CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- servify-express.js servify express, aarondoran servify-express +1 moreServify Express does not enforce rate limiting when parsing JSON8.7 High
- freeimage project freeimageAn integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before...6.5 Medium
- google androidIn multiple locations, there is a possible permanent denial of service due to resource exhaustion...5.5 Medium
- google androidIn onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service...6.5 Medium
- google androidIn getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence...7.8 High
- turbopuffer logrusLogrus is vulnerable to DoS when using Entry.Writer()7.5 High
- mozilla rhinoRhino vulnerable high CPU usage and potential DoS when passing specific numbers to toFixed() function5.5 Medium
- getgrav gravGrav is vulnerable to a DOS on the admin panel4.9 Medium
- python, python software foundation cpython +1 moreOut-of-memory when loading Plist2.1 Low
- python, python software foundation cpython +1 moreExcessive read buffering DoS in http.client6.3 Medium
- google androidIn InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due...5.5 Medium
- google androidIn verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to...5.5 Medium
- google androidIn multiple functions of NotificationManagerService.java, there is a possible way to bypass the...5.5 Medium
- google androidIn updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there...5.5 Medium
- openprinting cupsOpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack5.1 Medium
- bacnet interoperability test services, inc. test serverBACnet Test Server 1.01 Malformed BVLC Length DoS8.7 High
- interviewx echoAn issue was discovered in Veal98 Echo Open-Source Community System 2.2 thru 2.3 allowing an...7.5 High
- py-pdf pypdfpypdf manipulated LZWDecode streams can exhaust RAM6.6 Medium
- body-parserbody-parser vulnerable to denial of service when url encoding is used5.5 Medium
- free5gcNSSF panic due to nil pointer dereference when expiry field is omitted in NSSAIAvailability POST7.5 High
- jzeuzs thread-amountthread-amount is Vulnerable to Resource Exhaustion (Memory and Handle Leaks) on Windows and macOS8.7 High
- aquaplatform revive adserver, revive adserver +1 moreHackerOne community member Dao Hoang Anh (yoyomiski) has reported an uncontrolled resource...6.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking 100 series cellular bridge +1 moreUnauthenticated Remote Denial-of-Service (DoS) Vulnerability in Web Management Interface7.5 High
- zyxel dx3301-t0 firmware, ax7501-b0 firmware, ax7501-b1 firmware +63 more +65 moreAn uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware...5.3 Medium
- openml frontendThe openml/openml.org web application version v2.0.20241110 uses predictable MD5-based tokens for critical user workflows such as signup confirmation, password resets, email confirmation resends, and…7.5 High
- m-files serverDenial of Service condition in M-Files Server7.1 High
- positive technologies maxpatrol 8 (server), xspider (server) +1 morePositive Technologies MaxPatrol 8 & XSpider Remote DoS8.7 High
- request serious play llc serious play, serious play pro +1 moreReQuest Serious Play F3 Media Server <= 7.0.3 Remote DoS8.7 High
- seiko epson epson stylus sx510wEpson Stylus SX510W Printer Remote Power Off DoS8.7 High
- dvsekhvalnov jose2gojose2go is vulnerable to a JWT bomb attack through its decode function7.5 High
- No product listedUncontrolled resource consumption for some Gaudi software before version 1.21.0 within Ring 3:...6.8 Medium
- open5gsIn Open5GS 2.7.6, AMF crashes when receiving an abnormal NGSetupRequest message, resulting in...7.5 High
- kiloview e3 firmwareAn issue in KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware v.1.20.0006 allows...7.5 High
- libarchiveAn issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 26.1, iOS...7.5 High
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved bounds checks. This issue is fixed in iOS 26.1 and iPadOS...6.5 Medium
- apple ipados, macos, tvos +3 more +5 moreAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...4.3 Medium
- samsung exynos 1280 firmware, exynos 1330 firmware, exynos 1380 firmware +5 more +7 moreAn issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem. Mishandling...7.5 High
- python, python software foundation cpython +1 moreQuadratic complexity in os.path.expandvars() with user-controlled template1.8 Low
- circutor tcprs1plusDenial of service through specific packets9.2 Critical
- open-xchange gmbh ox app suiteMalicious or unintentional API requests can be used to add significant amount of data to caches....7.5 High
- scrapy scrapy/scrapyBrotli decompression bomb DoS in scrapy/scrapy7.5 High
- summerpearlgroup vacation rental management platformSummer Pearl Group Vacation Rental Management Platform prior to 1.0.2 is susceptible to a...7.5 High
- danny-avila danny-avila/librechat, librechat +1 moreDenial of Service in danny-avila/librechat5.4 Medium
github.com/consensys/gnark-cryptoGognark-crypto allows unchecked memory allocation during vector deserialization7.5 High- zohocorp manageengine exchange reporter plusDenial of Service (DoS)4.3 Medium
- progress moveit transferAS2 module allows uncontrolled file uploads8.2 High
- encode starletteStarlette vulnerable to O(n^2) DoS via Range header merging in starlette.responses.FileResponse7.5 High
- No product listedHotta Studio GameDriverX64.sys 7.23.4.7, a signed kernel-mode anti-cheat driver, allows local...5.5 Medium
- No product listedAn issue was discovered in Prevx v3.0.5.220 allowing attackers to cause a denial of service via...7.5 High
- Show moreLoading…