CWE-404 · Improper Resource Shutdown or Release (page 7)
Page 7 of 9 — CVEs classified under CWE-404, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-0848 | Medium | 5.3 | 2023-02-15 | A vulnerability was found in Netgear WNDR3700v2 1.0.1.14. It has been rated as problematic. This issue affects some unknown processing of the component Web Man… |
CVE-2022-44267 | Medium | 6.5 | 2023-02-06 | ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image (e.g., for resize), the convert process could be left waiting for stdin inp… |
CVE-2023-24444 | Critical | 9.8 | 2023-01-26 | Jenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on login. |
CVE-2023-23151 | Medium | 6.5 | 2023-01-26 | bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file deletion vulnerability via the component /include/inc_content_media.php. |
CVE-2023-0417 | Medium | 6.3 | 2023-01-26 | Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file |
CVE-2023-0416 | Medium | 6.3 | 2023-01-26 | GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file |
CVE-2023-0415 | Medium | 6.3 | 2023-01-26 | iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file |
CVE-2023-0414 | Medium | 6.3 | 2023-01-26 | Crash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet injection or crafted capture file |
CVE-2023-0413 | Medium | 6.3 | 2023-01-26 | Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file |
CVE-2023-0412 | Medium | 6.3 | 2023-01-26 | TIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file |
CVE-2014-125066 | Medium | 4.3 | 2023-01-08 | A vulnerability was found in emmflo yuko-bot. It has been declared as problematic. This vulnerability affects unknown code. The manipulation of the argument ti… |
CVE-2015-10025 | Low | 3.5 | 2023-01-07 | A vulnerability has been found in luelista miniConf up to 1.7.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of th… |
CVE-2023-0029 | Medium | 5.3 | 2023-01-01 | A vulnerability was found in Multilaser RE708 RE1200R4GC-2T2R-V3_v3411b_MUL029B. It has been rated as problematic. This issue affects some unknown processing o… |
CVE-2018-25062 | Low | 3.5 | 2023-01-01 | A vulnerability classified as problematic has been found in flar2 ElementalX up to 6.x on Nexus 9. Affected is the function xfrm_dump_policy_done of the file n… |
CVE-2017-20154 | Low | 3.5 | 2022-12-30 | A vulnerability was found in ghostlander Phoenixcoin. It has been classified as problematic. Affected is the function CTxMemPool::accept of the file src/main.c… |
CVE-2021-4280 | Medium | 4.3 | 2022-12-25 | A vulnerability was found in styler_praat_scripts. It has been classified as problematic. Affected is an unknown function of the file file_segmenter.praat of t… |
CVE-2022-33324 | High | 7.5 | 2022-12-23 | Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsub… |
CVE-2022-46314 | High | 7.5 | 2022-12-20 | The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability. |
CVE-2021-4250 | Low | 3.5 | 2022-12-18 | A vulnerability classified as problematic has been found in cgriego active_attr up to 0.15.2. This affects the function call of the file lib/active_attr/typeca… |
CVE-2021-4249 | Medium | 4.3 | 2022-12-18 | A vulnerability was found in xml-conduit. It has been classified as problematic. Affected is an unknown function of the file xml-conduit/src/Text/XML/Stream/Pa… |
CVE-2021-4247 | Medium | 4.3 | 2022-12-18 | A vulnerability has been found in OWASP NodeGoat and classified as problematic. This vulnerability affects unknown code of the file app/routes/research.js of t… |
CVE-2022-4565 | Medium | 4.3 | 2022-12-16 | A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown code of the file cn.hutool.core.util.Zip… |
CVE-2022-4296 | Medium | 6.5 | 2022-12-06 | A vulnerability classified as problematic has been found in TP-Link TL-WR740N. Affected is an unknown function of the component ARP Handler. The manipulation l… |
CVE-2022-4246 | Medium | 4.3 | 2022-12-01 | A vulnerability classified as problematic has been found in Kakao PotPlayer. This affects an unknown part of the component MID File Handler. The manipulation l… |
CVE-2022-4066 | Low | 3.5 | 2022-11-19 | A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onion_response_flush of the file src/o… |
CVE-2022-3957 | Medium | 4.3 | 2022-11-11 | A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svg_parse_preserveaspectratio of the file scenegrap… |
