CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Uncontrolled Resource Consumption (CWE-400)6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Biometric Service Elevation of Privilege Vulnerability7.8 High
- microsoft openapi.netMicrosoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion7.5 High
- grokability snipe-itSnipe-IT before 8.7.1 Denial of Service via Unbounded Note Field7.1 High
- adobe dimensionDimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service7.0 High
- No product listedvgmstream txtp txtp_parser.c add_entry resource consumption5.3 Medium
- java-json-tools jackson-coreutilsjava-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resources6.9 Medium
- java-json-tools jackson-coreutilsjava-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString resource consumption6.9 Medium
- No product listedAn issue in the btm_acl_handle() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC...7.5 High
- java-json-tools json-patchjava-json-tools json-patch Patch Operation JsonPatch.java JsonPatch.apply resource consumption6.9 Medium
- mispMISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding8.7 High
- imagemagickImageMagick before 7.1.2-30 Memory Leak via MSL decoder6.3 Medium
- imagemagickImageMagick before 7.1.2-30 Denial of Service Memory Budget6.3 Medium
- mispMISP Missing Authorization on Template File Upload Allows Authenticated Disk Exhaustion7.1 High
- ramon-victor freegpt-webuiramon-victor freegpt-webui Jailbreak Mode backend.py getJailbreak allocation of resources6.9 Medium
- ibm mq agentMultiple vulnerabilities in IBM MQ Agent images6.5 Medium
- siyuan-note siyuanSiYuan before v3.8.2 Unbounded Memory Consumption via ControlConcurrency8.7 High
- No product listedParrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service...7.5 High
- No product listedParrot AR.Drone 1 and AR.Drone 2 are vulnerable to Denial of Service. The Parrot AR.Drone...7.5 High
- themoos core-moosMOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of Service8.7 High
- nousresearch hermes-agentNousResearch hermes-agent Electron Main Process main.ts resourceBufferFromUrl allocation of resources5.3 Medium
- hickory-dnsHickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplification8.7 High
- hickory-dnsHickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try_send TC-Retry Loop8.7 High
- hickory-dnsHickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referrals8.7 High
- hickory-dnsHickory DNS from 0.18 before 0.26.2 Memory Amplification DoS via RR Counts8.7 High
- 2fastlabs agent-squad2FastLabs agent-squad Streaming Agent Response Workflow orchestrator.ts AgentSquad.routeRequest resource consumption5.3 Medium
- rightnow-ai openfangRightNow-AI OpenFang tool_runner.rs shell_exec memory allocation5.3 Medium
- simular-ai agent-ssimular-ai Agent-S OCR HTTP API ocr_server.py ImageData resource consumption6.9 Medium
- sigoden aichatsigoden aichat API Endpoint serve.rs memory allocation6.9 Medium
- malach-it boruta-serverBoruta: Authenticated atom-exhaustion DoS in BorutaIdentityWeb.UserSettingsController.update/27.1 High
- ntegrals openbrowserntegrals openbrowser Browser Agent Message Construction agent.ts resource consumption5.3 Medium
- grafana oss, microsoft sql server datasource, mysql datasource +1 more +3 moreSQL Data Source Plugin: OOM DoS via $__timeGroup macro6.5 Medium
- nousresearch hermes-agentNousResearch hermes-agent MCP Tool mcp_tool.py list_tools memory allocation5.3 Medium
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreUnauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX7.5 High
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreUnauthenticated Denial-of-Service Vulnerabilities in AOS-CX6.5 Medium
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreAuthenticated Denial-of-Service Vulnerabilities in the Command Line Interface of AOS-CX5.3 Medium
- honojs honoHono: Unbounded dot-notation nesting in `parseBody()` can cause memory exhaustion5.3 Medium
- arubanetworks fabric composerAuthenticated Denial of Service Vulnerability in HPE Networking Fabric Composer API3.1 Low
- arubanetworks fabric composerAuthenticated Denial of Service Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface3.5 Low
- arubanetworks fabric composerAuthenticated Denial of Service Vulnerabilities in HPE Networking Fabric Composer API6.5 Medium
- arubanetworks fabric composerUnauthenticated Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer7.5 High
- grpc grpc-gogRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation8.7 High
- @xmldom xmldomxmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser8.7 High
- @xmldom xmldomxmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text merge8.7 High
- @xmldom xmldomxmldom: HTML raw-text closing-tag case mismatch causes output amplification8.7 High
- @xmldom xmldomxmldom PI grammar regex ReDoS: quadratic backtracking on unterminated processing instructions8.7 High
- rockwell automation 1756-enbt moduleRockwell Automation 1756-ENBT Denial of Service Vulnerability8.7 High
- mozilla firefox, thunderbird +1 moreDenial-of-service in the PDF Viewer component6.5 Medium
- ash-project ashAsh.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async reads2.1 Low
- ash-project ashAsh.Filter.Runtime materializes a combinatorial cross-product over to-many relationships, exhausting memory5.9 Medium
- Show moreLoading…