CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- spring framework, vmware spring framework +1 moreSpring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux7.5 High
- spring framework, vmware spring framework +1 moreSpring Framework Denial of Service via Multipart Requests in WebFlux5.9 Medium
- spring micrometer, red hat amq broker 7.13.6, amq broker 7.14.1 +19 more +21 moreMicrometer HTTP server instrumentations DoS vulnerability7.5 High
- spring micrometer, red hat amq broker 7.14.1, amq clients +18 more +20 moreMicrometer gRPC server instrumentation DoS vulnerability7.5 High
- No product listedAn uncaught exception in the /application/job/update/{id} endpoint of FastapiAdmin v2.2.0 allows...6.5 Medium
- No product listedAn issue was discovered in bitbank2 AnimatedGIF v2.2.0. A buffer overflow in the DecodeLZW...9.8 Critical
- gpacGPAC MP4Box v2.4 was discovered to contain a floating point exception in the...6.5 Medium
- gpacA segmentation violaton in the gf_hevc_read_sps_bs_internal function (media_tools/av_parsers.c)...7.5 High
- pumaPuma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion7.5 High
- jelmer dulwichDulwich has unbounded memory allocation in receive-pack from crafted thin packs5.7 Medium
- nettyNetty has a Vulnerable Default Configuration Which Leads to Denial of Service via Unbounded HTTP/3 Header Size7.5 High
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions6.5 Medium
- nlnet labs routinatorRoutinator crashes on specifically crafted RRDP XML files8.7 High
- kokke tiny-regex-ckokke tiny-regex-c Pattern re.c matchstar redos4.8 Medium
- bugsinkBugsink: DOS using large numbers of event tags4.3 Medium
- klever-io klever-goKlever-Go: REST API slow-header connection exhaustion via Gin Engine.Run7.5 High
- klever-io klever-goKlever-Go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS7.5 High
- klever-io klever-goKlever-Go KVM: Throttler slot leak in trie account-data sync causes epoch bootstrap / state sync DoS5.9 Medium
- klever-io klever-goKlever-Go KVM: Hash-array amplification in P2P resolver request handling7.5 High
- vantage6Vantage6: No limit on emails sent for password/MFA reset2.1 Low
github.com/klever-io/klever-goGoKlever-Go P2P MultiDataInterceptor leaks global throttler slots on malformed compressed batches (DoS)7.5 High- axios, red hat cryostat 4, gatekeeper 3 +62 more +64 moreAxios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection7.5 High
- strawberry graphql, strawberry-graphql strawberry +1 moreStrawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplification5.3 Medium
- strawberry graphql, strawberry-graphql strawberry +1 moreStrawberry GraphQL has a Circular Fragment Reference DOS5.3 Medium
- solarwinds serv-uSolarWinds Serv-U Unauthenticated Denial of Service Vulnerability7.5 High
- keystonejs keystonekeystonejs keystone GraphQL API Endpoint output-field.ts resource consumption5.3 Medium
- acer connect m6e 5g portable wifi router, connect m6e 5g firmware +1 moreArbitrary Remote Device Unbinding7.1 High
- docling-project docling-coreDocling Core has insufficient validation of image reference URIs8.1 High
- doclingDocling: Unsafe URI and Path Handling in HTML Backend7.1 High
- linux, linux kernel +1 moreibmveth: Disable GSO for packets with small MSS8.6 High
daskDebiandask HLL hyperloglog.py nunique_approx resource consumption2.3 Low- No product listedMercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 is vulnerable to a HTTP denial of...6.5 Medium
- johnhuang316 code-index-mcpjohnhuang316 code-index-mcp search_code_advanced is_safe_regex_pattern redos5.3 Medium
- wonderwhy-er desktopcommandermcpwonderwhy-er DesktopCommanderMCP start_search search-manager.ts redos5.3 Medium
- dräger core, m540 converter service +1 moreDräger Core 1.0.5 Denial of Service via Malformed SDC Message8.7 High
- warmcat libwebsocketswarmcat libwebsockets SSH Protocol sshd.c lws_ssh_parse_plaintext resource consumption6.9 Medium
- dräger infinity m300Dräger Infinity M300 VG2.x Network-Based Denial of Service7.1 High
- @tanstack react-router, remix-run @remix-run/server-runtime, shopify remix-run\/server-runtime +2 moreReact Router vulnerable to DoS via unbounded path expansion in __manifest endpoint7.5 High
- dräger infinity m300Dräger Infinity M300 VG2.3.1 Network-Based Denial of Service7.1 High
- google androidIn verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource...5.5 Medium
- enderfga claw-orchestratorEnderfga claw-orchestrator Session Grep Endpoint embedded-server.ts validateRegex redos5.3 Medium
- apache fluss, apache software foundation fluss (incubating) +1 moreApache Fluss Netty Frame Decoder Memory Exhaustion Vulnerability7.5 High
- nousresearch hermes-agentNousResearch hermes-agent Webhook Endpoint feishu.py _handle_webhook_request resource consumption6.9 Medium
- otrs, otrs ag ((otrs)) community edition +1 moreEmail with special content can lead to DoS5.7 Medium
- otrs, otrs ag ((otrs)) community edition +1 moreDenial-of-Service via SVG Rendering in Ticket6.5 Medium
- mosaic5g flexricFlexRIC v2.0.0 allows a single SCTP connection to bind multiple xapp_ids by sending multiple...8.2 High
- google androidIn getPreferredSize of LauncherProcessImageListener.kt, there is a possible denial of service ...5.5 Medium
- google androidIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of...5.5 Medium
- google androidIn isSameApp of NotificationManagerService.java, there is a possible persistent dos due to...5.5 Medium
- No product listedOpen5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumption5.3 Medium
- Show moreLoading…