CVE-2022-39368 | High | 8.2 | 2022-11-10 | Eclipse Californium is a Java implementation of RFC7252 - Constrained Application Protocol for IoT Cloud services. In versions prior to 3.7.0, and 2.7.4, Calif… |
CVE-2022-44552 | High | 7.5 | 2022-11-09 | The lock screen module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-3810 | Medium | 4.3 | 2022-11-02 | A vulnerability was found in Axiomatic Bento4. It has been classified as problematic. This affects the function AP4_File::AP4_File of the file Mp42Hevc.cpp of… |
CVE-2022-3809 | Medium | 4.3 | 2022-11-02 | A vulnerability was found in Axiomatic Bento4 and classified as problematic. Affected by this issue is the function ParseCommandLine of the file Mp4Tag/Mp4Tag… |
CVE-2022-3817 | Medium | 4.3 | 2022-11-01 | A vulnerability has been found in Axiomatic Bento4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component m… |
CVE-2022-3816 | Medium | 4.3 | 2022-11-01 | A vulnerability, which was classified as problematic, was found in Axiomatic Bento4. Affected is an unknown function of the component mp4decrypt. The manipulat… |
CVE-2022-3815 | Medium | 4.3 | 2022-11-01 | A vulnerability, which was classified as problematic, has been found in Axiomatic Bento4. This issue affects some unknown processing of the component mp4decryp… |
CVE-2022-3814 | Medium | 4.3 | 2022-11-01 | A vulnerability classified as problematic was found in Axiomatic Bento4. This vulnerability affects unknown code of the component mp4decrypt. The manipulation… |
CVE-2022-3813 | Medium | 4.3 | 2022-11-01 | A vulnerability classified as problematic has been found in Axiomatic Bento4. This affects an unknown part of the component mp4edit. The manipulation leads to… |
CVE-2022-3812 | Medium | 4.3 | 2022-11-01 | A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is the function AP4_ContainerAtom::AP4_ContainerAtom of… |
CVE-2022-3807 | Medium | 4.3 | 2022-11-01 | A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Incomple… |
CVE-2022-3318 | Medium | 4.3 | 2022-11-01 | Use after free in ChromeOS Notifications in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to reboot Chrome OS… |
CVE-2022-3669 | Medium | 5.3 | 2022-10-26 | A vulnerability was found in Axiomatic Bento4 and classified as problematic. This issue affects the function AP4_AvccAtom::Create of the component mp4edit. The… |
CVE-2022-3668 | Medium | 5.3 | 2022-10-26 | A vulnerability has been found in Axiomatic Bento4 and classified as problematic. This vulnerability affects the function AP4_AtomFactory::CreateAtomFromStream… |
CVE-2022-3663 | Medium | 5.3 | 2022-10-26 | A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. This issue affects the function AP4_StsdAtom of the file Ap4StsdAtom.cpp of th… |
CVE-2022-3647 | Low | 3.1 | 2022-10-21 | ** DISPUTED ** A vulnerability, which was classified as problematic, was found in Redis up to 6.2.7/7.0.5. Affected is the function sigsegvHandler of the file… |
CVE-2022-3646 | Low | 3.1 | 2022-10-21 | A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function nilfs_attach_log_writer of the file fs/ni… |
CVE-2022-3637 | Low | 2.6 | 2022-10-21 | A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jlink_init of the file monitor/jlink.c of… |
CVE-2022-3630 | Low | 3.1 | 2022-10-21 | A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects some unknown processing of the file fs/fscache/cookie.c of the… |
CVE-2022-3624 | Low | 3.5 | 2022-10-21 | A vulnerability was found in Linux Kernel and classified as problematic. Affected by this issue is the function rlb_arp_xmit of the file drivers/net/bonding/bo… |
CVE-2022-3621 | Medium | 4.3 | 2022-10-20 | A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_bmap_lookup_at_level of the file fs/nilfs2/ino… |
CVE-2022-3619 | Low | 3.5 | 2022-10-20 | A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function l2cap_recv_acldata of the file net/blueto… |
CVE-2022-3606 | Low | 3.5 | 2022-10-19 | A vulnerability was found in Linux Kernel. It has been classified as problematic. This affects the function find_prog_by_sec_insn of the file tools/lib/bpf/lib… |
CVE-2022-3594 | Medium | 5.3 | 2022-10-18 | A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intr_callback of the file driver… |
CVE-2022-3563 | Low | 3.5 | 2022-10-17 | A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-teste… |
