Advisories · Weakness

CWE-459.

Every Advisory and CVE whose sources give the weakness CWE-459, newest first.

org.apache.tomcat.embed:tomcat-embed-websocket +1 Maven

CVSS 6.3 Medium

Denial of Service via incomplete cleanup vulnerability in Apache Tomcat
- CWE-459
>=11.0.0-M1, <11.0.0-M17 || >=10.1.0-M1, <10.1.19 || >=9.0.0-M1, <9.0.86 || >=8.5.0, <8.5.99 · fixed in 11.0.0-M17, 10.1.19, 9.0.86, 8.5.99

GHSA-v682-8vv8-vpwr · CVE-2024-23672 Not analysed yet 13 Mar 2024
CVE-2024-2403 CVE record

CVSS 5.9 Medium

Incomplete cleanup in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- CWE-459
Not analysed yet 13 Mar 2024
CVE-2024-26005 CVE record

CVSS 4.8 Medium

PHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Series
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- CWE-459
Not analysed yet 12 Mar 2024
CVE-2024-1048 CVE record

CVSS 3.3 Low

Grub2: grub2-set-bootflag can be abused by local (pseudo-)users
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- CWE-459
Not analysed yet 6 Feb 2024
CVE-2024-21617 CVE record

CVSS 6.5 Medium

Junos OS: BGP flap on NSR-enabled devices causes memory leak
- Juniper Networks Junos OS
- CWE-459
Not analysed yet 12 Jan 2024
org.apache.struts:struts2-core Maven

CVSS 7.5 High

Apache Struts Improper Control of Dynamically-Managed Code Resources vulnerability
- CWE-459
>=6.2.0, <6.3.0.1 || >=6.0.0, <6.1.2.2 || <2.5.32 · fixed in 6.3.0.1, 6.1.2.2, 2.5.32

GHSA-729q-fcgp-r5xh · CVE-2023-41835 Not analysed yet 5 Dec 2023
CVE-2022-46298 CVE record

CVSS 1.9 Low

Incomplete cleanup in Intel Unison software
- Intel Unison software
- CWE-459
Not analysed yet 14 Nov 2023
CVE-2022-43477 CVE record

CVSS 3.3 Low

Incomplete cleanup in Intel Unison software
- Intel Unison software
- CWE-459
Not analysed yet 14 Nov 2023
org.apache.tomcat:tomcat-coyote Maven

CVSS 5.9 Medium

Apache Tomcat Incomplete Cleanup vulnerability
- CWE-459
>=9.0.70, <9.0.81 || >=8.5.85, <8.5.94 · fixed in 9.0.81, 8.5.94

GHSA-jm7m-8jh6-29hp · CVE-2023-42794 Not analysed yet 10 Oct 2023
org.apache.tomcat.embed:tomcat-embed-core +3 Maven

CVSS 5.3 Medium

Apache Tomcat Incomplete Cleanup vulnerability
- CWE-459
>=10.1.0-M1, <10.1.14 || >=9.0.0-M1, <9.0.81 || >=8.5.0, <8.5.94 || >=11.0.0-M1, <11.0.0-M12 · fixed in 10.1.14, 9.0.81, 8.5.94, 11.0.0-M12

GHSA-g8pj-r55q-5c2v · CVE-2023-42795 Not analysed yet 10 Oct 2023
org.xwiki.platform:xwiki-platform-oldcore Maven

CVSS 10.0 CriticalCritical · CVSS 9+

Upgrading doesn't prevent exploiting vulnerable XWiki documents
- CWE-459
>=2.0, <14.10.7 || >=15.0-rc-1, <15.2-rc-1 · fixed in 14.10.7, 15.2-rc-1

GHSA-8q9q-r9v2-644m · CVE-2023-36468 Not analysed yet 30 Jun 2023
CVE-2023-2400 CVE record

CVSS 2.7 Low

Incomplete cleanup in Devolutions Server
- Devolutions Server
- CWE-459
Not analysed yet 20 Jun 2023
CVE-2022-40974 CVE record

CVSS 1.8 Low

Incomplete cleanup in Intel(R) IPP Cryptography software
- Intel(R) IPP Cryptography software
- CWE-459
Not analysed yet 10 May 2023
org.springframework.security:spring-security-core Maven

CVSS 6.3 Medium

Spring Security logout not clearing security context
- CWE-459
>=5.7.0, <5.7.8 || >=5.8.0, <5.8.3 || >=6.0.0, <6.0.3 · fixed in 5.7.8, 5.8.3, 6.0.3

GHSA-x873-6rgc-94jc · CVE-2023-20862 Not analysed yet 19 Apr 2023
CVE-2023-0836 CVE record

CVSS 7.5 High

Information disclosure in HAProxy
- HAProxy
- Information disclosure
- CWE-459
Not analysed yet 29 Mar 2023
CVE-2022-45455 CVE record

CVSS 6.6 Medium

Incomplete cleanup in Acronis Cyber Protect Home Office and others
- Acronis Cyber Protect Home Office
- Acronis Agent
- CWE-459
Not analysed yet 13 Feb 2023
CVE-2023-22407 CVE record

CVSS 6.5 Medium

Junos OS and Junos OS Evolved: An RPD crash can happen due to an MPLS TE tunnel configuration change on a directly connected router
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-459
Not analysed yet 12 Jan 2023
org.apache.shardingsphere:shardingsphere-proxy Maven

