CWE-672: Operation on a Resource after Expiration or Release
The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.
A kind of CWE-666 Operation on Resource in Wrong Phase of Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd core will be observed with proxy BGP route-target filtering enabled and certain route add and delete event happening7.5 High
- philips vue pacs, myvue, speech +3 more +5 morePhilips Vue PACS Use of a Key Past its Expiration Date8.2 High
- ibm partner engagement manager, sterling partner engagement manager +1 moreIBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user...5.6 Medium
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc (incl. siplus variants), simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +54 more +56 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.4),...7.5 High
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants), simatic s7-1200 cpu family (incl. siplus variants) +52 more +54 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.4),...7.5 High
- mozilla firefoxBy using XSL Transforms, a malicious webserver could have served a user an XSL document that...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...8.8 High
- abi stable project stableUpdate unsound DrainFilter and RString::retain7.5 High
- abi stable project stableUpdate unsound DrainFilter and RString::retain7.5 High
- opener project openerA denial-of-service vulnerability exists in the Ethernet/IP server functionality of the EIP Stack...7.5 High
- parse-community parse-serverImproper session expiration in Parse Server4.3 Medium
- linux kernel, netapp cloud backup, hci compute node +3 more +5 moreget_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege...7.8 High
- forlogic qualiexForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated...9.8 Critical
- eclipse jetty, the eclipse foundation eclipse jetty +1 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations9.4 Critical
- baxter sigma spectrum infusion system firmwareThe Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless...9.8 Critical
- freerdp, canonical ubuntu linux, debian linux +2 moreDouble Free in FreeRDP2.2 Low
- wordpress, debian linux +1 morePassword reset links invalidation issue in WordPress6.1 Medium
- saitoha libsixelAn invalid memory address dereference was discovered in load_pnm in frompnm.c in libsixel before...6.5 Medium
- kaspersky tigervnc, opensuse leap +1 moreTigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to...7.2 High
- opensc project openscAn issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15...4.6 Medium
- linux kernel, canonical ubuntu linux, ubuntu shiftfs in the linux kernel +2 moreReference count underflow in shiftfs7.1 High
- linux kernel, ubuntu linux kernel, canonical ubuntu linux +2 moreReference counting error in overlayfs/shiftfs error path when used in conjuction with aufs7.1 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- google androidAn elevation of privilege vulnerability in CameraBase could enable a local malicious application...7.8 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +11 more +13 moreMultiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to...7.0 High