CWE-459 · Incomplete Cleanup (page 3)
Page 3 of 3 — CVEs classified under CWE-459, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-3733 | Medium | 4.9 | 2019-09-30 | RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3) different Improper Clearing of Heap Memory Before Release vulnerabili… |
CVE-2019-13014 | Medium | 5.5 | 2019-08-23 | Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the operating system may have made a copy of the privileged helper whi… |
CVE-2019-12902 | Medium | 6.5 | 2019-06-20 | Pydio Cells before 1.5.0 does incomplete cleanup of a user's data upon deletion. This allows a new user, holding the same User ID as a deleted user, to restore… |
CVE-2019-1586 | Medium | 4.6 | 2019-05-03 | A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, local attacker with physical access to ob… |
CVE-2019-11514 | High | 7.5 | 2019-04-25 | User/Command/ConfirmEmailHandler.php in Flarum before 0.1.0-beta.8 mishandles invalidation of user email tokens. |
CVE-2019-5011 | Medium | 5.5 | 2019-03-21 | An exploitable privilege escalation vulnerability exists in the helper service CleanMyMac X, version 4.20, due to improper updating. The application failed to… |
CVE-2019-5595 | Medium | 5.5 | 2019-02-12 | In FreeBSD before 11.2-STABLE(r343782), 11.2-RELEASE-p9, 12.0-STABLE(r343781), and 12.0-RELEASE-p3, kernel callee-save registers are not properly sanitized bef… |
CVE-2018-19961 | High | 7.8 | 2018-12-08 | An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not alwa… |
CVE-2018-17467 | Medium | 4.3 | 2018-11-14 | Insufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of… |
CVE-2018-18924 | High | 8.8 | 2018-11-04 | The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml file with "#exec cmd" because rejected file… |
CVE-2018-18281 | High | 7.8 | 2018-10-30 | Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removes entries from… |
CVE-2018-15407 | Medium | 5.5 | 2018-10-05 | A vulnerability in the installation process of Cisco HyperFlex Software could allow an authenticated, local attacker to read sensitive information. The vulnera… |
CVE-2018-11068 | Medium | 4.6 | 2018-09-11 | RSA BSAFE SSL-J versions prior to 6.2.4 contain a Heap Inspection vulnerability that could allow an attacker with physical access to the system to recover sens… |
CVE-2018-12332 | Medium | 4.2 | 2018-06-17 | Incomplete Cleanup vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via a compromise… |
CVE-2017-17090 | High | 7.5 | 2017-12-02 | An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7… |
CVE-2017-0303 | High | 7.5 | 2017-10-27 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 11.6.1, und… |
CVE-2005-2293 | Medium | 5.5 | 2005-07-18 | Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows local users to obtai… |
CVE-2005-1744 | Critical | 9.8 | 2005-05-24 | BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to conti… |
CVE-2002-2070 | High | 7.5 | 2002-12-31 | SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensit… |
CVE-2002-2069 | High | 7.5 | 2002-12-31 | PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive info… |
CVE-2002-2068 | High | 7.5 | 2002-12-31 | Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive informati… |
CVE-2002-2067 | High | 7.5 | 2002-12-31 | East-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive… |
CVE-2002-2066 | High | 7.5 | 2002-12-31 | BestCrypt BCWipe 1.0.7 and 2.0 through 2.35.1 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attac… |
CVE-2002-0788 | Medium | 5.5 | 2002-08-12 | An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files th… |
CVE-2000-0552 | Medium | 5.5 | 2000-06-06 | ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive infor… |