CVSS 9.8 CriticalCritical · CVSS 9+

Apache ShardingSphere-Proxy Incomplete Cleanup vulnerability
- CWE-459
<5.3.0 · fixed in 5.3.0

GHSA-wmxm-6wxc-3xqf · CVE-2022-45347 Not analysed yet 22 Dec 2022
CVE-2022-3238 CVE record

CVSS 7.8 High

Incomplete cleanup in Kernel
- Kernel
- Memory corruption
- CWE-459
Not analysed yet 14 Nov 2022
CVE-2022-27639 CVE record

CVSS 5.4 Medium

Incomplete cleanup in Intel(R) XMM(TM) 7560 Modem software
- Intel(R) XMM(TM) 7560 Modem software
- CWE-459
Not analysed yet 11 Nov 2022
org.eclipse.californium:scandium Maven

CVSS 8.2 High

Failing DTLS handshakes may cause throttling to block processing of records
- Denial of service
- CWE-459
>=3.0.0, <3.7.0 || >=2.7.0, <2.7.4 · fixed in 3.7.0, 2.7.4

GHSA-p72g-cgh9-ghjg · CVE-2022-39368 Not analysed yet 9 Nov 2022
CVE-2022-44546 CVE record

CVSS 7.5 High

Incomplete cleanup in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-459
Not analysed yet 9 Nov 2022
CVE-2022-25664 CVE record

CVSS 6.2 Medium

Incomplete cleanup in Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…
- Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
- CWE-459
Not analysed yet 12 Oct 2022
CVE-2022-1552 CVE record

Incomplete cleanup in postgresql
- postgresql
- CWE-459
Not analysed yet 31 Aug 2022
CVE-2022-0171 CVE record

Incomplete cleanup in kernel
- kernel
- CWE-459
Not analysed yet 26 Aug 2022
CVE-2022-26074 CVE record

CVSS 4.4 Medium

Incomplete cleanup in Intel(R) SPS
- Intel(R) SPS
- CWE-459
Not analysed yet 18 Aug 2022
CVE-2022-21166 CVE record

CVSS 5.5 Medium

Incomplete cleanup in Intel(R) Processors
- Intel(R) Processors
- CWE-459
Not analysed yet 15 Jun 2022
CVE-2022-21127 CVE record

CVSS 5.5 Medium

Incomplete cleanup in Intel(R) Processors
- Intel(R) Processors
- CWE-459
Not analysed yet 15 Jun 2022
CVE-2022-21125 CVE record

CVSS 5.5 Medium

Incomplete cleanup in Intel(R) Processors
- Intel(R) Processors
- CWE-459
Not analysed yet 15 Jun 2022
CVE-2022-21123 CVE record

CVSS 5.5 Medium

Incomplete cleanup in Intel(R) Processors
- Intel(R) Processors
- CWE-459
Not analysed yet 15 Jun 2022
flarum/flarum Packagist

CVSS 7.5 High

Flarum mishandles invalidation of user email tokens
- CWE-459
<0.1.0-beta.8 · fixed in 0.1.0-beta.8

GHSA-g6w5-439m-jhwv · CVE-2019-11514 Not analysed yet 24 May 2022
openssl-src crates.io

CVSS 7.5 High

Resource leakage when decoding certificates and keys
- Denial of service
- CWE-459
>=300.0.0, <300.0.6 · fixed in 300.0.6

GHSA-g323-fr93-4j3c · CVE-2022-1473 Not analysed yet 4 May 2022
CVE-2021-36205 CVE record

CVSS 8.1 High

Metasys session token
- Johnson Controls Metasys
- CWE-459
Not analysed yet 15 Apr 2022
CVE-2021-4002 CVE record

Incomplete cleanup in kernel
- kernel
- CWE-459
Not analysed yet 3 Mar 2022
CVE-2022-0646 CVE record

Incomplete cleanup in Kernel
- Kernel
- CWE-459
Not analysed yet 18 Feb 2022
CVE-2021-4032 CVE record

Incomplete cleanup in kernel
- kernel
- CWE-459
Not analysed yet 21 Jan 2022
zeroize_derive crates.io

CVSS 9.8 CriticalCritical · CVSS 9+

Memory flaw in zeroize_derive
- CWE-459
<1.1.1 · fixed in 1.1.1

GHSA-c5hx-w945-j4pq · CVE-2021-45706 Not analysed yet 6 Jan 2022
CVE-2021-32928 CVE record

Incomplete cleanup in Sentinel LDK Run-Time Environment
- Sentinel LDK Run-Time Environment
- CWE-459
Not analysed yet 16 Jun 2021
ansible PyPI

CVSS 5.0 Medium

Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
- Information disclosure
- CWE-377
>=2.7.0a1, <2.7.17 || >=2.8.0a1, <2.8.11 || >=2.9.0a1, <2.9.7 · fixed in 2.7.17, 2.8.11, 2.9.7

GHSA-77g3-3j5w-64w4 · CVE-2020-10685 Not analysed yet 7 Apr 2021
CVE-2020-12494 CVE record

CVSS 5.3 Medium

Beckhoff: Etherleak in TwinCAT RT network driver
- Beckhoff TwinCat Driver for Intel 8254x (Tcl8254x.sys)
- Beckhoff TwinCat Driver for Intel 8255x (Tcl8255x.sys)
- CWE-459
Not analysed yet 16 Jun 2020
CVE-2019-5011 CVE record

CVSS 7.1 High

Incomplete cleanup in CleanMyMac X
- CleanMyMac X
- CWE-459
Not analysed yet 21 Mar 2019