CWE-459: Incomplete Cleanup
The product does not properly "clean up" and remove temporary or supporting resources after they have been used.
Also known as Insufficient Cleanup.
A kind of CWE-404 Improper Resource Shutdown or Release.
From the CWE List. © The MITRE Corporation.
Newest
- huawei emui, harmonyos, magic ui +2 moreThere is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this...7.5 High
- huawei harmonyosThere is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this...7.5 High
- huawei harmonyosThere is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this...7.5 High
- debian linux, linux kernel, fedoraproject fedora +3 more +5 moreA memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user...4.4 Medium
- keybase, zoom video communications inc keybase client for android, keybase client for ios +2 moreRetained exploded messages in Keybase Clients for Android and iOS3.7 Low
- huawei harmonyosA component of the HarmonyOS has a Incomplete Cleanup vulnerability. Local attackers may exploit...5.5 Medium
- ericsson operations support system-radio and core firmware** UNSUPPORTED WHEN ASSIGNED ** In OSS-RC systems of the release 18B and older during data...4.9 Medium
- zeroize derive project deriveMemory flaw in zeroize_derive9.8 Critical
- ait-pro bulletproof securityBulletProof Security <= 5.1 Sensitive Information Disclosure5.3 Medium
- huawei emui, magic ui +1 moreThere is an Incomplete Cleanup Vulnerability in Huawei Smartphone.Successful exploitation of this...8.1 High
- thales sentinel ldk run-time environmentThe Sentinel LDK Run-Time Environment installer (Versions 7.6 and prior) adds a firewall rule...9.8 Critical
- debian linux, intel atom x5-e3930, atom x5-e3940 +211 more +213 moreIncomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially...8.8 High
- debian linux, linux kernel, starwindsoftware starwind virtual san +2 moreAn issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6,...5.5 Medium
- timelybillsCleartext Storage in a File or on Disk in TimelyBills <= 1.7.0 for iOS and versions <= 1.21.115...5.9 Medium
- intel killer, proset\/wireless wifi +1 moreIncomplete cleanup in some Intel(R) PROSet/Wireless WiFi and Killer (TM) drivers before version...5.2 Medium
- opendoas project opendoasThere is an unsafe incomplete reset of PATH in OpenDoas 6.6 through 6.8 when changing the user...8.8 High
- thecodingmachine gotenbergAn incomplete-cleanup vulnerability in the Office rendering engine of Gotenberg through 6.2.1...9.8 Critical
- apple ios, iphone os +1 moreThe issue was addressed with improved data deletion. This issue is fixed in iOS 13. Deleted calls...2.4 Low
- ui unifi controller firmware, unifi meshing access point firmware +1 moreAn issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi...7.5 High
- gitlabMembership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10,...6.5 Medium
- nvidia virtual gpu manager, vgpu software +1 moreNVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which guest-supplied...7.8 High
- google androidIn Bluetooth AVRCP, there is a possible leak of audio metadata due to residual data. This could...7.5 High
- avast antivirusAn issue was discovered in the Login Password feature of the Password Manager component in Avast...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 moreu'Information disclosure issue occurs as in current logic as secure touch is released without...5.5 Medium
- google androidIn stopZygoteLocked of AppZygote.java, there is an insufficient cleanup. This could lead to local...5.5 Medium
- mozilla firefox for ios, firefox mobile +1 moreIndexedDB should be cleared when leaving private browsing mode and it is not, the API for...6.5 Medium
- mattermost mobileAn issue was discovered in Mattermost Mobile Apps before 1.26.0. A view cache can persist on a...5.3 Medium
- mattermost mobileAn issue was discovered in Mattermost Mobile Apps before 1.26.0. Cookie data can persist on a...5.3 Medium
- mattermost mobileAn issue was discovered in Mattermost Mobile Apps before 1.29.0. The iOS app allowed Single Sign...7.5 High
- beckhoff twincat, twincat driver for intel 8254x (tcl8254x.sys), twincat driver for intel 8255x (tcl8255x.sys) +1 more +3 moreBeckhoff: Etherleak in TwinCAT RT network driver5.3 Medium
- google androidIn handleMessage of BluetoothManagerService, there is an incomplete reset. This could lead to...7.8 High
- canonical ubuntu linux, fedoraproject fedora, intel celeron 1000m +691 more +693 moreIncomplete cleanup from specific special register read operations in some Intel(R) Processors may...5.5 Medium
- health covidsafeCaching of GATT characteristic values (TempID) in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to long-term re-identify an Android device running COVIDSafe.7.5 High
- red hat ansible, redhat ansible engine, ansible tower +4 more +6 moreExposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible5.0 Medium
- theleague the leagueThe League application before 2020-05-02 on Android sends a bearer token in an HTTP Authorization...6.5 Medium
- nvidia gpu display driver, virtual gpu graphics driver +1 moreNVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource...5.5 Medium
- mozilla thunderbird, canonical ubuntu linux +1 moreIf a user saved passwords before Thunderbird 60 and then later set a master password, an...6.5 Medium
- textproc/isearch package package, openbsd textproc\/isearch +1 moreThe isearch package (textproc/isearch) before 1.47.01nb1 uses the tempnam() function to create...7.5 High
- apple macos, mac os x +1 moreThe contents of locked notes sometimes appeared in search results. This issue was addressed with...3.3 Low
- apple ios, macos, watchos +2 more +4 moreAn issue existed in the pausing of FaceTime video. The issue was resolved with improved logic....4.3 Medium
- apple watchosAn issue existed where partially entered passcodes may not clear when the device went to sleep....2.4 Low
- trend micro deep security as a serviceA privilege escalation vulnerability in the Trend Micro Deep Security as a Service Quick Setup...8.8 High
- apple macos, mac os x +1 more"Clear History and Website Data" did not clear the history. The issue was addressed with improved...5.3 Medium
- oisf libhtp, suricata-ids suricata +1 moreIn OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol...5.3 Medium
- dell rsa bsafe crypto-c micro edition, emc rsa bsafe crypto-c, dell bsafe crypto-c-micro-edition +1 more +3 moreRSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3)...4.4 Medium
- obdev little snitchLittle Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the...5.5 Medium
- pydio cellsPydio Cells before 1.5.0 does incomplete cleanup of a user's data upon deletion. This allows a...6.5 Medium
- cisco application policy infrastructure controller, application policy infrastructure controller (apic) +1 moreCisco Application Policy Infrastructure Controller Recoverable Encryption Key Vulnerability4.6 Medium
- flarumFlarum mishandles invalidation of user email tokens7.5 High
- macpaw cleanmymac xAn exploitable privilege escalation vulnerability exists in the helper service CleanMyMac X,...7.1 High
- Show moreLoading…