CWE-399 · Denial of Service
Resource Management Errors
2,619CVEs
10exploited
0with a public check
405likely (EPSS 10%+)
SortMost likely exploited
2,619 CVEs with CWE-399 as their weakness · the first 2,000 are paged here; the Atlas names every one
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2018-0156In CISA KEVExploitedA vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected dev…Cisco · Cisco IOS and IOS XE · CVSS 7.5 · 2018-03-28 | 7.5 | 9.4% | 2018-03-28 |
| CVE-2018-0154In CISA KEVExploitedA vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause…Cisco · Cisco IOS · CVSS 7.5 · 2018-03-28 | 7.5 | 7.1% | 2018-03-28 |
| CVE-2017-12237In CISA KEVExploitedA vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthenticated, remote attac…Cisco · Cisco IOS and IOS XE · CVSS 7.5 · 2017-09-28 | 7.5 | 7.1% | 2017-09-28 |
| CVE-2017-12231In CISA KEVExploitedA vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause a…Cisco · Cisco IOS · CVSS 7.5 · 2017-09-28 | 7.5 | 7.1% | 2017-09-28 |
| CVE-2017-6627In CISA KEVExploitedA vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote attacker to cause the input queue…Cisco · Cisco IOS and Cisco IOS XE · CVSS 7.5 · 2017-09-07 | 7.5 | 6.2% | 2017-09-07 |
| CVE-2018-0180In CISA KEVExploitedMultiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected s…Cisco · Cisco IOS · CVSS 6.8 · 2018-03-28 | 6.8 | 4.9% | 2018-03-28 |
| CVE-2018-0179In CISA KEVExploitedMultiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected s…Cisco · Cisco IOS · CVSS 6.8 · 2018-03-28 | 6.8 | 4.9% | 2018-03-28 |
| CVE-2018-0161In CISA KEVExploitedA vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated,…Cisco · Cisco IOS · CVSS 6.3 · 2018-03-28 | 6.3 | 4.1% | 2018-03-28 |
| CVE-2017-12232In CISA KEVExploitedA vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 could allow an unauthent…Cisco · Cisco IOS · CVSS 6.5 · 2017-09-28 | 6.5 | 2.2% | 2017-09-28 |
| CVE-2017-12238In CISA KEVExploitedA vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent atta…Cisco · Cisco IOS · CVSS 6.5 · 2017-09-28 | 6.5 | 2.0% | 2017-09-28 |
| CVE-2009-3103Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote…Microsoft · Windows Server 2008 · 2009-09-08 | – | 92% | 2009-09-08 |
| CVE-2009-0075Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTM…Microsoft · Internet Explorer · 2009-02-10 | – | 85% | 2009-02-10 |
| CVE-2005-1790Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash) and execute arbitrary code vi…Microsoft · Internet Explorer · 2005-06-01 | – | 83% | 2005-06-01 |
| CVE-2009-2526Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remote attackers to cause a denial of servic…Microsoft · Windows Vista · 2009-10-14 | – | 82% | 2009-10-14 |
| CVE-2010-3971Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used in Microsoft Internet Explorer 6 through 8…Microsoft · Internet Explorer · 2010-12-22 | – | 82% | 2010-12-22 |
| CVE-2011-4858Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictab…Apache · Tomcat · 2012-01-05 | – | 80% | 2012-01-05 |
| CVE-2015-0015Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of service (system hang and RADIUS outage) via…Microsoft · Windows Server 2003 · 2015-01-13 | – | 79% | 2015-01-13 |
| CVE-2015-1868The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x b…Powerdns · Authoritative · 2015-05-18 | – | 79% | 2015-05-18 |
| CVE-2011-0065Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors r…Mozilla · Firefox · 2011-05-07 | – | 74% | 2011-05-07 |
| CVE-2007-6750The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris, related to the lac…Apache · Http Server · 2011-12-27 | – | 71% | 2011-12-27 |
| CVE-2011-3658The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAttrModified event handlers, which allows remote attackers to…Mozilla · Firefox · 2011-12-21 | – | 70% | 2011-12-21 |
| CVE-2008-3656Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in WEBrick::HTTP::DefaultFileHandler in WEBrick in Ruby 1.8.5 and earlier, 1.8.6 through…Ruby-Lang · Ruby · 2008-08-13 | – | 70% | 2008-08-13 |
| CVE-2008-0927dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with (1) multiple Connection…Microsoft · Windows-Nt · 2008-04-14 | – | 70% | 2008-04-14 |
