CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreUnauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways5.9 Medium
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreUnauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways6.5 Medium
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreUnauthenticated Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways7.0 High
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreUnauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways7.5 High
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreUnauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways8.6 High
- http4sHttp4s Ember HTTP/2: does not enforce SETTINGS_MAX_CONCURRENT_STREAMS7.5 High
- http4sHttp4s Ember HTTP/2: unbounded outbound frame queue7.5 High
- http4sHttp4s: WebSocket decoder accepts unbounded message sizes7.5 High
- http4sHttp4s: DigestAuth nonce map grows unbounded7.5 High
- ibm security verify access, verify identity access, security verify access container +1 more +3 moreSecurity vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access7.5 High
- atlassian confluence data centerThis High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1,...7.1 High
- go-vikunja vikunjaVikunja before 2.6.0 Denial of Service via Decompression Bomb7.1 High
- go-vikunja vikunjaVikunja before 2.6.0 Denial of Service via Avatar Upload7.1 High
- go-vikunja vikunjavikunja before 2.6.0 Resource Exhaustion via CSV Migration7.1 High
- unclecode crawl4aiCrawl4AI before 0.9.3 Denial of Service via PDFContentScrapingStrategy8.7 High
- mispMISP Unthrottled Authentication Failure Log Writes Enable Resource Exhaustion6.9 Medium
- vllm-project vllmvllm-project vLLM Jinja Template Rendering completions resource consumption5.3 Medium
- ibm cloud pak for business automationMultiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.6.5 Medium
- apple macosA resource exhaustion issue was addressed with improved input validation. This issue is fixed in...7.5 High
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7,...7.5 High
- ibm db2IBM® Db2® could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption6.5 Medium
- filebrowserFile Browser through 2.63.23 Memory Exhaustion via subtitle endpoint7.1 High
- filebrowserfilebrowser through 2.63.23 Denial of Service via unbounded WebSocket message7.1 High
- expressjs multermulter vulnerable to Denial of Service via orphaned disk writes on aborted uploads5.3 Medium
- tootallnate java-websocketTooTallNate Java-WebSocket Fragmentation Draft_6455.java processFrameContinuousAndNonFin allocation of resources6.9 Medium
- evanchiu serverless-todoevanchiu serverless-todo API Todo Endpoint index.js saveTodos resource consumption6.9 Medium
- nodemailerNodemailer 9.1.0 through 10.0.4 Denial of Service via Quadratic Address Parsing8.7 High
- vllmvLLM before 0.28.0 Denial of Service via audio extraction6.9 Medium
- simulpiscator airsaneAirSane has a Remote Denial of Service (OOM) via Unvalidated Content-Length in HTTP Server7.5 High
- fasterxml jackson-databindjackson-databind: unbounded numeric parse in Duration and XMLGregorianCalendar deserialization allows CPU denial of service7.5 High
- net-snmpNet-SNMP through 5.9.5.2 Denial of Service via Blocking Unauthenticated SMUX Read8.7 High
- multipartymultiparty vulnerable to Denial of Service via unbounded part-header accumulation7.5 High
- No product listedAn issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit...7.5 High
- No product listedAn issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit...7.5 High
mistralrs-server-corecrates.iomistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS7.5 High- hashicorp consul, consul enterprise +1 moreConsul vulnerable to a denial of service in the native RPC listener6.5 Medium
- ibm websphere application serverIBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities5.3 Medium
- geovision inc. gv-lpc2011/lpc2211GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion7.5 High
- geovision inc. gv-lpc2011/lpc2211GV-LPC2011/LPC2211 - PTZ Connection-State Accept-Loop Denial of Service7.5 High
- No product listedAn issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42...7.5 High
- No product listedAn issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit...7.5 High
- No product listedAn issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit...4.0 Medium
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Unauthenticated Network-Based Denial of Service in CPPM systems7.5 High
- eprosima fast-ddsFast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS)7.5 High
- gitpython-developers gitpythonGitPython before 3.1.60 Denial of Service via ReDoS8.7 High
gpacUbuntuAn issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to cause a denial of...6.2 Medium- modelcontextprotocol io.modelcontextprotocol:kotlin-sdk, io.modelcontextprotocol:kotlin-sdk-client, io.modelcontextprotocol:kotlin-sdk-core +1 more +3 moreMCP Kotlin SDK's unbounded line buffer in StdioServerTransport/StdioClientTransport leads to memory exhaustion (DoS)6.2 Medium
@tiptap/corenpm,@rootio/tiptap__coreRoot +1 moreTiptap: Quadratic ReDoS in block and inline Markdown attribute parsing8.7 High- adobe acrobat, acrobat reader, acrobat 2024 +2 more +4 moreAcrobat Reader | Uncontrolled Resource Consumption (CWE-400)5.5 Medium
- containerdcontainerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service6.8 Medium
- Show moreLoading…