CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- paulsm zeroconf, python-zeroconf +1 moreZeroconf: Unbounded DNS record cache allows LAN-local memory exhaustion via multicast flood6.5 Medium
- paulsm zeroconf, python-zeroconf +1 moreZeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustion6.5 Medium
github.com/go-git/go-git/v5Go,github.com/go-git/go-git/v6Go +1 morego-git: Malformed Git object data may cause panics or resource exhaustion6.5 Medium- shibby tomatoShibby Tomato miniupnpd resource consumption8.7 High
- indian motorcycle scout bobber + techIndian Scout Bobber 2025 WCM brute-force4.1 Medium
- oracle rest data servicesVulnerability in Oracle REST Data Services (component: Core). Supported versions that are...5.3 Medium
- oracle database serverVulnerability in the Net Service component of Oracle Database Server. Supported versions that...7.5 High
- oracle database serverVulnerability in the Net Service component of Oracle Database Server. Supported versions that...7.5 High
- oracle rest data servicesVulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are...7.5 High
- oracle rest data servicesVulnerability in Oracle REST Data Services (component: Core). Supported versions that are...9.9 Critical
- oracle rest data servicesVulnerability in Oracle REST Data Services (component: Core). Supported versions that are...8.1 High
- oracle rest data servicesVulnerability in Oracle REST Data Services (component: Core). Supported versions that are...7.9 High
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of Service6.5 Medium
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of Service6.5 Medium
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of Service6.5 Medium
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of Service6.5 Medium
- sensiolabs symfony, symfony json-path +1 moreSymfony: JsonPath Evaluates Attacker-Controlled Regular Expressions in match()/search() Without Limits — ReDoS8.2 High
- jpadilla pyjwtPyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS5.3 Medium
- py-pdf pypdfpypdf: Possible large memory usage for large offsets for layout mode text4.8 Medium
- microsoft .net, asp.net core, .net 10.0 runtime +14 more +16 moreASP.NET Core Denial of Service Vulnerability7.5 High
- oisf suricataikev2: unbounded client transform storage can lead to resource exhaustion7.5 High
- oisf suricataSuricata ldap: unbounded responses per transaction can lead to resource exhaustion7.5 High
- oisf suricataSuricata nfs: unbounded stateful structures can lead to resource exhaustion7.5 High
- oisf suricataSuricata dnp3: unbounded reassembly can lead to resource exhaustion7.5 High
- oisf suricataSuricata http1: quadratic Content-Disposition processing can lead to denial of service7.5 High
- harttle liquidjsLiquidJS: Memory and render limit bypass via unbounded width padding in `date` filter (strftime)7.5 High
- ibm langflow oss, langflow +1 moreUnauthenticated File Upload Vulnerability Allows Disk Space Exhaustion and Path Disclosure in Langflow OSS7.1 High
- ibm db2IBM® Db2® is vulnerable to running out of memory when executing certain queries with MDC tables6.5 Medium
- ibm db2IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a small statement heap5.5 Medium
- ibm websphere application server, websphere application server - liberty +1 moreIBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service4.8 Medium
- linux, linux kernel +1 morenetfilter: nf_conncount: increase the connection clean up limit to 647.5 High
- linux, linux kernel +1 morenetfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation7.5 High
- croixhaug appointment booking calendar — simply schedule appointments booking pluginAppointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.11.5 - Unauthenticated Denial of Service5.3 Medium
- harttle liquidjsLiquidJS has a renderLimit DoS guard bypass via empty `{% for %}` body6.5 Medium
- oban-bg oban webUnbounded range expansion in cron describe causes memory exhaustion in oban_web5.9 Medium
- ibm http serverIBM HTTP Server is affected by multiple vulnerabilities7.7 High
pacotenpm,grafana12.4Red Hat,nodejsAlmaLinux +20 more +22 morepacote is vulnerable to Denial of Service (DoS) via the addGitSha function8.7 High- benoitc hackneyUnbounded memory consumption in WebSocket client in hackney8.7 High
- benoitc hackneyUnbounded body accumulation in HTTP/3 response loop in hackney8.2 High
- benoitc hackneySOCKS5 TLS upgrade ignores caller timeout in hackney8.2 High
- vovchic17 aiosendaiosend: Deserialization of request body before signature verification (Pre-auth DoS) in webhook handler7.5 High
- mattermost, mattermost server +1 moreMissing request body size limits on Zoom plugin HTTP endpoints4.9 Medium
- mattermost, mattermost server +1 moreDenial of service via crafted TIFF file upload6.5 Medium
- golang net, golang.org/x/net golang.org/x/net/html +1 moreInvoking denial of service when parsing arbitrary HTML in golang.org/x/net/html6.5 Medium
- No product listedHP ENVY 5000 series printers VERBASPP1N003.2237A.00 do not properly manage concurrent TCP...5.9 Medium
- libp2p js-libp2plibp2p: Memory DoS via subscription flood of unique topics7.5 High
- powerdns authoritativeInsufficient Validation of Autoprimary SOA Queries7.5 High
- mispCSP Report Endpoint Log Flooding in MISP via Incorrect Size Limit5.1 Medium
- microsoft defender, defender antimalware platform +1 moreMicrosoft Defender Denial of Service Vulnerability4.0 Medium
- nvidia triton inference serverNVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker...5.7 Medium
- Show moreLoading…