| CVE-2014-8601PowerDNS Recursor before 3.6.2 does not limit delegation chaining, which allows remote attackers to cause a denial of service ("performance degradations") via a large or infinite…Powerdns · Recursor · 2014-12-10 | – | 69% | 2014-12-10 |
| CVE-2005-0803The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a crafted Enhanced Metafile (EMF) fi…Microsoft · Windows 2000 · 2005-03-20 | – | 68% | 2005-03-20 |
| CVE-2008-4844Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to e…Microsoft · Internet Explorer · 2008-12-11 | – | 67% | 2008-12-11 |
| CVE-2008-4546Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL pointer dereference…Adobe · Flash Player · 2008-10-14 | – | 66% | 2008-10-14 |
| CVE-2010-0242The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via crafted…Microsoft · Windows Vista · 2010-02-10 | – | 66% | 2010-02-10 |
| CVE-2016-5427PowerDNS (aka pdns) Authoritative Server before 3.4.10 does not properly handle a . (dot) inside labels, which allows remote attackers to cause a denial of service (backend CPU co…Powerdns · Authoritative · 2016-09-21 | – | 63% | 2016-09-21 |
| CVE-2005-2087Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service (applicatio…Microsoft · Ie · 2005-06-30 | – | 61% | 2005-06-30 |
| CVE-2008-5081The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash)…Avahi · Avahi · 2008-12-17 | – | 59% | 2008-12-17 |
| CVE-2014-8500ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory…Isc · Bind · 2014-12-11 | – | 59% | 2014-12-11 |
| CVE-2011-3414The CaseInsensitiveHashProvider.getHashCode function in the HashTable implementation in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0…Microsoft · Windows 7 · 2011-12-30 | – | 58% | 2011-12-30 |
| CVE-2013-0025Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, ak…Microsoft · Internet Explorer · 2013-02-13 | – | 56% | 2013-02-13 |
| CVE-2014-3507Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of serv…Openssl · Openssl · 2014-08-13 | – | 55% | 2014-08-13 |
| CVE-2013-1305HTTP.sys in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP header, aka "HTTP.sys…Microsoft · Windows 8 · 2013-05-15 | – | 55% | 2013-05-15 |
| CVE-2006-1993Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain Javascript that is not pr…Mozilla · Firefox · 2006-04-25 | – | 54% | 2006-04-25 |
| CVE-2008-3013gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3,…Microsoft · Digital Image Suite · 2008-09-10 | – | 52% | 2008-09-10 |
| CVE-2010-4052Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attacke…Gnu · Glibc · 2011-01-13 | – | 51% | 2011-01-13 |
| CVE-2010-0477The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1) SMBv1 and (2) SMBv2 response packets, which allows remote SMB servers and man-in-the-…Microsoft · Windows 7 · 2010-04-14 | – | 50% | 2010-04-14 |
| CVE-2008-4114srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial…Microsoft · Windows 2000 · 2008-09-16 | – | 49% | 2008-09-16 |
| CVE-2014-3506d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory con…Openssl · Openssl · 2014-08-13 | – | 46% | 2014-08-13 |
| CVE-2008-1309The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before build 6.0.12.1675, and RealPlayer 11 be…Realnetworks · Realplayer · 2008-03-12 | – | 46% | 2008-03-12 |
| CVE-2014-0231The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote attackers to cause a denial of service (process hang) via a requ…Apache · Http Server · 2014-07-20 | – | 45% | 2014-07-20 |
| CVE-2008-6082Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service (CPU consumption) via the SITE WHO command.Southrivertech · Titan Ftp Server · 2009-02-06 | – | 45% | 2009-02-06 |
| CVE-2008-4841The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted (1)…Microsoft · Wordpad · 2008-12-10 | – | 43% | 2008-12-10 |
| CVE-2005-3644PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of se…Microsoft · Windows 2000 · 2005-11-17 | – | 42% | 2005-11-17 |
| CVE-2015-4024Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote att…Php · Php · 2015-06-09 | – | 42% | 2015-06-09 |
| CVE-2009-0553Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 all…Microsoft · Internet Explorer · 2009-04-15 | – | 41% | 2009-04-15 |
| CVE-2006-1992mshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via nested OBJECT tags, which trigger invalid point…Microsoft · Internet Explorer · 2006-04-25 | – | 41% | 2006-04-25 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.