CWE-404 · Improper Resource Shutdown or Release (page 4)
Page 4 of 8 — CVEs classified under CWE-404, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-13009 | High | 7.2 | 2025-05-08 | In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body. This can result… |
CVE-2025-41399 | High | 7.5 | 2025-05-07 | When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource uti… |
CVE-2025-4287 | Low | 3.3 | 2025-05-05 | A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function torch.cuda.nccl.reduce of the file t… |
CVE-2025-4003 | Medium | 5.5 | 2025-04-28 | A vulnerability was found in RefindPlusRepo RefindPlus 0.14.2.AB. It has been classified as problematic. This affects the function InternalApfsTranslateBlock o… |
CVE-2025-4002 | Medium | 5.5 | 2025-04-28 | A vulnerability was found in RefindPlusRepo RefindPlus 0.14.2.AB and classified as problematic. Affected by this issue is the function GetDebugLogFile of the f… |
CVE-2024-57493 | Medium | 5.5 | 2025-04-18 | An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the setsockopt function. |
CVE-2025-3730 | Low | 3.3 | 2025-04-16 | A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0. Affected is the function torch.nn.functional.ctc_loss of the file aten/src/AT… |
CVE-2025-3535 | Medium | 4.3 | 2025-04-13 | A vulnerability has been found in shuanx BurpAPIFinder up to 2.0.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-3198 | Low | 3.3 | 2025-04-04 | A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file… |
CVE-2024-47213 | High | 7.5 | 2025-04-03 | An issue was discovered affecting Enrich 5.1.0 and below. It involves sending a maliciously crafted Snowplow event to the pipeline. Upon receiving this event a… |
CVE-2025-3167 | Medium | 6.5 | 2025-04-03 | A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some unknown processing of the file /goform/… |
CVE-2025-3122 | Low | 3.1 | 2025-04-02 | A vulnerability classified as problematic was found in WebAssembly wabt 1.0.36. Affected by this vulnerability is the function BinaryReaderInterp::BeginFunctio… |
CVE-2025-3016 | Medium | 4.3 | 2025-03-31 | A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::MDLImporter::Par… |
CVE-2025-3010 | Low | 3.3 | 2025-03-31 | A vulnerability, which was classified as problematic, has been found in Khronos Group glslang 15.1.0. Affected by this issue is the function glslang::TIntermed… |
CVE-2025-2960 | Medium | 6.5 | 2025-03-30 | A vulnerability classified as problematic has been found in TRENDnet TEW-637AP and TEW-638APB 1.2.7/1.3.0.106. This affects the function sub_41DED0 of the file… |
CVE-2025-2959 | Medium | 6.5 | 2025-03-30 | A vulnerability was found in TRENDnet TEW-410APB 1.3.06b. It has been rated as problematic. Affected by this issue is the function sub_4019A0 of the file /usr/… |
CVE-2025-2958 | Medium | 6.5 | 2025-03-30 | A vulnerability was found in TRENDnet TEW-818DRU 1.0.14.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of t… |
CVE-2025-2957 | Medium | 6.5 | 2025-03-30 | A vulnerability was found in TRENDnet TEW-411BRP+ 2.07. It has been classified as problematic. Affected is the function sub_401DB0 of the file /usr/sbin/httpd… |
CVE-2025-2956 | Medium | 6.5 | 2025-03-30 | A vulnerability was found in TRENDnet TI-G102i 1.0.7.S0_ /1.0.8.S0_ and classified as problematic. This issue affects the function plugins_call_handle_uri_raw… |
CVE-2025-2953 | Low | 3.3 | 2025-03-30 | A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnn_max_pool2d. Th… |
CVE-2025-2926 | Low | 3.3 | 2025-03-28 | A vulnerability was found in HDF5 up to 1.14.6 and classified as problematic. This issue affects the function H5O__cache_chk_serialize of the file src/H5Ocache… |
CVE-2022-49745 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: fpga: m10bmc-sec: Fix probe rollback Handle probe error rollbacks properly to avoid leaks. |
CVE-2025-29313 | High | 7.5 | 2025-03-24 | Use of incorrectly resolved name or reference in OpenDaylight Service Function Chaining (SFC) Subproject SFC Sodium-SR4 and below allows attackers to cause a D… |
CVE-2025-2591 | Medium | 4.3 | 2025-03-21 | A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function MDLImporter::InternReadF… |
CVE-2025-2588 | Low | 3.3 | 2025-03-21 | A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function re_case_expand of the file src/… |
