CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- facebook react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack +2 moreNext.js HTTP request deserialization can lead to DoS when using insecure React Server Components7.5 High
- oneflowAn issue in the flow.cuda.BoolTensor component of OneFlow v0.9.0 allows attackers to cause a...7.5 High
- oneflowA GPU device-ID validation flaw in the flow.cuda.get_device_capability() component of OneFlow v0...7.5 High
- oneflowA GPU device-ID validation flaw in OneFlow v0.9.0 allows attackers to trigger a Denial of Dervice...7.5 High
- oneflowA device-ID validation flaw in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS)...7.5 High
- oneflowA type validation flaw in the flow.dstack() component of OneFlow v0.9.0 allows attackers to cause...7.5 High
- oneflowA dimension validation flaw in the flow.empty() component of OneFlow 0.9.0 allows attackers to...7.5 High
- oneflowA shape mismatch vulnerability in OneFlow v0.9.0 allows attackers to cause a Denial of Service ...7.5 High
- eclipse threadx netx duo, eclipse foundation threadx - netx duo +1 moreA denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A specially crafted network packet of "Packet Too Big" with more than 15 different source…8.7 High
- grafana, grafana grafana/grafana, grafana/grafana-enterprise +5 more +7 moreUnauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out7.5 High
- gmrtdgmrtd ReadFile Vulnerable to Denial of Service via Excessive TLV Length Values5.9 Medium
- facebook react, meta react-server-dom-parcel, react-server-dom-turbopack +3 more +5 moreReact Server Components have multiple Denial of Service Vulnerabilities7.5 High
- linux, linux kernel +1 morelibceph: replace overzealous BUG_ON in osdmap_apply_incremental()7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moredm-verity: disable recursive forward error correction7.5 High
- oisf suricataSuricata dnp3: unbounded transaction growth7.5 High
- oisf suricataSuricata DCERPC: unbounded fragment buffering leads to memory exhaustion7.5 High
- open source opentofuOpenTofu before 1.11.4 Denial of Service via malicious zip2.3 Low
- cisco ultra-reliable wireless backhaulCisco IEC6400 Edge Compute Appliance SSH Denial of Service Vulnerability5.3 Medium
- linux, linux kernel, siemens ruggedcom rst2428p (6gk6242-6pa00) +5 more +7 morenet: sock: fix hardened usercopy panic in sock_recv_errqueue5.5 Medium
- ollamaAn issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs...7.5 High
- ollamaAn issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the GGUF...7.5 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...8.2 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...8.2 High
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...6.5 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...6.5 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle graalvm, graalvm for jdk, jdk +32 more +34 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...7.5 High
- oracle solarisVulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). ...5.0 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- rockwell automation armorstart® lt, rockwellautomation armorstart lt firmware +1 moreArmorStart® LT - Multiple Denial-of-Service Vulnerabilities8.7 High
- rockwell automation armorstart® lt, rockwellautomation armorstart lt firmware +1 moreArmorStart® LT - Multiple Denial-of-Service Vulnerabilities8.7 High
- rockwell automation armorstart® lt, rockwellautomation armorstart lt firmware +1 moreArmorStart® LT - Multiple Denial-of-Service Vulnerabilities8.7 High
- rockwell automation armorstart® lt, rockwellautomation armorstart lt firmware +1 moreArmorStart® LT - Multiple Denial-of-Service Vulnerabilities8.7 High
- rockwell automation armorstart® lt, rockwellautomation armorstart lt firmware +1 moreArmorStart® LT - Multiple Denial-of-Service Vulnerabilities8.7 High
- rockwell automation armorstart® lt, rockwellautomation armorstart lt firmware +1 moreArmorStart® LT - Multiple Denial-of-Service Vulnerabilities8.7 High
- rockwell automation armorstart® lt, rockwellautomation armorstart lt firmware +1 moreArmorStart® LT - Multiple Denial-of-Service Vulnerabilities8.7 High
- rockwell automation armorstart® lt, rockwellautomation armorstart lt firmware +1 moreArmorStart® LT - Multiple Denial-of-Service Vulnerabilities8.7 High
- rockwell automation armorstart® lt, rockwellautomation armorstart lt firmware +1 moreRockwell Automation ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities8.7 High
- birkir primebirkir prime GraphQL Alias graphql resource consumption6.9 Medium
- pterodactyl wingsEndless reprocessing/reupload of activity log data due to SQLite max parameters limit not being considered8.3 High
- convoypanel panel, pterodactyl wings +1 morePterodactyl Wings's websocket endpoints have no visible rate limits or monitoring, allowing for DOS attacks under certain circumstances8.3 High
- convoypanel panelPterodactyl's improper resource locking allows raced queries to create more resources than alloted6.0 Medium
- chatterbotChatterBot has Denial of Service via Database Connection Pool Exhaustion7.5 High
- open5gsOpen5GS Timer resource consumption6.9 Medium
- absolute secure accessDenial of Service in Secure Access Servers Prior to 14.20.6.0 Medium
- nodejs node, node.js +1 moreA flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a...5.9 Medium
- nodejs node, node.js, red hat enterprise linux 10 +6 more +8 moreA malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to...7.5 High
- pyasn1, debian linux, red hat lightspeed core +48 more +50 morepyasn1 has a DoS vulnerability in decoder7.5 High
- svelte adapter-node, kit +1 moreSvelteKit Denial of service and possible SSRF when using prerendering8.4 High
- Show moreLoading…