CWE-404: Improper Resource Shutdown or Release
The product does not release or incorrectly releases a resource before it is made available for re-use.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- dlink dir-x1860 firmwareA DoS attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote...7.4 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all...7.5 High
- xen, debian linux, fedoraproject fedora +2 morearm: guest_physmap_remove_page not removing the p2m mappings The functions to remove one or more...7.8 High
- duktape project duktapeDuktape v2.99.99 was discovered to contain a SEGV vulnerability via the component duk_push_tval...5.5 Medium
- hdfgroup hdf5HDF5 1.13.1-1 is affected by: segmentation fault, which causes a Denial of Service.5.5 Medium
- debian linux, linux kernel +1 moreGuest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information...6.5 Medium
- debian linux, linux kernel +1 moreGuest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information...6.5 Medium
- golang go, debian linux +1 moreGo before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file...4.8 Medium
- toktok toxcoreThe TCP Server module in toxcore before 0.2.8 doesn't free the TCP priority queue under certain...7.5 High
- google androidIn onNullBinding of ManagedServices.java, there is a possible permission bypass due to an...7.8 High
- f-secure atlant, elements endpoint protection, endpoint protection products on windows and mac. f-secure linux security (32-bit) f-secure linux security 64 f-secure internet gatekeeper & f-secure atlant +3 more +5 moreDenial-of-Service (DoS) Vulnerability5.5 Medium
- linphone belle-sipBelledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the...7.5 High
- cisco meeting serverCisco Meeting Server Call Bridge Denial of Service Vulnerability5.9 Medium
- deferred image processing project image processingImproper Resource Shutdown or Release in TYPO3 extension7.5 High
- nvidia virtual gpu, virtual gpu software +1 moreNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it...7.8 High
- debian linux, nvidia gpu display driver +1 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the...6.2 Medium
- phoenix contact fl switch, fl nat, phoenixcontact fl nat smn 8tx-m firmware +14 more +16 moreDenial of Service Vulnerability in Phoenix Contact FL SWITCH SMCS series products5.3 Medium
- mozilla firefoxFirefox for Android would become unstable and hard-to-recover when a website opened too many...4.3 Medium
- gnu libredwgAn issue was discovered in GNU LibreDWG 0.10. Crafted input will lead to an memory leak in...6.5 Medium
- jtekt 2port-efr thu-6404 firmware, fl\/et-t-v2h thu-6289 firmware, pc10b-e\/c tcu-6521 firmware +15 more +17 moreIf Ethernet communication of the JTEKT Corporation TOYOPUC product series’ (TOYOPUC-PC10 Series:...7.5 High
- nvidia gpu display driverNVIDIA GPU Display Driver for Windows and Linux, R450 and R460 driver branch, contains a...6.6 Medium
- canonical libunity-webapps, unity-firefox-extension, ubuntu linux +2 morePotential DoS through abuse of rate limit in libunity-webapps for Firefox4.3 Medium
- canonical unity-firefox-extension, ubuntu linux +1 morePossible remote DOS in WebApps4.3 Medium
- red hat undertow, redhat jboss-remoting, netapp active iq unified manager +1 more +3 moreA flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7...7.5 High
- digium asterisk, certified asterisk +1 moreAn issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x,...5.9 Medium
- projectsendreset-password.php in ProjectSend before r1295 allows remote attackers to reset a password...7.5 High
- red lion controls crimson 3.1, redlion crimson +1 moreAn attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119...5.3 Medium
- arista eosAn issue with ARP packets in Arista’s EOS affecting the 7800R3, 7500R3, and 7280R3 series of...7.4 High
- gitlabA potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x (>=13...4.3 Medium
- google androidIn onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic...5.5 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers Slow Path Forwarding Denial of Service Vulnerability8.6 High
- digium certified asterisk, sangoma asterisk +1 moreA res_pjsip_session crash was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before...5.3 Medium
- apache tomcat, oracle agile product lifecycle management +1 moreResponse mix-up with WebSocket concurrent send and close8.6 High
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software SIP Denial of Service Vulnerability6.8 Medium
- ibm spectrum scale, elastic storage server +1 moreIBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM...6.2 Medium
- google androidIn AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non...6.5 Medium
- wibu codemeterAn attacker could send a specially crafted packet that could have CodeMeter (All versions prior...7.5 High
- gallagher command centreIt is possible for an unauthenticated remote DCOM websocket connection to crash the Command...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +40 more +42 moreu'Information disclosure issue occurs as in current logic Secure Touch session is released...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +56 more +58 moreu'Information disclosure issue can occur due to partial secure display-touch session tear-down'...5.5 Medium
- cisco nx-os, nx-os software 5.2(1) +1 moreCisco NX-OS Software IPv6 Protocol Independent Multicast Denial of Service Vulnerability7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreIn BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, a BIG-IP virtual server...7.5 High
- cloud foundry routing, cf deployment, cloudfoundry cf-deployment +1 more +3 moreCF clusters with NGINX in front of them may be vulnerable to DoS7.7 High
- red hat wildfly, redhat amq, jboss enterprise application platform continuous delivery +3 more +5 moreA vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat...6.5 Medium
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: CacheStore)...7.5 High
- oracle enterprise session border controllerVulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications...7.5 High
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Oracle Solaris product of Oracle Systems (component: Packaging Scripts). The...5.5 Medium
- ibm db2, db2 for linux- unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...7.5 High
- easyrobotics er-flex firmware, er-lite firmware, er-one firmware +8 more +10 moreRVD#2568: Apache server is vulnerable to a DoS8.2 High
- mattermost serverMattermost Server is vulnerable to DoS through maliciously crafted posts5.3 Medium
- Show moreLoading…