CVE-2025-29357 | High | 7.5 | 2025-03-13 | Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the startIp and endIp parameters at /goform/SetPptpServerCfg. This vulnera… |
CVE-2025-2122 | Low | 3.1 | 2025-03-09 | A vulnerability classified as problematic was found in Thinkware Car Dashcam F800 Pro up to 20250226. Affected by this vulnerability is an unknown functionalit… |
CVE-2025-1925 | Medium | 5.3 | 2025-03-04 | A vulnerability classified as problematic was found in Open5GS up to 2.7.2. Affected by this vulnerability is the function amf_nsmf_pdusession_handle_update_sm… |
CVE-2025-1893 | Medium | 4.3 | 2025-03-04 | A vulnerability was found in Open5GS up to 2.7.2. It has been declared as problematic. Affected by this vulnerability is the function gmm_state_authentication… |
CVE-2025-1877 | Medium | 6.5 | 2025-03-03 | A vulnerability, which was classified as critical, was found in D-Link DAP-1562 1.10. This affects the function pure_auth_check of the component HTTP POST Requ… |
CVE-2025-1846 | Medium | 5.4 | 2025-03-03 | A vulnerability was found in zj1983 zz up to 2024-8. It has been declared as problematic. This vulnerability affects the function deleteLocalFile of the file s… |
CVE-2025-1816 | Medium | 4.3 | 2025-03-02 | A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb. This affects the function audio_element_obu… |
CVE-2025-1632 | Low | 3.3 | 2025-02-24 | A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipula… |
CVE-2023-51332 | Medium | 4.3 | 2025-02-20 | A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Meeting Room Booking System v1.0 allows attackers to send an excessive amount of email f… |
CVE-2025-1377 | Low | 3.3 | 2025-02-17 | A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelf_getsymshndx of the file strip… |
CVE-2025-1376 | Low | 2.5 | 2025-02-17 | A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr… |
CVE-2025-1373 | Low | 3.3 | 2025-02-17 | A vulnerability was found in FFmpeg up to 7.1. It has been rated as problematic. Affected by this issue is the function mov_read_trak of the file libavformat/m… |
CVE-2025-1371 | Low | 3.3 | 2025-02-17 | A vulnerability has been found in GNU elfutils 0.192 and classified as problematic. This vulnerability affects the function handle_dynamic_symtab of the file r… |
CVE-2025-25899 | Low | 3.5 | 2025-02-13 | A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'gw' parameter at /userRpm/WanDynamicIpV6CfgRpm.htm. This vulnerability allows… |
CVE-2025-1207 | Low | 3.1 | 2025-02-12 | A vulnerability was found in phjounin TFTPD64 4.64. It has been declared as problematic. This vulnerability affects unknown code of the component DNS Handler… |
CVE-2025-24811 | High | 7.5 | 2025-02-11 | A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0), SIMAT… |
CVE-2025-1152 | Low | 3.1 | 2025-02-10 | A vulnerability classified as problematic has been found in GNU Binutils 2.43. Affected is the function xstrdup of the file xstrdup.c of the component ld. The… |
CVE-2025-1151 | Low | 3.1 | 2025-02-10 | A vulnerability was found in GNU Binutils 2.43. It has been rated as problematic. This issue affects the function xmemdup of the file xmemdup.c of the componen… |
CVE-2025-1150 | Low | 3.1 | 2025-02-10 | A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. This vulnerability affects the function bfd_malloc of the file libbfd.c of… |
CVE-2025-1149 | Low | 3.1 | 2025-02-10 | A vulnerability was found in GNU Binutils 2.43. It has been classified as problematic. This affects the function xstrdup of the file libiberty/xmalloc.c of the… |
CVE-2025-1148 | Low | 3.1 | 2025-02-10 | A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue is the function link_order_scan of the file ld/ldelfgen.c… |
CVE-2025-1103 | Medium | 6.5 | 2025-02-07 | A vulnerability, which was classified as problematic, was found in D-Link DIR-823X 240126/240802. This affects the function set_wifi_blacklists of the file /go… |
CVE-2025-22846 | High | 7.5 | 2025-02-05 | When SIP Session and Router ALG profiles are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microker… |
CVE-2024-23930 | Medium | 4.3 | 2025-01-31 | This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Pioneer DMH-WT7600NEX devices. Authen… |
