Skip to content
Noroxi

CWE-404 · 752 records

Improper Resource Shutdown or Release

CVEs in this class

752 records

  • An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k

    HighCVSS 7.0KEVWeaponizedEPSS 73%

    microsoft · windows 7May 9, 2018

  • CVE-2018-8639
    68This week

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k

    HighCVSS 7.8KEVWeaponizedEPSS 22%

    microsoft · windows 10 1507Dec 11, 2018

  • CVE-2018-8611
    62This week

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Eleva

    HighCVSS 7.8KEVWeaponizedEPSS 4%

    microsoft · windows 10 1607Dec 11, 2018

  • CVE-2018-8405
    62This week

    An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "

    HighCVSS 7.8KEVWeaponizedEPSS 3%

    microsoft · windows 10 1507Aug 15, 2018

  • CVE-2018-8406
    62This week

    An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "

    HighCVSS 7.8KEVWeaponizedEPSS 3%

    microsoft · windows 10 1507Aug 15, 2018

  • ImageMagick 7.1.0-49 is vulnerable to Denial of Service.

    MediumCVSS 6.5Proof of conceptEPSS 76%

    imagemagick · imagemagickFeb 6, 2023

  • A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulner

    HighCVSS 8.8No exploitEPSS 16%

    microsoft · windows 10Nov 13, 2018

  • CVE-2018-8210
    39Monitor

    A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerabi

    HighCVSS 7.8No exploitEPSS 25%

    microsoft · windows 10Jun 14, 2018

  • Jenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on login.

    CriticalCVSS 9.8No exploitEPSS 1%

    jenkins · openidJan 26, 2023

  • Response mix-up with WebSocket concurrent send and close

    HighCVSS 8.6No exploitEPSS 8%

    apache · tomcatMay 13, 2022

  • CVE-2023-3206
    36Monitor

    Chengdu VEC40G denial of service

    HighCVSS 7.5No exploitEPSS 18%

    feiyuxing · vec40g firmwareJun 12, 2023

  • Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)

    CriticalCVSS 9.1No exploitEPSS 0%

    apache · nutchSep 9, 2026

  • SeaCMS 12.9 has a file deletion vulnerability via admin_template.php.

    CriticalCVSS 9.1No exploitEPSS 0%

    seacms · seacmsJun 10, 2024

  • CVE-2019-1708
    35Monitor

    Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software MOBIKE Denial of Service Vulnerability

    HighCVSS 8.6No exploitEPSS 2%

    cisco · secure firewall threat defenseMay 3, 2019

  • CVE-2017-1145
    35Monitor

    IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a deni

    HighCVSS 8.6No exploitEPSS 1%

    ibm · websphere mqMar 20, 2017

  • Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers Slow Path Forwarding Denial of Service Vulnerability

    HighCVSS 8.6No exploitEPSS 1%

    cisco · ios xrNov 11, 2020

  • CVE-2025-0492
    35Monitor

    D-Link DIR-823X FUN_00412244 null pointer dereference

    HighCVSS 8.7No exploitEPSS 1%

    dlink · dir-823x firmwareJan 15, 2025

  • CVE-2018-8213
    34Monitor

    A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerabi

    HighCVSS 7.8No exploitEPSS 8%

    microsoft · windows 10Jun 14, 2018

  • CVE-2025-4749
    34Monitor

    D-Link DI-7003GV2 Factory Reset backup.asp sub_4983B0 denial of service

    HighCVSS 8.7No exploitEPSS 1%

    dlink · di-7003g firmwareMay 16, 2025

  • CVE-2024-4791
    34Monitor

    Contemporary Control System BASrouter BACnet BASRT-B Application Protocol Data Unit denial of service

    HighCVSS 8.7No exploitEPSS 1%

    contemporary control system · basrouter bacnet basrt-bMay 14, 2024

  • CVE-2025-5867
    34Monitor

    RT-Thread lwp_syscall.c csys_sendto null pointer dereference

    HighCVSS 8.6No exploitEPSS 1%

    rt-thread · rt-threadJun 9, 2025

  • CVE-2019-1706
    34Monitor

    Cisco Adaptive Security Appliance Software IPsec Denial of Service Vulnerability

    HighCVSS 8.6No exploitEPSS 1%

    cisco · adaptive security appliance softwareMay 3, 2019

  • A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FT

    HighCVSS 8.6No exploitEPSS 0%

    cisco · secure firewall threat defenseNov 1, 2023

  • A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211

    HighCVSS 8.7No exploitEPSS 0%

    siemens · simatic s7-1200 cpu 1211c ac/dc/rlyFeb 11, 2025

  • Netmaker: Denial of Service via Server Shutdown Endpoint

    HighCVSS 8.7No exploitEPSS 0%

    netmaker · netmakerMar 7, 2026

All vulnerability classes