CWE-459: Incomplete Cleanup
The product does not properly "clean up" and remove temporary or supporting resources after they have been used.
Also known as Insufficient Cleanup.
A kind of CWE-404 Improper Resource Shutdown or Release.
From the CWE List. © The MITRE Corporation.
Newest
- cisco ios xe software, ios xe +1 moreA vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless...7.4 High
- linux, linux kernel +1 morescsi: target: core: Avoid smp_processor_id() in preemptible code7.5 High
- linux, linux kernel +1 morenet/smc: remove device from smcd_dev_list after failed device_add()5.5 Medium
- debian linux, linux kernel +1 morePCI: switchtec: Fix stdev_release() crash after surprise hot remove4.4 Medium
- linux, linux kernel +1 morex86/kvm: Disable kvmclock on all CPUs on shutdown7.1 High
- devolutions remote desktop managerImproper cleanup in temporary file handling component in Devolutions Remote Desktop Manager 2024...5.9 Medium
- apache tomcat, debian linux, fedoraproject fedora +2 moreApache Tomcat: WebSocket DoS with incomplete closing handshake6.3 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 morePHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Series4.8 Medium
- gnu grub2, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreGrub2: grub2-set-bootflag can be abused by local (pseudo-)users3.3 Low
- juniper junos, juniper networks junos os +1 moreJunos OS: BGP flap on NSR-enabled devices causes memory leak6.5 Medium
- apache strutsApache Struts: excessive disk usage7.5 High
- intel unison softwareIncomplete cleanup for some Intel Unison software may allow a privileged user to potentially...1.9 Low
- intel unison softwareIncomplete cleanup for some Intel Unison software may allow an authenticated user to potentially...3.3 Low
- amd 4th gen amd epyc™ processors, epyc™ embedded 9003, epyc 9124 firmware +28 more +30 moreImproper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged...2.5 Low
- apache tomcatApache Tomcat: FileUpload: DoS due to accumulation of temporary files on Windows5.9 Medium
- apache tomcat, accumulo, debian linux +2 moreApache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests5.3 Medium
- envoyproxy envoy, nghttp2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreEnvoy vulnerable to HTTP/2 memory leak in nghttp2 codec7.5 High
- xwiki, xwiki xwiki-platform +1 moreUpgrading doesn't prevent exploiting vulnerable XWiki documents10.0 Critical
- devolutions serverImproper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and...2.7 Low
- intel integrated performance primitives cryptographyIncomplete cleanup in the Intel(R) IPP Cryptography software before version 2021.6 may allow a...1.8 Low
- spring security, vmware spring security, netapp active iq unified manager +2 moreSpring Security logout not clearing security context6.3 Medium
- haproxyAn information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4...7.5 High
- redis redis-pyredis-py Race Condition due to incomplete fix6.5 Medium
- acronis agent, cyber protect 15, cyber protect home office +1 more +3 moreLocal privilege escalation due to incomplete uninstallation cleanup. The following products are...6.6 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An RPD crash can happen due to an MPLS TE tunnel configuration change on a directly connected router6.5 Medium
- apache shardingsphere, apache software foundation shardingsphere-proxy +1 moreApache ShardingSphere-Proxy: MySQL authentication bypass9.8 Critical
- zoom meetings, zoom video communications inc client for meetings (for android, ios, linux, macos, and windows), zoom rooms +2 more +4 moreLocal information exposure in Zoom Clients3.3 Low
- linux kernelA double-free flaw was found in the Linux kernel’s NTFS3 subsystem in how a user triggers remount...7.8 High
- intel xmm 7560 firmwareIncomplete cleanup in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146...5.4 Medium
- huawei emui, harmonyos +1 moreThe kernel module has the vulnerability that the mapping is not cleared after the memory is...7.5 High
- eclipse californiumCalifornium Failing DTLS handshakes causes Data Loss due to throttling blocking processing of records8.2 High
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore...7.0 High
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8052 firmware +108 more +110 moreInformation disclosure due to exposure of information while GPU reads the data in Snapdragon Auto...6.2 Medium
- debian linux, linux kernel, redhat enterprise linux +1 more +3 moreA flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a...5.5 Medium
- powerdns recursor, fedoraproject fedora +1 morePowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled,...6.5 Medium
- intel server platform services firmwareIncomplete cleanup in a firmware subsystem for Intel(R) SPS before versions SPS_E3_04.08.04.330.0...4.4 Medium
- gitlabA lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0...3.5 Low
- debian linux, fedoraproject fedora, intel sgx dcap +5 more +7 moreModerate: kernel-rt security and bug fix update5.5 Medium
- debian linux, intel sgx dcap, sgx psw +2 more +4 moreIncomplete cleanup in specific special register read operations for some Intel(R) Processors may...5.5 Medium
- debian linux, fedoraproject fedora, intel sgx dcap +5 more +7 moreIncomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an...5.5 Medium
- debian linux, fedoraproject fedora, intel sgx dcap +5 more +7 moreIncomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an...5.5 Medium
- nextcloud, kiteworks security-advisories +1 moreSensitive files/data exist after deletion of user account in Nextcloud Android2.8 Low
- postgresqlA flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when...8.8 High
- openssl, netapp a250 firmware, a700s firmware +28 more +30 moreResource leakage when decoding certificates and keys7.5 High
- johnson controls metasys, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 moreMetasys session token8.1 High
- linux kernel, netapp h300e firmware, h300s firmware +6 more +8 moreA flaw use after free in the Linux kernel Management Component Transport Protocol (MCTP)...7.8 High
- giteaImproper Privilege Management in Gitea9.8 Critical
- debian linux, fedoraproject fedora, xen +2 moreInsufficient cleanup of passed-through device IRQs The management of IRQs associated with...4.6 Medium
- linux kernelA vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c...4.4 Medium
- Show moreLoading…