CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- splunk, splunk enterprise, cloud platform +1 more +3 moreDenial of Service (DoS) through Multiple LDAP Bind Requests in Splunk Enterprise4.9 Medium
- mantra-chain mantrachainMANTRA tx gas limit is not enforced in send hooks8.8 High
node-staticDebian,@nubosoftware/node-staticnpm +1 more@nubosoftware/node-static failure to catch exception can result in server crash7.5 High- ebradyjobory finance.jsFinance.js vulnerable to DoS via the seekZero() parameter7.5 High
- ebradyjobory finance.jsFinance.js vulnerable to DoS via the IRR function’s depth parameter7.5 High
- No product listedAT_NA2000 from Nanda Automation Technology vendor has a denial-of-service vulnerability. For the...7.5 High
- No product listedOpenindiana, kernel SunOS 5.11 has a denial of service vulnerability. For the processing of TCP...7.5 High
- No product listedAn issue in SunOS Omnios v5.11 allows attackers to cause a Denial of Service (DoS) via repeatedly...7.5 High
- wavlink wl-wn586x3a firmwareWavlink M86X3A_V240730 contains a buffer overflow vulnerability in the /cgi-bin/ExportAllSettings...8.8 High
- rackRack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters7.5 High
- No product listedAn issue in O-RAN Near Realtime RIC ric-plt-submgr in the J-Release environment, allows remote...7.5 High
- apidocjs apidoc-coreapidoc-core is vulnerable to prototype pollution7.5 High
- linuxfoundation pytorchAn issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of...7.5 High
- google tensorflowAn issue was discovered TensorFlow v2.18.0. A Denial of Service (DoS) occurs when padding is set...7.5 High
- linuxfoundation pytorchA buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d,...7.5 High
- linuxfoundation pytorchAn issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of...7.5 High
- apache iotdbApache IoTDB: DoS Vulnerability7.5 High
- huggingface huggingface/transformers, transformers +1 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformers5.3 Medium
- No product listedThe Blackmagic ATEM Mini Pro 2.7 exposes an undocumented Telnet service on TCP port 9993, which...7.5 High
- torproject torTor Onion Service Descriptor resource consumption6.3 Medium
- ruby rexmlREXML has a DoS condition when parsing malformed XML file1.2 Low
- cisa thoriumCISA Thorium does not rate limit account verification email messages6.9 Medium
- zhyd oneblogThe /api/comment endpoint in zhangyd-c OneBlog 2.3.9 contains a denial-of-service vulnerability.7.5 High
- apple ipados, macos, ios and ipados +1 more +3 moreA denial-of-service issue was addressed with improved validation. This issue is fixed in macOS...5.5 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal: Missing Rate Limiting in GraphQL Endpoint Enables Resource Exhaustion Attack7.1 High
- honoHono has Body Limit Middleware Bypass5.3 Medium
- erlang otpSSH_FXP_OPENDIR may Lead to Exhaustion of File Handles7.1 High
- erlang otpMalicious Key Exchange Messages may Lead to Excessive Resource Consumption6.9 Medium
- erlang otpUnverified Paths can Cause Excessive Use of System Resources5.3 Medium
- erlang otpUnverified File Handles can Cause Excessive Use of System Resources5.3 Medium
- cisco ios xr softwareCisco IOS XR Address Resolution Protocol Broadcast Storm Vulnerability7.4 High
- zoom workplace, zoom communications inc. workplace clients, zoom meeting software development kit +4 more +6 moreZoom Workplace Clients - Argument Injection4.3 Medium
- siemens ruggedcom rst2428p, ruggedcom rst2428p firmware +1 moreA vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions). The...2.3 Low
- open5gsAn issue in Open5GS v2.7.2 and before allows a remote attacker to cause a denial of service via a...7.5 High
- ieaturanium238 cattownCattown Vulnerable to Inefficient Regular Expression Complexity and Uncontrolled Resource Consumption8.7 High
- open5gsAssertion failure in function ngap_build_downlink_nas_transport in file src/amf/ngap-build.c, the...7.5 High
- typelevel fs2fs2: Half-shutdown of socket during TLS handshake may result in spin loop on opposite side5.3 Medium
- google androidIn setupAccessibilityServices of AccessibilityFragment.java , there is a possible way to hide an...6.2 Medium
- liferay dxp, portal +1 moreLiferay Portal Vulnerable to Denial of Service in Kaleo Forms Admin7.1 High
- akinsoft myrezztaBusiness Logic Error in Akinsoft's MyRezzta6.3 Medium
- adacore ada web serverAdacore Ada Web Server (AWS) before 25.2 is vulnerable to a denial-of-service (DoS) condition due...7.5 High
- meh.schizofreni rust-ffmpegAn issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Integer overflow and invalid...7.5 High
- google androidIn multiple functions of AccountManagerService.java, there is a possible permanent denial of...5.5 Medium
- google androidDenial of service7.5 High
- vercel next.jsNext.js Affected by Cache Key Confusion for Image Optimization API Routes6.2 Medium
- vercel next.jsNext.js Content Injection Vulnerability for Image Optimization4.3 Medium
- vercel next.jsNext.js Improper Middleware Redirect Handling Leads to SSRF6.5 Medium
- consensys gnarkgnark affected by denial of service when computing scalar multiplication using fake-GLV algorithm7.5 High
- mixmark-io turndownmixmark-io turndown commonmark-rules.js redos6.9 Medium
- qnap qsync centralQsync Central6.0 Medium
- Show moreLoading…