CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: libxml2: denial of service via crafted xml catalogs2.9 Low
- emqx nanomqAn issue in nanomq v0.22.7 allows attackers to cause a Denial of Service (DoS) via a crafted...7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreKVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer5.5 Medium
- bluspark global bluvoyixEmail Sending Vulnerability in BLUVOYIX10.0 Critical
- paessler prtg network monitorPaessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service (DoS) by an authenticated...6.5 Medium
- ethereum go-ethereum, go ethereum +1 morego-ethereum has a DoS via malicious p2p message7.1 High
- mozilla firefox, thunderbird +1 moreDenial-of-service in the DOM: Service Workers component7.5 High
- siemens simatic et 200al im 157-1 pn, simatic et 200mp im 155-5 pn hf, simatic et 200sp im 155-6 mf hf +12 more +14 moreA vulnerability has been identified in SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) (All...8.7 High
- py-pdf pypdfpypdf has possible long runtimes for malformed startxref2.7 Low
- py-pdf pypdfpypdf has possible long runtimes for missing /Root object with large /Size values2.7 Low
- heromotocorp vida v1 pro firmwareAn issue in Hero Motocorp Vida V1 Pro 2.0.7 allows a local attacker to cause a denial of service...7.5 High
- webpros plesk obsidian, red hat openshift dev spaces +1 morePlesk Obsidian versions 8.0.1 through 18.0.73 are vulnerable to a Denial of Service (DoS)...7.5 High
- insiders-technologies e-invoice proAn issue in Insiders Technologies GmbH e-invoice pro before release 1 Service Pack 2 allows a...7.5 High
- color iccdevStack Overflow in iccDEV XML Calculator Macro Expansion5.5 Medium
- efacec qc 60/90/120DENIAL OF SERVICE FOR CONCURRENT CONNECTIONS ON TELNET9.2 Critical
- efacec qc 60/90/120DENIAL OF SERVICE VIA ICMP PACKETS8.2 High
- efacec qc60/90/120DENIAL OF SERVICE VIA ARP PACKETS9.2 Critical
- color iccdeviccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()8.8 High
github.com/open-feature/flagd/coreGo,github.com/open-feature/flagd/flagdGo,github.com/open-feature/flagd/flagd-proxyGo +2 moreflagd: Multiple Go Runtime CVEs Impact Security and AvailabilityNo score- samsung exynos 1080 firmware, exynos 1580 firmware, exynos 2400 firmware +8 more +10 moreAn issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos...7.5 High
- msgpack messagepack, msgpack-java +1 moreMessagePack-Java Vulnerable to Remote Denial of Service via Malicious .msgpack Model File Triggering Unbounded EXT Payload Allocation7.5 High
- signalk signal k server, signalk-server +1 moreSignal K Server Vulnerable to Denial of Service via Unrestricted Access Request Flooding7.5 High
- gnu binutilsAn issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows...7.5 High
- gnu binutilsAn issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26...2.5 Low
- antimof uxplayUxPlay 1.72 contains a double free vulnerability in its RTSP request handling. A specially...6.5 Medium
- libxmljs project libxmljslibxmljs has segmentation fault, potentially leading to a denial-of-service (DoS)7.5 High
- tp-link systems inc. tapo c200 v3, tp-link tapo c200 firmware, tp-link systems inc. tapo c520ws v2.6 +2 moreRemote Code Execution via Stack-based Buffer Overflow in ONVIF SOAP Parser in TP-Link Tapo C200 and C520WS8.7 High
- avahiAvahi: simple protocol server ignores accepts unlimited connections and logs failures without limit5.5 Medium
- better-authBetter Auth before 1.4.5 Path Normalization Bypass via rou38.8 High
- arista networks eosA specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted7.1 High
- flexense ltd. syncbreezeSyncBreeze 15.2.24 Denial of Service via Login Endpoint Overflow8.7 High
- wekan project wekanAn issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed...8.2 High
nextnpm,@rootio/nextRoot +1 moreNext has a Denial of Service with Server Components - Incomplete Fix Follow-Up7.5 High@vitejs/plugin-rscnpmVite Plugin React has a Denial of Service Vulnerability in React Server Components7.5 High- tornadoweb tornadoTornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters7.5 High
- tornadoweb tornadoTornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing7.5 High
- facebook react, meta react-server-dom-parcel, react-server-dom-turbopack +2 more +4 moreDenial of Service Vulnerability in React Server Components7.5 High
- vercel next.jsNext.js: Unbounded postponed resume buffering can lead to DoS6.9 Medium
- vercel next.jsNext.js: null origin can bypass Server Actions CSRF checks5.3 Medium
- vercel next.jsNext.js: null origin can bypass dev HMR websocket CSRF checks2.3 Low
- vercel next, next.js +1 moreNext.js has Unbounded Memory Consumption via PPR Resume Endpoint5.9 Medium
- vercel next, next.js +1 moreNext.js Vulnerable to Denial of Service with Server Components5.9 Medium
- vercel next.jsNext.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications6.3 Medium
- vercel next.jsNext.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service6.3 Medium
- vercel next.jsNext.js: Unauthenticated Remote Code Execution on windows-hosted servers9.0 Critical
- vercel next.jsNext.js: Response Body Cache Confusion for Requests Containing Bodies6.0 Medium
- vercel next.jsNext.js: Denial of Service in App Router using Server Actions8.2 High
- vercel next.jsNext.js: Cache poisoning via collisions in React Server Component cache-busting3.7 Low
- minalicminaliC 2.0.0 Denial of Service Vulnerability via Large GET Request8.7 High
- facebook react, meta react-server-dom-parcel, react-server-dom-turbopack +2 more +4 moreDenial of Service Vulnerability in React Server Components7.5 High
- Show moreLoading…