulnerability in the TCP throttling process for the GUI of the Cisco Identity Services Engine ...7.5 High
- cisco remote expert managerA vulnerability in the TCP connection handling functionality of Cisco Remote Expert Manager...7.5 High
- cisco firepower threat defense, secure firewall threat defense +1 moreA vulnerability in the logging configuration of Secure Sockets Layer (SSL) policies for Cisco...7.5 High
- cisco ip phone 8800 series firmwareA vulnerability in the Session Initiation Protocol (SIP) implementation of Cisco IP Phone 8851 11...5.3 Medium
- cisco ios xrA vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers could allow...7.5 High
- google android, linux kernel +1 moreA denial of service vulnerability in the Qualcomm Wi-Fi driver could enable a proximate attacker...5.5 Medium
- cisco wide area application servicesA vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services ...6.8 Medium
- cisco secure firewall threat defenseA "Cisco Firepower Threat Defense 6.0.0 through 6.2.2 and Cisco ASA with FirePOWER Module Denial...7.1 High
- linux kernelThe video_usercopy function in drivers/media/video/v4l2-ioctl.c in the Linux kernel before 2.6.39...5.5 Medium
- irregex project irregexThe backtrack compilation code in the Irregex package (aka IrRegular Expressions) before 0.9.6...7.5 High
- cybozu garoonCybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service.6.5 Medium
- cisco ios xe, ios xe software +1 moreA vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE 3.16...6.3 Medium
- cisco prime network registrarA vulnerability in the DNS input packet processor for Cisco Prime Network Registrar could allow...5.8 Medium
- cisco adaptive security appliance softwareA vulnerability in the Internet Key Exchange Version 1 (IKEv1) XAUTH code of Cisco ASA Software...7.7 High
- cisco adaptive security appliance softwareA vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated, remote...7.7 High
- cisco adaptive security appliance softwareA vulnerability in the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) code of...8.6 High
- cisco adaptive security appliance softwareA vulnerability in the DNS code of Cisco ASA Software could allow an unauthenticated, remote...8.7 High
- cisco adaptive security appliance softwareA vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance (ASA) Software (8.0...4.0 Medium
- cisco secure firewall management centerA vulnerability in the detection engine parsing of Pragmatic General Multicast (PGM) protocol...8.6 High
- apache traffic serverApache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack.7.5 High
- cybozu officeCybozu Office 9.0.0 through 10.4.0 allows remote attackers to cause a denial of service.6.5 Medium
- symantec corporation ssl visibility, bluecoat ssl visibility appliance sv1800 firmware, ssl visibility appliance sv2800 firmware +2 more +4 moreSymantec SSL Visibility (SSLV) 3.8.4FC, 3.9, 3.10 before 3.10.4.1, and 3.11 before 3.11.3.1 is...5.9 Medium
- cisco wireless lan controllerA vulnerability in RADIUS Change of Authorization (CoA) request processing in the Cisco Wireless...5.3 Medium
- cisco wireless lan controller, wireless lan controller 6.0, wireless lan controller 7.0 +3 more +5 moreA vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in Cisco...6.5 Medium
- huawei ar3200 firmware, s12700 firmware, s5300 firmware +6 more +8 moreHuawei AR3200 with software V200R007C00, V200R005C32, V200R005C20; S12700 with software...7.5 High
- huawei secospace usg6300 firmware, secospace usg6500 firmware, secospace usg6600 firmware +2 moreHuawei Secospace USG6300 with software V500R001C20 and V500R001C20SPC200PWE, Secospace USG6500...6.5 Medium
- huawei quidway s5300 firmware, quidway s5700 firmware, quidway s6300 firmware +4 more +6 moreHuawei Quidway S9700 V200R003C00SPC500, Quidway S9300 V200R003C00SPC500, Quidway S7700...7.5 High
- huawei eudemon8000e firmwareHuawei Eudemon8000E firewall with software V200R001C01SPC800 and earlier versions allows users to...7.5 High
- cisco ios, ios xe +1 moreA vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6...8.6 High
- cisco ios, ios xe +1 moreA vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0...7.5 High
- cisco ios xeA vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an...7.5 High
- Show moreLoading…