Fallos del tipo CWE-415

291 resultados
CVE-2024-49014HIGHSQL Server Native Client Remote Code Execution VulnerabilityEPSS 1.3%CVE-2022-40507HIGHDouble free in CoreEPSS 1.3%CVE-2023-44247MEDIUMA double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 6.4 all versions may allow a privileged attacker to execute code or EPSS 1.3%CVE-2021-1565HIGHCisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service VulnerabilitiesEPSS 1.2%CVE-2023-39975HIGHkdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger anEPSS 1.2%CVE-2025-32988MEDIUMGnutls: vulnerability in gnutls othername san exportEPSS 1.2%CVE-2024-2002HIGHLibdwarf: crashes randomly on fuzzed objectEPSS 1.1%CVE-2023-35371HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-38562HIGHA double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafteEPSS 1.1%CVE-2023-41678HIGHA double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker toEPSS 1.1%CVE-2022-20803HIGHClamAV Double-free Vulnerability in the OLE2 File ParserEPSS 1.1%CVE-2023-29469MEDIUMAn issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.cEPSS 1.0%CVE-2022-3806CRITICALBluetooth HCI Error Handling Double FreeEPSS 1.0%CVE-2024-26257HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-36420HIGHMicrosoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-45666HIGHPossible double-free or memory leak in stbi__load_gif_main in stb_imageEPSS 1.0%CVE-2022-2519There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1EPSS 0.9%CVE-2023-24903HIGHWindows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2022-23012On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is configured on a virtual server, undisclosedEPSS 0.9%CVE-2024-11704CRITICALA double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an error path. Under specific conditions, the sEPSS 0.9%