TYPE DE FAIBLESSE

CWE-459

253 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-459 (en anglais) →

CVE-2024-57975Les systèmes Linux utilisant le système de fichiers Btrfs sont affectés par une erreur de gestion de la mémoire lors d'opérations d'écriture spécifiques. Un utilisateur local dispo… 7.8 ÉLEVÉE

CVE-2025-0726Les appareils utilisant le serveur HTTP NetX au sein d'Eclipse ThreadX NetX Duo avant la version 6.4.2 sont susceptibles de subir une attaque par déni de service. Un attaquant auth… 7.1 ÉLEVÉE

CVE-2024-53881NVIDIA vGPU software contains a vulnerability in the host driver, where it can allow a guest to cause an interrupt storm on the host, which may lead to denial of service. 5.5 MOYENNE

CVE-2024-53869NVIDIA Unified Memory driver for Linux contains a vulnerability where an attacker could leak uninitialized memory. A successful exploit of this vulnerability might lead to informat… 5.5 MOYENNE

CVE-2025-0473Vulnerability in the PMB platform that allows an attacker to persist temporary files on the server, affecting versions 4.0.10 and above. This vulnerability exists in the file uploa… 6.5 MOYENNE

CVE-2025-21609La version 3.1.18 de SiYuan Note présente une faille permettant à un attaquant distant de supprimer n'importe quel fichier sur le serveur. Cette action peut être exécutée via le ré… 8.7 ÉLEVÉE

CVE-2024-28265La version 4.5.5 d'IBOS est affectée par une faille qui permet à un attaquant de supprimer des fichiers arbitraires sur le serveur. Un attaquant distant peut effectuer cette action… 9.1 CRITIQUE

CVE-2022-49028In the Linux kernel, the following vulnerability has been resolved: ixgbevf: Fix resource leak in ixgbevf_init_module() ixgbevf_init_module() won't destroy the workqueue created … 5.5 MOYENNE

CVE-2022-49012In the Linux kernel, the following vulnerability has been resolved: afs: Fix server->active leak in afs_put_server The atomic_read was accidentally replaced with atomic_inc_retur… 5.5 MOYENNE

CVE-2024-49851In the Linux kernel, the following vulnerability has been resolved: tpm: Clean up TPM space after command failure tpm_dev_transmit prepares the TPM space before attempting comman… 5.5 MOYENNE

CVE-2024-47731In the Linux kernel, the following vulnerability has been resolved: drivers/perf: Fix ali_drw_pmu driver interrupt status clearing The alibaba_uncore_pmu driver forgot to clear a… 5.5 MOYENNE

CVE-2024-47728In the Linux kernel, the following vulnerability has been resolved: bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error For all non-tracing helpers which formerly had AR… 5.5 MOYENNE

CVE-2024-47693In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix ib_cache_setup_one error flow cleanup When ib_cache_update return an error, we exit ib_cache_setu… 6.5 MOYENNE

CVE-2024-47674Les systèmes utilisant les versions affectées du noyau Linux sont vulnérables à une faille de gestion de la mémoire où certaines opérations ayant échoué laissent derrière elles des… 7.8 ÉLEVÉE

CVE-2024-45027In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup() If xhci_mem_init() fails, it cal… 5.5 MOYENNE

CVE-2024-44982In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails If the dpu_format_populate_layout() fails, then FB… 5.5 MOYENNE

CVE-2024-45445Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this vulnerability will affect availability. 4.0 MOYENNE

CVE-2022-48893In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Cleanup partial engine discovery failures If we abort driver initialisation in the middle of gt/e… 5.5 MOYENNE

CVE-2023-31356Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity. 4.4 MOYENNE

CVE-2023-20518Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BIOS menu or UEFI shell and a memory exfiltration vulnerability… 1.9 FAIBLE

CVE-2024-6300Incomplete cleanup when performing redactions in Conduit, allowing an attacker to check whether certain strings were present in the PDU before redaction 3.7 FAIBLE

CVE-2024-38275Les installations de Moodle sont affectées par une faille dans la manière dont le système gère les redirections HTTP via cURL. Un attaquant peut voler des en-têtes d'autorisation s… 7.5 ÉLEVÉE

CVE-2024-36952In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletio… 4.7 MOYENNE

CVE-2021-47365In the Linux kernel, the following vulnerability has been resolved: afs: Fix page leak There's a loop in afs_extend_writeback() that adds extra pages to a write we want to make t… 5.5 MOYENNE

