CWE-672: Operation on a Resource after Expiration or Release
The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.
A kind of CWE-666 Operation on Resource in Wrong Phase of Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- canonical jujuJuju has broken CMR authorization2.1 Low
- plex media serverIn Plex Media Server (PMS) through 1.42.2.10156, ability to access /myplex/account with a device...7.1 High
- xenIncorrect removal of permissions on PCI device unplug7.5 High
- f5 big-ip, big-ip application security manager +1 moreBIG-IP HTTP/2 vulnerability8.7 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB may be susceptible to Invariant Failure in Transactions due Upsert Operation6.5 Medium
- linux, linux kernel +1 moreio_uring/futex: ensure io_futex_wait() cleans up properly on failure7.8 High
xcbcrates.ioRust XCB `xcb::Connection::connect_to_fd*` functions violate I/O safety1.7 Low- bytecodealliance wasmtimeWasmtime has host panic with `fd_renumber` WASIp1 function3.5 Low
- linux, linux kernel +1 morewifi: ath12k: fix node corruption in ar->arvifs list8.8 High
- amazon cloud camInsecure device pairing in end of life Amazon Cloud Cam7.7 High
- apple ipados, ios and ipados, iphone os +2 moreThis issue was addressed through improved state management. This issue is fixed in iOS 18.5 and...7.1 High
- opentext arcsight enterprise security managerReference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager2.3 Low
array-init-cursorcrates.ioarray-init-cursor is unsound when used with types that implement `Drop`2.9 Low- directusSuspended Directus user can continue to use session token to access API3.5 Low
- dell avamar, avamar server +1 moreDell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A...6.6 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredm array: fix releasing a faulty array block twice in dm_array_cursor_end7.8 High
- fortinet fortimanagerAn operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7...7.9 High
- micahparks jwksetJWK Set's HTTP client only overwrites and appends JWK to local cache during refresh2.1 Low
- huawei emui, harmonyos +1 moreUAF vulnerability in the device node access module Impact: Successful exploitation of this...4.4 Medium
- linux, linux kernel +1 morevirtio_net: correct netdev_tx_reset_queue() invocation point5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreACPI: battery: Fix possible crash when unregistering a battery hook5.5 Medium
- linux, linux kernel +1 morenet/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice5.5 Medium
- zitadelUnauthorized Access After Organization or Project Deactivation in Zitadel4.3 Medium
- zitadelService Users Deactivation not Working in Zitadel8.1 High
- zitadelUser Grant Deactivation not Working in Zitadel7.3 High
- hyperledger fabricHyperledger Fabric does not verify request has a timestamp within the expected time window5.3 Medium
- f5 nginx plusNGINX Plus MQTT vulnerability8.7 High
- ibm app connect enterpriseIBM App Connect Enterprise information disclosure4.3 Medium
- ibm app connect enterpriseIBM App Connect Enterprise information disclosure4.3 Medium
- ibm app connect enterpriseIBM App Connect Enterprise information disclosure4.3 Medium
- linux, linux kernel +1 morenetrom: Decrease sock refcount when sock timers expire5.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreQemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash5.5 Medium
- mio project mio, tokio +1 moreMio's tokens for named pipes may be delivered after deregistration7.5 High
- linux, linux kernel +1 moreipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry7.8 High
- decidim, scambra devise invitable +1 moreDecidim's devise_invitable gem vulnerable to circumvention of invitation token expiry period5.7 Medium
- joinmastodon mastodonDestroying OAuth Applications doesn't notify Streaming of Access Tokens being destroyed in mastodon3.1 Low
- blockmason credit-protocolblockmason credit-protocol UCAC CreditProtocol.sol executeUcacTx denial of service4.3 Medium
- squid-cache squidSQUID-2023:11 Denial of Service in Cache Manager6.5 Medium
- notaryproject specifications, notation-go +1 moreClient configured with permissive trust policies susceptible to rollback attack in Notary Project4.0 Medium
- xenx86/AMD: missing IOMMU TLB flushing7.8 High
- silicon labs ember znet, silabs emberznet +1 moreTouchlink authentication bypass due to packets processed after timeout or out of range in Ember ZNet10.0 Critical
- pow-auth powPow Mnesia cache doesn't invalidate all expired keys on startup6.5 Medium
- zephyrproject zephyrHCI send_sync Dangling Semaphore Reference Re-use5.9 Medium
- zephyrproject zephyrHCI Connection Creation Dangling State Reference Re-use5.9 Medium
- apple macosAn issue with app access to camera data was addressed with improved logic. This issue is fixed in...3.3 Low
- funkwhaleUser invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can...5.3 Medium
- maradnsAn issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended...7.5 High
- intel sgx sdkPremature release of resource during expected lifetime in the Intel(R) SGX SDK software may allow...2.5 Low
- openstack keystone, [unknown] openstack-keystone, redhat openstack platform +2 more +4 moreA flaw was found in OpenStack. The application credential tokens can be used even after they have...6.6 Medium
- opensc, fedoraproject fedora, redhat enterprise linux +2 moreA heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.5.3 Medium
- Show moreLoading…