CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- oracle corporation agile product lifecycle management for processVulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle...8.3 High
- oracle corporation helidonVulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient...5.3 Medium
- oracle corporation helidonVulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient...6.5 Medium
- oracle corporation helidonVulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common...7.0 High
- oracle corporation helidonVulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Supported...6.5 Medium
- oracle corporation helidonVulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient...7.5 High
- oracle helidonVulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver...3.7 Low
- oracle corporation enterprise manager base platformVulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager...5.6 Medium
- oracle global lifecycle management nextgen oui frameworkVulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle...7.5 High
- oracle corporation mysql clusterVulnerability in the MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported...3.8 Low
- oracle corporation net servicesVulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions...4.4 Medium
- oracle siebel crm, oracle corporation siebel crm integration +1 moreVulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). ...7.5 High
- oracle corporation trusted answer searchVulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version...5.0 Medium
- oracle corporation trusted answer searchVulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version...9.9 Critical
- oracle identity managerVulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component:...4.3 Medium
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...6.5 Medium
- oracle corporation secure backupVulnerability in Oracle Secure Backup (component: Device Management and Support). Supported...6.5 Medium
- oracle corporation secure backupVulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that...8.6 High
- oracle corporation agile product lifecycle management for processVulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle...5.9 Medium
- oracle corporation product lifecycle analyticsVulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component...6.1 Medium
- oracle siebel crm, oracle corporation siebel crm deployment +1 moreVulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server...8.3 High
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...6.6 Medium
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...7.6 High
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...5.3 Medium
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...8.1 High
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...6.9 Medium
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...8.1 High
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...3.1 Low
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...5.3 Medium
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...5.8 Medium
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...5.5 Medium
- oracle corporation siebel apps - marketingVulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)....5.3 Medium
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...5.9 Medium
- oracle corporation rest data servicesVulnerability in Oracle REST Data Services (component: Database Actions). Supported versions...4.7 Medium
- moov-io signedxmlMoov signedxml: Unauthenticated denial of service in exclusive XML canonicalization7.5 High
- markdown-itmarkdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)7.5 High
- angularAngular: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)8.2 High
- @apostrophecms import-export, apostrophecms apostrophe +1 moreApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export7.5 High
- @apostrophecms db-connect, apostrophecms apostrophe +1 moreApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service7.1 High
- apostrophecms apostropheApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directory7.5 High
- @apostrophecms import-export, apostrophecms apostrophe +1 moreApostropheCMS: Import archives can exhaust server storage and deny service6.5 Medium
- eclipse foundation threadxDeleting a user-mode module thread leaks its privileged kernel stack6.8 Medium
- angularAngular: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)8.2 High
- tox-dev filelockfilelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout5.5 Medium
- mozilla firefox, thunderbird +1 moreDenial-of-service in the PDF Viewer component6.5 Medium
- eclipse foundation iofogEclipse ioFog renders request templates before authentication7.5 High
- eclipse foundation csi - piaPre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop6.9 Medium
- advantech adam-3600A vulnerability in the bulk port configuration functionality could allow an unauthenticated...6.9 Medium
- python pillowPillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS8.7 High
- diffsk configobjDiffSK configobj __init__.py _sectionmarker redos6.9 Medium
- Show moreLoading…