CVE-2024-35959In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix mlx5e_priv_init() cleanup flow When mlx5e_priv_init() fails, the cleanup flow calls mlx5e_selq_… 5.5 MOYENNE

CVE-2023-45846Incomplete cleanup in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable denial of service via local access. 5.5 MOYENNE

CVE-2024-4767If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Fi… 4.3 MOYENNE

CVE-2024-26841In the Linux kernel, the following vulnerability has been resolved: LoongArch: Update cpu_sibling_map when disabling nonboot CPUs Update cpu_sibling_map when disabling nonboot CP… 5.5 MOYENNE

CVE-2024-26832In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix missing folio cleanup in writeback race path In zswap_writeback_entry(), after we get a folio f… 5.5 MOYENNE

CVE-2024-26825In the Linux kernel, the following vulnerability has been resolved: nfc: nci: free rx_data_reassembly skb on NCI device cleanup rx_data_reassembly skb is stored during NCI data e… 5.5 MOYENNE

CVE-2024-26803In the Linux kernel, the following vulnerability has been resolved: net: veth: clear GRO when clearing XDP even when down veth sets NETIF_F_GRO automatically when XDP is enabled,… 5.5 MOYENNE

CVE-2024-26756In the Linux kernel, the following vulnerability has been resolved: md: Don't register sync_thread for reshape directly Currently, if reshape is interrupted, then reassemble the … 5.5 MOYENNE

CVE-2024-26687In the Linux kernel, the following vulnerability has been resolved: xen/events: close evtchn after mapping cleanup shutdown_pirq and startup_pirq are not taking the irq_mapping_u… 5.5 MOYENNE

CVE-2024-26667In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup The commit 8b45a26f2ba9 ("drm/msm/dpu: r… 5.5 MOYENNE

CVE-2024-20303Le logiciel Cisco IOS XE utilisé sur les contrôleurs de réseau local sans fil (WLC) est affecté via sa fonctionnalité de passerelle mDNS. Un attaquant non authentifié disposant d'u… 7.4 ÉLEVÉE

CVE-2021-47178Les systèmes Linux utilisant des périphériques TCMU (Target Console User-mode) sont affectés par un bogue dans le cœur de la cible SCSI. Un attaquant peut provoquer un kernel panic… 7.5 ÉLEVÉE

CVE-2021-47143In the Linux kernel, the following vulnerability has been resolved: net/smc: remove device from smcd_dev_list after failed device_add() If the device_add() for a smcd_dev fails, … 5.5 MOYENNE

CVE-2023-52617In the Linux kernel, the following vulnerability has been resolved: PCI: switchtec: Fix stdev_release() crash after surprise hot remove A PCI device hot removal may occur while s… 4.4 MOYENNE

CVE-2021-47110Les systèmes Linux exécutant des machines virtuelles KVM sont affectés par une faille dans la manière dont le noyau gère l'horloge système lors de l'arrêt. Un utilisateur local dis… 7.1 ÉLEVÉE

CVE-2024-2403 Improper cleanup in temporary file handling component in Devolutions Remote Desktop Manager 2024.1.12 and earlier on Windows allows an attacker that compromised a user endpoint, u… 5.9 MOYENNE

CVE-2024-23672Denial of Service via incomplete cleanup vulnerability in Apache Tomcat. It was possible for WebSocket clients to keep WebSocket connections open leading to increased resource cons… 6.3 MOYENNE

CVE-2024-26005An unauthenticated remote attacker can gain service level privileges through an incomplete cleanup during service restart after a DoS. 4.8 MOYENNE

CVE-2024-1048A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and renam… 3.3 FAIBLE

CVE-2024-21617 An Incomplete Cleanup vulnerability in Nonstop active routing (NSR) component of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause memory leak leadin… 6.5 MOYENNE

CVE-2023-41835Les serveurs Apache Struts sont affectés par une faille qui ne permet pas le nettoyage des fichiers temporaires lorsqu'une requête de téléchargement multipart dépasse la longueur m… 7.5 ÉLEVÉE

CVE-2022-46298Incomplete cleanup for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access. 1.9 FAIBLE

CVE-2022-43477Incomplete cleanup for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access. 3.3 FAIBLE

CVE-2021-46766Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality. 2.5 FAIBLE

CVE-2023-42795Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9… 5.3 MOYENNE

CVE-2023-42794Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an … 5.9 MOYENNE