Skip to content
Noroxi

CWE-399 · 2,632 records

Resource Management Errors

CVEs in this class

2,632 records

  • CVE-2010-0806
    90Now

    Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote at

    HighCVSS 8.8KEVWeaponizedEPSS 82%

    microsoft · internet explorerMar 10, 2010

  • CVE-2009-3103
    68This week

    Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold a

    CriticalCVSS 10.0WeaponizedEPSS 92%

    microsoft · windows server 2008Sep 8, 2009

  • CVE-2018-0156
    63This week

    A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker

    HighCVSS 7.5KEVWeaponizedEPSS 9%

    cisco · iosMar 28, 2018

  • CVE-2009-0075
    62This week

    Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to e

    CriticalCVSS 9.3WeaponizedEPSS 84%

    microsoft · internet explorerFeb 10, 2009

  • CVE-2011-0065
    62This week

    Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers

    CriticalCVSS 10.0WeaponizedEPSS 74%

    mozilla · firefoxMay 7, 2011

  • CVE-2017-12237
    62This week

    A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could

    HighCVSS 7.5KEVWeaponizedEPSS 7%

    cisco · iosSep 28, 2017

  • CVE-2018-0154
    62This week

    A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an una

    HighCVSS 7.5KEVWeaponizedEPSS 7%

    cisco · iosMar 28, 2018

  • CVE-2017-12231
    62This week

    A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unaut

    HighCVSS 7.5KEVWeaponizedEPSS 7%

    cisco · iosSep 28, 2017

  • CVE-2017-6627
    62This week

    A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, re

    HighCVSS 7.5KEVWeaponizedEPSS 6%

    cisco · iosSep 7, 2017

  • CVE-2010-3971
    61This week

    Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used in

    CriticalCVSS 9.3WeaponizedEPSS 81%

    microsoft · internet explorerDec 22, 2010

  • CVE-2018-0179
    60This week

    Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attack

    MediumCVSS 5.9KEVWeaponizedEPSS 4%

    cisco · iosMar 28, 2018

  • CVE-2018-0180
    60This week

    Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attack

    MediumCVSS 5.9KEVWeaponizedEPSS 4%

    cisco · iosMar 28, 2018

  • CVE-2008-4844
    57Plan

    Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6

    CriticalCVSS 9.3WeaponizedEPSS 66%

    microsoft · internet explorerDec 11, 2008

  • CVE-2017-12232
    57Plan

    A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.

    MediumCVSS 6.5KEVWeaponizedEPSS 2%

    cisco · iosSep 28, 2017

  • CVE-2017-12238
    57Plan

    A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could

    MediumCVSS 6.5KEVWeaponizedEPSS 2%

    cisco · iosSep 28, 2017

  • CVE-2009-2526
    56Plan

    Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remot

    HighCVSS 7.8Proof of conceptEPSS 81%

    microsoft · windows server 2008Oct 14, 2009

  • CVE-2018-0161
    56Plan

    A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst

    MediumCVSS 6.3KEVWeaponizedEPSS 4%

    cisco · iosMar 28, 2018

  • CVE-2015-0015
    55Plan

    Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of servi

    HighCVSS 7.8No exploitEPSS 78%

    microsoft · windows server 2003Jan 13, 2015

  • CVE-2015-1868
    55Plan

    The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server

    HighCVSS 7.8No exploitEPSS 78%

    powerdns · authoritativeMay 18, 2015

  • CVE-2010-0477
    55Plan

    The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1) SMBv1 and (2) SMBv2 response packets, which al

    CriticalCVSS 10.0Proof of conceptEPSS 50%

    microsoft · windows 7Apr 14, 2010

  • CVE-2013-0025
    54Plan

    Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that

    CriticalCVSS 9.3WeaponizedEPSS 55%

    microsoft · internet explorerFeb 13, 2013

  • CVE-2008-3013
    53Plan

    gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008,

    CriticalCVSS 9.3Proof of conceptEPSS 52%

    microsoft · digital image suiteSep 10, 2008

  • CVE-2008-3656
    52Plan

    Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in WEBrick::HTTP::DefaultFileHandler in WEBrick i

    HighCVSS 7.8WeaponizedEPSS 70%

    ruby-lang · rubyAug 12, 2008

  • CVE-2009-1138
    52Plan

    The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS requests, which allows r

    CriticalCVSS 10.0No exploitEPSS 39%

    microsoft · windows 2000Jun 10, 2009

  • CVE-2008-4023
    52Plan

    Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests, which allows remote at

    CriticalCVSS 10.0No exploitEPSS 39%

    microsoft · windows 2000Oct 14, 2008

All vulnerability classes