CVE-2025-24160 | Medium | 4.3 | 2025-01-27 | The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, tvOS 18… |
CVE-2024-12345 | Medium | 4.4 | 2025-01-27 | A vulnerability classified as problematic was found in INW Krbyyyzo 25.2002. Affected by this vulnerability is an unknown functionality of the file /gbo.aspx o… |
CVE-2025-0704 | Medium | 5.3 | 2025-01-24 | A vulnerability, which was classified as problematic, was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. Affected is the function… |
CVE-2025-0492 | High | 7.5 | 2025-01-15 | A vulnerability has been found in D-Link DIR-823X 240126/240802 and classified as critical. Affected by this vulnerability is the function FUN_00412244. The ma… |
CVE-2024-57661 | High | 7.5 | 2025-01-14 | An issue in the sqlo_df component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. |
CVE-2024-57659 | High | 7.5 | 2025-01-14 | An issue in the sqlg_parallel_ts_seq component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL stat… |
CVE-2024-57654 | High | 7.5 | 2025-01-14 | An issue in the qst_vec_get_int64 component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL stateme… |
CVE-2024-57623 | High | 7.5 | 2025-01-14 | An issue in the HEAP_malloc component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. |
CVE-2024-57618 | High | 7.5 | 2025-01-14 | An issue in the bind_col_exp component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. |
CVE-2024-57879 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: iso: Always release hdev at the end of iso_listen_bis Since hci_get_route hold… |
CVE-2024-55553 | High | 7.5 | 2025-01-06 | In FRRouting (FRR) before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffe… |
CVE-2024-56757 | High | 7.8 | 2025-01-06 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: add intf release flow when usb disconnect MediaTek claim an s… |
CVE-2025-0223 | Medium | 5.5 | 2025-01-05 | A vulnerability was found in IObit Protected Folder up to 13.6.0.5. It has been classified as problematic. Affected is the function 0x8001E000/0x8001E00C/0x800… |
CVE-2025-0222 | Medium | 5.5 | 2025-01-05 | A vulnerability was found in IObit Protected Folder up to 13.6.0.5 and classified as problematic. This issue affects the function 0x8001E000/0x8001E004 in the… |
CVE-2025-0221 | Medium | 5.5 | 2025-01-05 | A vulnerability has been found in IOBit Protected Folder up to 1.3.0 and classified as problematic. This vulnerability affects the function 0x22200c in the lib… |
CVE-2024-12662 | Medium | 5.5 | 2024-12-16 | A vulnerability classified as problematic has been found in IObit Advanced SystemCare Utimate up to 17.0.0. This affects the function 0x8001E040 in the library… |
CVE-2024-12661 | Medium | 5.5 | 2024-12-16 | A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0. It has been rated as problematic. Affected by this issue is the function 0x8001E02… |
CVE-2024-12660 | Medium | 5.5 | 2024-12-16 | A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0. It has been declared as problematic. Affected by this vulnerability is the functio… |
CVE-2024-12659 | Medium | 5.5 | 2024-12-16 | A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0. It has been classified as problematic. Affected is the function 0x8001E004 in the… |
CVE-2024-12658 | Medium | 5.5 | 2024-12-16 | A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0 and classified as problematic. This issue affects the function 0x8001E01C in the li… |
CVE-2024-12657 | Medium | 5.5 | 2024-12-16 | A vulnerability has been found in IObit Advanced SystemCare Utimate up to 17.0.0 and classified as problematic. This vulnerability affects the function 0x8001E… |
CVE-2024-12656 | Medium | 5.5 | 2024-12-16 | A vulnerability, which was classified as problematic, was found in FabulaTech USB over Network 6.0.6.1. This affects the function 0x220448 in the library ftusb… |
CVE-2024-12655 | Medium | 5.5 | 2024-12-16 | A vulnerability, which was classified as problematic, has been found in FabulaTech USB over Network 6.0.6.1. Affected by this issue is the function 0x220420 in… |
CVE-2024-12654 | Medium | 5.5 | 2024-12-16 | A vulnerability classified as problematic was found in FabulaTech USB over Network 6.0.6.1. Affected by this vulnerability is the function 0x220408 in the libr… |