CVE-2022-3553 | Low | 3.5 | 2022-10-17 | A vulnerability, which was classified as problematic, was found in X.org Server. This affects an unknown part of the file hw/xquartz/X11Controller.m of the com… |
CVE-2022-3551 | Low | 3.5 | 2022-10-17 | A vulnerability, which was classified as problematic, has been found in X.org Server. Affected by this issue is the function ProcXkbGetKbdByName of the file xk… |
CVE-2022-3544 | Low | 3.5 | 2022-10-17 | A vulnerability, which was classified as problematic, was found in Linux Kernel. Affected is the function damon_sysfs_add_target of the file mm/damon/sysfs.c o… |
CVE-2022-3543 | Low | 3.5 | 2022-10-17 | A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function unix_sock_destructor/unix_release_sock of… |
CVE-2022-3533 | Low | 3.5 | 2022-10-17 | A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects the function parse_usdt_arg of the file tools/lib/bpf/usdt.c of… |
CVE-2022-3526 | Medium | 5.3 | 2022-10-16 | A vulnerability classified as problematic was found in Linux Kernel. This vulnerability affects the function macvlan_handle_frame of the file drivers/net/macvl… |
CVE-2022-3524 | Medium | 4.3 | 2022-10-16 | A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the compon… |
CVE-2022-28887 | Medium | 4.3 | 2022-10-12 | Multiple Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll unpacker handler function crashes. This c… |
CVE-2022-33747 | Low | 3.8 | 2022-10-11 | Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest's P2M (Physical-to-Machine) mapping. When… |
CVE-2022-33746 | Medium | 6.5 | 2022-10-11 | P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size. Therefore its freeing m… |
CVE-2022-32589 | High | 7.5 | 2022-10-07 | In Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release. This could lead to remote denial of service with no additiona… |
CVE-2022-40890 | High | 7.5 | 2022-09-29 | A vulnerability in /src/amf/amf-context.c in Open5GS 2.4.10 and earlier leads to AMF denial of service. |
CVE-2022-3354 | Low | 3.5 | 2022-09-28 | A vulnerability has been found in Open5GS up to 2.4.10 and classified as problematic. This vulnerability affects unknown code in the library lib/core/ogs-tlv-m… |
CVE-2022-3299 | Medium | 4.3 | 2022-09-26 | A vulnerability was found in Open5GS up to 2.4.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality in the libra… |
CVE-2022-35191 | Medium | 6.5 | 2022-08-23 | D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service (DoS) via a craft… |
CVE-2022-37133 | High | 7.5 | 2022-08-22 | D-link DIR-816 A2_v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the… |
CVE-2022-2776 | Medium | 5.4 | 2022-08-11 | A vulnerability classified as problematic has been found in SourceCodester Gym Management System. Affected is an unknown function of the file delete_user.php… |
CVE-2022-35272 | High | 7.5 | 2022-08-04 | In BIG-IP Versions 17.0.x before 17.0.0.1 and 16.1.x before 16.1.3.1, when source-port preserve-strict is configured on an HTTP Message Routing Framework (MRF)… |
CVE-2022-35240 | High | 7.5 | 2022-08-04 | In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when the Message Routing (MR) Message Queuing Telemetry Transport… |
CVE-2022-31182 | Medium | 5.3 | 2022-08-01 | Discourse is the an open source discussion platform. In affected versions a maliciously crafted request for static assets could cause error responses to be cac… |
CVE-2022-2591 | High | 7.5 | 2022-08-01 | A vulnerability classified as critical has been found in TEM FLEX-1085 1.6.0. Affected is an unknown function of the file /sistema/flash/reboot. The manipulati… |
CVE-2022-2191 | High | 7.5 | 2022-07-07 | In Eclipse Jetty versions 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, SslConnection does not release ByteBuffers from configured ByteBufferPool in cas… |
CVE-2022-23717 | Medium | 5.0 | 2022-06-30 | PingID Windows Login prior to 2.8 is vulnerable to a denial of service condition on local machines when combined with using offline security keys as part of au… |
CVE-2017-20024 | Medium | 5.3 | 2022-06-09 | A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been classified as problematic. Affected is an unknown function. The manipulation leads… |
CVE-2022-28875 | Medium | 4.3 | 2022-05-25 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aemobile component can cr… |
