Weakness (CWE)
CWE-399: Resource Management Errors
Category Draft Mapping prohibited
Weaknesses in this category are related to improper management of system resources.
Source: MITRE CWE-399
160 results · Feed
-
Unscored —
A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePr…
-
Unscored —
A vulnerability in SSL traffic decryption for Cisco Firepower Threat Defense (FTD) Software could allow an unauthentica…
-
Unscored —
A vulnerability in the implementation of the direct authentication feature in Cisco Adaptive Security Appliance (ASA) S…
-
Unscored —
A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an …
-
High 7.5CVE-2017-12231 Exploited
A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6…
KEV Mar 3, 2022 -
Medium 6.5CVE-2017-12232 Exploited
A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers …
KEV Mar 3, 2022 -
Unscored —
A vulnerability in the wireless controller manager of Cisco IOS XE could allow an unauthenticated, adjacent attacker to…
-
High 7.5CVE-2017-12237 Exploited
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3…
KEV Mar 3, 2022 -
Medium 6.5CVE-2017-12238 Exploited
A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 S…
KEV Mar 3, 2022 -
Unscored —
A vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS) could allow an unauthenticate…
-
Unscored —
A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phone…
-
Unscored —
A vulnerability in the IPv6 Simple Network Management Protocol (SNMP) code of Cisco IOS and Cisco IOS XE Software could…
-
Unscored —
A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthentic…
-
Unscored —
A vulnerability in the HTTP remote procedure call (RPC) service of set-top box (STB) receivers manufactured by Cisco fo…
-
High 7.5CVE-2017-6627 Exploited
A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow a…
KEV Mar 3, 2022 -
Unscored —
A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instanc…
-
Unscored —
A vulnerability in the Session Initiation Protocol (SIP) of the Cisco TelePresence Codec (TC) and Collaboration Endpoin…
-
Unscored —
A vulnerability in the TCP throttling process for the GUI of the Cisco Identity Services Engine (ISE) 2.1(0.474) could …
-
Unscored —
A vulnerability in the logging configuration of Secure Sockets Layer (SSL) policies for Cisco FirePOWER System Software…
-
Unscored —
A vulnerability in the TCP connection handling functionality of Cisco Remote Expert Manager Software 11.0.0 could allow…
-
Unscored —
A vulnerability in the Session Initiation Protocol (SIP) implementation of Cisco IP Phone 8851 11.0(0.1) could allow an…
-
Unscored —
A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers could allow an unauthenticated, r…
-
Unscored —
A "Cisco Firepower Threat Defense 6.0.0 through 6.2.2 and Cisco ASA with FirePOWER Module Denial of Service" vulnerabil…
-
Unscored —
A vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, a…
-
Unscored —
A vulnerability in the detection engine parsing of Pragmatic General Multicast (PGM) protocol packets for Cisco Firepow…
-
Unscored —
A vulnerability in the Internet Key Exchange Version 1 (IKEv1) XAUTH code of Cisco ASA Software could allow an authenti…
-
Unscored —
A vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload…
-
Unscored —
A vulnerability in the DNS input packet processor for Cisco Prime Network Registrar could allow an unauthenticated, rem…
-
Unscored —
A vulnerability in the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) code of Cisco ASA Software could a…
-
Unscored —
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE 3.16 could allow an authenti…
-
Unscored —
A vulnerability in the DNS code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause an affec…
-
Unscored —
A vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance (ASA) Software (8.0 through 8.7 and 9.0 thro…
-
Unscored —
A vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in Cisco Wireless LAN Controller…
-
Unscored —
A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 thro…
-
Unscored —
A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an unauthenticated, remote attac…
-
Unscored —
A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6) and Cisco IOS XE (3.…
-
Unscored —
A vulnerability in the Stream Control Transmission Protocol (SCTP) decoder of the Cisco NetFlow Generation Appliance (N…
-
Unscored —
A vulnerability in the data plane IP fragment handler of the Cisco Adaptive Security Appliance (ASA) CX Context-Aware S…
-
Unscored —
A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Ser…
-
High 7.1
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows …