Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2014-05-16 CVE-2014-3742 Resource Management Errors vulnerability in Spumko Project Hapi Server Framework 2.0.0/2.1.1/2.1.2
The hapi server framework 2.0.x and 2.1.x before 2.2.0 for Node.js allows remote attackers to cause a denial of service (file descriptor consumption and process crash) via unspecified vectors.
network
low complexity
spumko-project CWE-399
5.0
2014-05-16 CVE-2014-0964 Resource Management Errors vulnerability in IBM Websphere Application Server
IBM WebSphere Application Server (WAS) 6.1.0.0 through 6.1.0.47 and 6.0.2.0 through 6.0.2.43 allows remote attackers to cause a denial of service via crafted TLS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool.
network
ibm CWE-399
7.1
2014-05-14 CVE-2014-0528 Resource Management Errors vulnerability in Adobe Acrobat and Acrobat Reader
Double free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
network
low complexity
adobe apple microsoft CWE-399
critical
10.0
2014-05-14 CVE-2014-0527 Resource Management Errors vulnerability in Adobe Acrobat and Acrobat Reader
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
network
low complexity
adobe apple microsoft CWE-399
critical
10.0
2014-05-08 CVE-2014-0963 Resource Management Errors vulnerability in IBM products
The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager (ISAM) for Web 7.0 before 7.0.0-ISS-SAM-IF0006 and 8.0 before 8.0.0.3-ISS-WGA-IF0002 allows remote attackers to cause a denial of service (infinite loop) via crafted SSL messages.
network
ibm CWE-399
7.1
2014-04-27 CVE-2014-1765 Resource Management Errors vulnerability in Microsoft Internet Explorer
Multiple use-after-free vulnerabilities in Microsoft Internet Explorer 6 through 11 allow remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by Sebastian Apelt and Andreas Schmidt during a Pwn2Own competition at CanSecWest 2014.
network
high complexity
microsoft CWE-399
7.6
2014-04-27 CVE-2014-1763 Resource Management Errors vulnerability in Microsoft Internet Explorer 10/11/9
Use-after-free vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.
network
low complexity
microsoft CWE-399
critical
10.0
2014-04-23 CVE-2014-0474 Resource Management Errors vulnerability in multiple products
The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 do not properly perform type conversion, which allows remote attackers to have unspecified impact and vectors, related to "MySQL typecasting."
network
low complexity
canonical djangoproject CWE-399
critical
10.0
2014-04-23 CVE-2012-5039 Resource Management Errors vulnerability in Cisco IOS
The BGP Router process in Cisco IOS before 12.2(50)SY1 allows remote attackers to cause a denial of service (memory consumption) via vectors involving BGP path attributes, aka Bug ID CSCsw63003.
network
cisco CWE-399
4.3
2014-04-23 CVE-2012-5036 Resource Management Errors vulnerability in Cisco IOS
Cisco IOS before 12.2(50)SY1 allows remote authenticated users to cause a denial of service (memory consumption) via a sequence of VTY management sessions (aka exec sessions), aka Bug ID CSCtn43662.
network
low complexity
cisco CWE-399
6.8