CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- markdown-itmarkdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled3.7 Low
- getgrav gravGrav before 1.7.53.5 and 2.2.2 Image Pixel Limit Bypass Denial of Service8.7 High
- markdown-itmarkdown-it: Quadratic complexity in smartquotes with unmatched closing quotes7.5 High
- aio-libs aiohttpAIOHTTP: File descriptor exhaustion in multipart requests8.2 High
- ibm mq advanced container images, mq operator, supplied mq advanced container images +2 moreIBM MQ Denial of Service6.5 Medium
- memtensor memmy-agentMemTensor memmy-agent Memory Service http.ts requireAdminWrite resource consumption2.3 Low
- koozali sme serverKoozali - SME Server Improper Input Validation in domain Creation Leads to Denial of Service6.9 Medium
ffmpegDebian,libavUbuntu +1 moreA NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N...7.5 High- automatic1111 stable-diffusion-webuiAUTOMATIC1111 stable-diffusion-webui Metadata Extraction sd_models.py read_metadata_from_safetensors allocation of resources5.3 Medium
- thorsten phpmyfaqphpMyFAQ 4.2.0-alpha before 4.2.0-beta Unauthenticated DoS via API Pagination8.7 High
- dicklesworthstone destructive command guarddcg: Exponential-time command-substitution preprocessing lets a crafted command hang dcg and bypass the guard via hook-timeout fail-open7.1 High
- pupnppupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing7.5 High
- freerdpFreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser8.7 High
- freerdpFreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel Reassembly7.1 High
- openstack horizon, the opennms group meridian +1 moreOpenNMS denial of service via XML entity expansion6.5 Medium
- nodejs undiciundici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering5.9 Medium
- adonisjs http-serverAdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity8.7 High
- lycheeorg lycheeLychee: A single 383-byte PDF causes ~184 seconds of CPU consumption in the real processing path7.1 High
- eclipse vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],...8.2 High
- hibernate validator, ibm hibernate validator +1 moreHibernate Validator is affected by an expression language injection vulnerability7.5 High
python-markdown2DebianA Regular-Expression Denial of Service (ReDoS) in the Markdown2. extract_metadata() function (lib...7.5 High- nodemailerNodemailer 3.0.0 before 10.0.10 Denial of Service via SMTP Reply Parsing8.2 High
- nodemailerNodemailer 3.0.0 before 10.0.10 Quadratic DKIM Header Unfolding Denial of Service7.1 High
- freerdpFreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR Proxy8.2 High
- freerdpFreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via DRDYNVC DATA_FIRST7.1 High
- freerdpFreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATE8.2 High
pgbouncerAzure LinuxInfinite loop on empty option name in startup options parameter in PgBouncer7.5 High- mtrudel banditHTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream processes indefinitely in Bandit8.7 High
- modelcontextprotocol python-sdkMCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion6.9 Medium
- rabbitmq rabbitmq-serverRabbitMQ AMQP 1.0 parser: amplification memory-exhaustion DoS via zero-width array aggregation6.0 Medium
- giteaGitea repository initialization resource exhaustion4.3 Medium
- giteaGitea Swift package manifest memory exhaustion6.5 Medium
- giteaGitea Alpine package parsing memory exhaustion6.5 Medium
- giteaGitea GitLab migration denial of service6.5 Medium
- giteaGitea OneDev migration denial of service6.5 Medium
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)7.5 High
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)7.5 High
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)7.5 High
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)7.5 High
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)7.5 High
- microsoft sql server 2022 (gdr), sql server 2022 for x64-based systems (cu27), sql server 2025 for x64-based systems (cu9) +1 more +3 moreMicrosoft SQL Server Denial of Service Vulnerability6.5 Medium
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Uncontrolled Resource Consumption (CWE-400)7.5 High
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty Denial of Service6.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreMicrosoft OpenSSH for Windows Elevation of Privilege Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +8 more +10 moreMicrosoft Office Excel Remote Code Execution Vulnerability8.8 High
- mozilla thunderbirdDenial-of-service in the Exchange email component8.6 High
- grafana enterprise, oss +1 moreUnbounded memory allocation in the Prometheus rule conversion API6.5 Medium
- ibm websphere application server, websphere application server - liberty +1 moreIBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service7.5 High
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Sync component6.5 Medium
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Site Reports component6.5 Medium
- Show moreLoading…