CVE-2022-25762 | High | 8.6 | 2022-05-13 | If a web application sends a WebSocket message concurrently with the WebSocket connection closing when running on Apache Tomcat 8.5.0 to 8.5.75 or Apache Tomca… |
CVE-2021-33069 | Medium | 5.5 | 2022-05-12 | Improper resource shutdown or release in firmware for some Intel(R) SSD, Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC may allow a pr… |
CVE-2021-40405 | Medium | 6.5 | 2022-04-14 | A denial of service vulnerability exists in the cgiserver.cgi Upgrade API functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP reque… |
CVE-2022-1289 | Medium | 4.3 | 2022-04-10 | A denial of service vulnerability was found in tildearrow Furnace. It has been classified as problematic. This is due to an incomplete fix of CVE-2022-1211. It… |
CVE-2022-1210 | Medium | 4.3 | 2022-04-03 | A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious f… |
CVE-2017-20015 | Low | 2.8 | 2022-03-28 | A vulnerability, which was classified as problematic, was found in WEKA INTEREST Security Scanner up to 1.8. This affects an unknown part of the component LAN… |
CVE-2017-20014 | Low | 2.8 | 2022-03-28 | A vulnerability, which was classified as problematic, has been found in WEKA INTEREST Security Scanner up to 1.8. Affected by this issue is some unknown functi… |
CVE-2017-20013 | Low | 2.8 | 2022-03-28 | A vulnerability classified as problematic was found in WEKA INTEREST Security Scanner up to 1.8. Affected by this vulnerability is the Stresstest Configuration… |
CVE-2017-20012 | Low | 2.8 | 2022-03-28 | A vulnerability classified as problematic has been found in WEKA INTEREST Security Scanner up to 1.8. Affected is Stresstest Scheme Handler which leads to a de… |
CVE-2017-20011 | Low | 2.8 | 2022-03-28 | A vulnerability was found in WEKA INTEREST Security Scanner 1.8. It has been rated as problematic. This issue affects some unknown processing of the component… |
CVE-2010-10001 | Medium | 5.3 | 2022-03-28 | A vulnerability, which was classified as problematic, was found in Shemes GrabIt up to 1.7.2 Beta 4. This affects the component NZB Date Parser. The manipulati… |
CVE-2015-10002 | Medium | 5.3 | 2022-03-28 | A vulnerability classified as problematic has been found in Kiddoware Kids Place. This affects the Home Button Protection. A repeated pressing of the button ca… |
CVE-2022-23242 | Medium | 6.3 | 2022-03-23 | TeamViewer Linux versions before 15.28 do not properly execute a deletion command for the connection password in case of a process crash. Knowledge of the cras… |
CVE-2022-0396 | Medium | 5.3 | 2022-03-23 | BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cau… |
CVE-2021-46702 | Medium | 5.5 | 2022-02-26 | Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure. This could allow local attackers to bypass the intended anonymity feature… |
CVE-2022-23634 | High | 8.0 | 2022-02-11 | Puma is a Ruby/Rack web server built for parallelism. Prior to `puma` version `5.6.2`, `puma` may not always call `close` on the response body. Rails, prior to… |
CVE-2021-41441 | High | 7.4 | 2022-02-09 | A DoS attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to reboot the router via sending a spec… |
CVE-2022-23010 | High | 7.5 | 2022-01-25 | On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a FastL4 profile an… |
CVE-2022-23033 | High | 7.8 | 2022-01-25 | arm: guest_physmap_remove_page not removing the p2m mappings The functions to remove one or more entries from a guest p2m pagetable on Arm (p2m_remove_mapping… |
CVE-2021-46322 | Medium | 5.5 | 2022-01-20 | Duktape v2.99.99 was discovered to contain a SEGV vulnerability via the component duk_push_tval in duktape/duk_api_stack.c. |
CVE-2021-45829 | Medium | 5.5 | 2022-01-03 | HDF5 1.13.1-1 is affected by: segmentation fault, which causes a Denial of Service. |
CVE-2021-44717 | Medium | 4.8 | 2022-01-01 | Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous… |
CVE-2021-0984 | High | 7.8 | 2021-12-15 | In onNullBinding of ManagedServices.java, there is a possible permission bypass due to an incorrectly unbound service. This could lead to local escalation of p… |
CVE-2018-25021 | High | 7.5 | 2021-12-13 | The TCP Server module in toxcore before 0.2.8 doesn't free the TCP priority queue under certain conditions, which allows a remote attacker to exhaust the syste… |