CWE-460: Improper Cleanup on Thrown Exception
The product does not clean up its state or incorrectly cleans up its state when an exception is thrown.
A kind of CWE-459 Incomplete Cleanup.
From the CWE List. © The MITRE Corporation.
Newest
- zcashfoundation zebra Zebra before 7.0.0 Checkpoint Sync Denial of Service via Cancelled Verifier Rewind 8.7 High
- mtrudel bandit HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit 8.2 High
- gitlab Improper Cleanup on Thrown Exception in GitLab 3.1 Low
- nationalsecurityagency ghidra Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDB 6.8 Medium
-
libdancer2-perlDebian,perl-Dancer2openSUSE +1 more Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compile_hooks 7.5 High - grokability snipe-it Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archive 6.9 Medium
- eclipse milo In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception... 6.9 Medium
- jpadilla pyjwt PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS) 3.7 Low
- ultradag, opnsense core +1 more UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant Halt 8.8 High
- anchore syft Syft improper temporary file cleanup 5.3 Medium
- cisco ios xr software Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Interfaces Aligner Interrupt Denial of Service Vulnerability 6.8 Medium
- gnu binutils GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when... 6.2 Medium
- everest libocpp libocpp before 0.28.0 allows a denial of service (EVerest crash) because a secondary exception is... 3.1 Low
- trpc tRPC 11 WebSocket DoS Vulnerability 8.7 High
- roderickvd pleezer pleezer allows resource exhaustion through uncollected hook script processes 6.5 Medium
- apache tomcat Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame 7.5 High
- envoyproxy envoy Envoy crashes when HTTP ext_proc processes local replies 6.5 Medium
- hashicorp boundary, boundary enterprise +1 more Boundary Controller Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service 5.9 Medium
- cisco aironet access point software, aironet access point software (ios xe controller), ios xe +1 more +3 more A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP)... 4.7 Medium
- fireeye endpoint security Improper cleanup vulnerability in FireEye Endpoint Security 6.8 Medium
- gougucms gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows... 7.5 High
- linux kernel A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a... 7.8 High
- linux kernel, redhat enterprise linux +1 more A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers... 5.5 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Improper Cleanup on Thrown Exception in ikus060/rdiffweb 4.3 Medium
- foxit, foxit pdf reader +1 more A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader,... 8.8 High
- cisco expressway, telepresence video communication server, telepresence video communication server (vcs) expressway +2 more Cisco Expressway Series and TelePresence Video Communication Server Remote Code Execution Vulnerability 6.7 Medium
- ordered-float project ordered-float ordered_float:NotNan may contain NaN after panic in assignment operators 5.5 Medium
- linux kernel A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read... 4.4 Medium
- kubernetes cri-o, fedoraproject fedora, redhat openshift container platform +2 more A flaw was found in cri-o, as a result of all pod-related processes being placed in the same... 5.0 Medium
- philips intellivue mx40 patient worn monitor, intellivue mx40 firmware +1 more Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40... 6.5 Medium
- redhat openshift openshift before versions 3.3.1.11, 3.2.1.23, 3.4 is vulnerable to a flaw when a volume fails to... 4.3 Medium
- linux kernel, redhat enterprise linux, enterprise mrg +2 more A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel... 5.5 Medium