CVE-2024-12653 | Medium | 5.5 | 2024-12-16 | A vulnerability classified as problematic has been found in FabulaTech USB over Network 6.0.6.1. Affected is the function 0x22040C in the library ftusbbus2.sys… |
CVE-2024-44201 | Medium | 5.5 | 2024-12-12 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iPadOS 17.7.3, macOS Sequoia 15.1, macOS Sonoma 14.7.2… |
CVE-2024-12342 | Medium | 6.5 | 2024-12-08 | A vulnerability was found in TP-Link VN020 F3v(T) TT_V6.2.1021. It has been rated as critical. This issue affects some unknown processing of the file /control/… |
CVE-2024-12227 | Medium | 5.5 | 2024-12-05 | A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library N… |
CVE-2024-12002 | Medium | 4.3 | 2024-11-30 | A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129. Affected by this vulnerability is the function we… |
CVE-2024-11650 | Medium | 6.5 | 2024-11-25 | A vulnerability was found in Tenda i9 1.0.0.8(3828) and classified as critical. This issue affects the function websReadEvent of the file /goform/GetIPTV. The… |
CVE-2024-11586 | Medium | 4.0 | 2024-11-23 | Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected. |
CVE-2024-11588 | Low | 3.5 | 2024-11-21 | A vulnerability was found in AVL-DiTEST-DiagDev libdoip 1.0.0. It has been rated as problematic. This issue affects the function DoIPConnection::reactOnReceive… |
CVE-2024-51179 | High | 7.5 | 2024-11-12 | An issue in Open 5GS v.2.7.1 allows a remote attacker to cause a denial of service via the Network Function Virtualizations (NFVs) such as the User Plane Funct… |
CVE-2024-11097 | Low | 3.3 | 2024-11-12 | A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of… |
CVE-2024-27527 | High | 7.5 | 2024-11-08 | wasm3 139076a is vulnerable to Denial of Service (DoS). |
CVE-2024-39721 | High | 7.5 | 2024-10-31 | An issue was discovered in Ollama before 0.1.34. The CreateModelHandler function uses os.Open to read a file until completion. The req.Path parameter is user-c… |
CVE-2024-21253 | Low | 2.3 | 2024-10-15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22. Easily… |
CVE-2024-9787 | Medium | 5.3 | 2024-10-10 | A vulnerability, which was classified as problematic, was found in Contemporary Control System BASrouter BACnet BASRT-B 2.7.2. This affects an unknown part of… |
CVE-2024-47972 | Medium | 4.0 | 2024-10-07 | Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially control the performance of the resource. |
CVE-2024-9399 | High | 7.5 | 2024-10-01 | A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service condition. This vulner… |
CVE-2024-46752 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: btrfs: replace BUG_ON() with error handling at update_ref_for_cow() Instead of a BUG_ON()… |
CVE-2024-45182 | Medium | 5.5 | 2024-09-12 | An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds check allows specially crafted packets to… |
CVE-2024-7887 | Low | 2.7 | 2024-08-17 | A vulnerability was found in LimeSurvey 6.3.0-231016 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php… |
CVE-2024-25087 | Medium | 5.5 | 2024-07-02 | Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue screen error. |
CVE-2024-22105 | Medium | 5.5 | 2024-07-02 | Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error. |
CVE-2024-38271 | Medium | 4.8 | 2024-06-26 | There exists a vulnerability in Quick Share/Nearby, where an attacker can force a victim to stay connected to a temporary hotspot created for the sharing. As p… |
CVE-2024-36856 | High | 7.5 | 2024-06-12 | RMQTT Broker 0.4.0 is vulnerable to Denial of Service (DoS) due to improper session resource management. An attacker can exhaust system memory and crash the da… |
CVE-2024-31611 | Critical | 9.1 | 2024-06-10 | SeaCMS 12.9 has a file deletion vulnerability via admin_template.php. |
CVE-2024-4013 | Medium | 5.6 | 2024-06-06 | A bug exists in the API, mesh_node_power_off(), which fails to copy the contents of the Replay Protection List (RPL) from RAM to NVM before powering down, res… |
CVE-2024-5095 | Medium | 6.5 | 2024-05-19 | A vulnerability classified as problematic has been found in Victor Zsviot Camera 8.26.31. This affects an unknown part of the component MQTT Packet Handler. Th… |
CVE-2024-4791 | High | 7.5 | 2024-05-14 | A vulnerability classified as critical was found in Contemporary Control System BASrouter BACnet BASRT-B 2.7.2. This vulnerability affects unknown code of the… |