Improper Control of a Resource Through its Lifetime

The product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.

CVEs (65)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-1620 1Juniper 1Junos Os Evolved Jun 17, 2026 Apr 8, 2020 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log. This issue affects all versions of Junos OS Evolved prior to 19.3R1.
CVE-2020-3175 1Cisco 1Nx Os Jun 17, 2026 Feb 26, 2020 N/A· v4 8.6 HIGH· v3 7.8 HIGH· v2 A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an aff...Show more A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper resource usage control. An attacker could exploit this vulnerability by sending traffic to the management interface (mgmt0) of an affected device at very high rates. An exploit could allow the attacker to cause unexpected behaviors such as high CPU usage, process crashes, or even full system reboots of an affected device.Show less
CVE-2019-16779 3Debian Excon ProjectOpensuse 4Backports Sle Debian LinuxExcon+1 more Jul 28, 2026 Dec 16, 2019 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the socket. Subsequent requests would then read...Show more In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the socket. Subsequent requests would then read this data, returning content from the previous response. The race condition window appears to be short, and it would be difficult to purposefully exploit this.Show less
CVE-2019-5816 3Fedoraproject GoogleOpensuse 4Backports ChromeFedora+1 more Jun 17, 2026 Jun 27, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page.
CVE-2016-8763 1Huawei 3P8 Lite Firmware P9 FirmwareP9 Lite Firmware May 13, 2026 Apr 2, 2017 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions h...Show more The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an improper resource release vulnerability, which allows attackers to cause a system restart or privilege elevation.Show less

Previous 1 2 34