CWE-459 · Denial of Service
Incomplete Cleanup
243CVEs
SortMost likely exploited
243 CVEs with CWE-459 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2017-17090An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7 and older. If the ch…Digium · Certified Asterisk · 2017-12-02 | – | 82% | 2017-12-02 |
| CVE-2025-31650Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frameApache Software Foundation · Apache Tomcat · CVSS 7.5 · 2025-04-28 | 7.5 | 61% | 2025-04-28 |
| CVE-2022-1552A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX,…Postgresql · postgresql · 2022-08-31 | – | 17% | 2022-08-31 |
| CVE-2018-18924The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml file with "#exec cmd" because rejected files remain on the serv…Projeqtor · Projeqtor · 2018-11-04 | – | 9.5% | 2018-11-04 |
| CVE-2023-41835Apache Struts: excessive disk usageApache Software Foundation · Apache Struts · CVSS 7.5 · 2023-12-05 | 7.5 | 7.3% | 2023-12-05 |
| CVE-2022-21123Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.Intel · Intel(R) Processors · CVSS 5.5 · 2022-06-15 | 5.5 | 6.9% | 2022-06-15 |
| CVE-2022-21166Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via loca…Intel · Intel(R) Processors · CVSS 5.5 · 2022-06-15 | 5.5 | 6.5% | 2022-06-15 |
| CVE-2022-21125Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.Intel · Intel(R) Processors · CVSS 5.5 · 2022-06-15 | 5.5 | 6.5% | 2022-06-15 |
| CVE-2022-21127Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local…Intel · Intel(R) Processors · CVSS 5.5 · 2022-06-15 | 5.5 | 5.5% | 2022-06-15 |
| CVE-2022-1473Resource leakage when decoding certificates and keysOpenSSL · OpenSSL · CVSS 7.5 · 2022-05-03 | 7.5 | 4.7% | 2022-05-03 |
| CVE-2020-13451An incomplete-cleanup vulnerability in the Office rendering engine of Gotenberg through 6.2.1 allows an attacker to overwrite LibreOffice configuration files and execute arbitrary…Thecodingmachine · Gotenberg · 2021-01-07 | – | 3.2% | 2021-01-07 |
| CVE-2019-25016In OpenDoas from 6.6 to 6.8 the users PATH variable was incorrectly inherited by authenticated executions if the authenticating rule allowed the user to execute any command. Rules…Opendoas Project · Opendoas · 2021-01-28 | – | 2.8% | 2021-01-28 |
| CVE-2017-0303In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 11.6.1, under limited circumsta…F5 Networks, Inc. · BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Webs… · 2017-10-27 | – | 2.7% | 2017-10-27 |
| CVE-2023-42795Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requestsApache Software Foundation · Apache Tomcat · CVSS 5.3 · 2023-10-10 | 5.3 | 2.5% | 2023-10-10 |
| CVE-2024-23672Apache Tomcat: WebSocket DoS with incomplete closing handshakeApache Software Foundation · Apache Tomcat · CVSS 6.3 · 2024-03-13 | 6.3 | 2.3% | 2024-03-13 |
| CVE-2023-42794Apache Tomcat: FileUpload: DoS due to accumulation of temporary files on WindowsApache Software Foundation · Apache Tomcat · 2023-10-10 | – | 2.3% | 2023-10-10 |
| CVE-2019-18191A privilege escalation vulnerability in the Trend Micro Deep Security as a Service Quick Setup cloud formation template could allow an authenticated entity with certain unrestrict…Trend Micro · Trend Micro Deep Security as a Service · 2019-12-16 | – | 2.2% | 2019-12-16 |
| CVE-2002-2067East-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that wa…East-Tec · Eraser · 2005-07-14 | – | 2.2% | 2005-07-14 |
| CVE-2002-2070SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that…Accessdata · Secureclean · 2005-07-14 | – | 2.2% | 2005-07-14 |
| CVE-2002-2068Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed…Tolvanen · Eraser · 2005-07-14 | – | 2.2% | 2005-07-14 |
| CVE-2005-1744BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the ap…Bea · Weblogic Server · 2005-05-24 | – | 2.1% | 2005-05-24 |
| CVE-2002-2066BestCrypt BCWipe 1.0.7 and 2.0 through 2.35.1 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sens…Jetico · Bcwipe · 2005-07-14 | – | 2.1% | 2005-07-14 |
| CVE-2002-2069PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was sup…Pgp · Personal Privacy · 2005-07-14 | – | 2.1% | 2005-07-14 |
| CVE-2023-36468Upgrading doesn't prevent exploiting vulnerable XWiki documentsxwiki · xwiki-platform · CVSS 10 · 2023-06-29 | 10.0 | 1.9% | 2023-06-29 |
| CVE-2005-2293Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows local users to obtain sensitive informat…Oracle · Forms Builder · 2005-07-17 | – | 1.8% | 2005-07-17 |
| CVE-2019-8768"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Catalina 10.15. A user may be unable…Apple · macOS · 2019-12-18 | – | 1.6% | 2019-12-18 |
| CVE-2020-12857Caching of GATT characteristic values (TempID) in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to long-term re-identify an Android device running COVIDSafe.Health · Covidsafe · 2020-05-18 | – | 1.6% | 2020-05-18 |
| CVE-2025-64775Apache Struts: File leak in multipart request processing causes disk exhaustion (DoS)Apache Software Foundation · Apache Struts · CVSS 7.5 · 2025-12-01 | 7.5 | 1.5% | 2025-12-01 |
| CVE-2022-37428PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service (daemo…Powerdns · Recursor · CVSS 6.5 · 2022-08-23 | 6.5 | 1.5% | 2022-08-23 |
| CVE-2022-45347Apache ShardingSphere-Proxy: MySQL authentication bypassApache Software Foundation · Apache ShardingSphere-Proxy · CVSS 9.8 · 2022-12-22 | 9.8 | 1.5% | 2022-12-22 |
| CVE-2021-45330An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server…Gitea · Gitea · 2022-02-09 | – | 1.4% | 2022-02-09 |
| CVE-2018-17467Insufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL ba…Google · Chrome · 2018-11-14 | – | 1.4% | 2018-11-14 |
| CVE-2019-17420In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a singl…Oisf · Libhtp · 2019-10-09 | – | 1.4% | 2019-10-09 |
| CVE-2019-11514User/Command/ConfirmEmailHandler.php in Flarum before 0.1.0-beta.8 mishandles invalidation of user email tokens.Flarum · Flarum · 2019-04-25 | – | 1.3% | 2019-04-25 |
| CVE-2020-13346Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential issues through API.GitLab · GitLab · CVSS 6.5 · 2020-10-07 | 6.5 | 1.3% | 2020-10-07 |
| CVE-2020-12624The League application before 2020-05-02 on Android sends a bearer token in an HTTP Authorization header to an arbitrary web site that hosts an external image because an OkHttp ob…Theleague · The League · 2020-05-03 | – | 1.3% | 2020-05-03 |
| CVE-2021-32928The Sentinel LDK Run-Time Environment installer (Versions 7.6 and prior) adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networ…Thalesgroup · Sentinel LDK Run-Time Environment · 2021-06-16 | – | 1.3% | 2021-06-16 |
| CVE-2021-45706An issue was discovered in the zeroize_derive crate before 1.1.1 for Rust. Dropped memory is not zeroed out for an enum.Zeroize Derive Project · Zeroize Derive · 2021-12-26 | – | 1.2% | 2021-12-26 |
| CVE-2020-14451An issue was discovered in Mattermost Mobile Apps before 1.29.0. The iOS app allowed Single Sign-On cookies and Local Storage to remain after a logout, aka MMSA-2020-0013.Mattermost · Mattermost Mobile · 2020-06-19 | – | 1.1% | 2020-06-19 |
| CVE-2000-0552ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information.Icq · Icq · 2000-10-13 | – | 1.1% | 2000-10-13 |
| CVE-2018-18281Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removes entries from the pagetables of a…Linux · Linux Kernel · 2018-10-30 | – | 1.1% | 2018-10-30 |
| CVE-2019-12902Pydio Cells before 1.5.0 does incomplete cleanup of a user's data upon deletion. This allows a new user, holding the same User ID as a deleted user, to restore the deleted user's…Pydio · Cells · 2019-06-19 | – | 1.1% | 2019-06-19 |
| CVE-2021-36205Metasys session tokenJohnson Controls · Metasys · CVSS 8.1 · 2022-04-15 | 8.1 | 1.0% | 2022-04-15 |
| CVE-2023-28859redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an…Redis · Redis-Py · 2023-03-26 | – | 1.0% | 2023-03-26 |
| CVE-2019-8550An issue existed in the pausing of FaceTime video. The issue was resolved with improved logic. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, watchOS 5.2. A user’s video m…Apple · iOS · 2019-12-18 | – | 1.0% | 2019-12-18 |
| CVE-2020-27888An issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0.28 devices. Cached credentials are not erased from an access point re…Ui · Unifi Meshing Access Point Firmware · 2020-10-27 | – | 1.0% | 2020-10-27 |
| CVE-2021-26833Cleartext Storage in a File or on Disk in TimelyBills <= 1.7.0 for iOS and versions <= 1.21.115 for Android allows attacker who can locally read user's files obtain JWT tokens for…Timelybills · Timelybills · 2021-04-06 | – | 1.0% | 2021-04-06 |
| CVE-2020-12494Beckhoff: Etherleak in TwinCAT RT network driverBeckhoff · TwinCat Driver for Intel 8254x (Tcl8254x.sys) · CVSS 5.3 · 2020-06-16 | 5.3 | 1.0% | 2020-06-16 |
| CVE-2024-47693IB/core: Fix ib_cache_setup_one error flow cleanupLinux · Linux · 2024-10-21 | – | 1.0% | 2024-10-21 |
| CVE-2025-2260Eclipse ThreadX NetX Duo HTTP component server denial of serviceEclipse Foundation · ThreadX · CVSS 7.1 · 2025-04-06 | 7.1 | 1.0% | 2025-04-06 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.