CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal denial of service (memory consumption)6.5 Medium
- djangoproject djangoDjango denial-of-service attack in the intcomma template filter7.5 High
- sandisk ibi, western digital my cloud os 5, my cloud home & duo +12 more +14 moreUncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products4.9 Medium
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud5.5 Medium
- brefphp brefBref Uploaded Files Not Deleted in Event-Driven Functions6.5 Medium
- se.math.spbu spbu se siteUploading an image with a specific filename causes a server-side DoS6.8 Medium
- openfgaOpenFGA DoS5.3 Medium
- contiki-ng tinydtlsAn issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers...9.8 Critical
- ibm db2, db2 for linux, unix and windows, db2 for linux unix and windows +2 moreIBM Db2 denial of service5.3 Medium
- discourseInsufficient control of custom field value sizes4.3 Medium
- skoda-auto superb 3 firmware, škoda superb iii +1 moreDenial of Service via ECU reset service4.7 Medium
- juniper junos os evolvedJunos OS Evolved: A high rate of specific traffic will cause a complete system outage7.5 High
- fortinet fortipamAn allocation of resources without limits or throttling vulnerability [CWE-770] in FortiPAM 1.0...4.2 Medium
- red hat openshift container platform 3.11, openshift container platform 4.13, openshift container platform 4.14 +1 more +3 moreCri-o: pods are able to break out of resource confinement on cgroupv26.5 Medium
- splunk enterprise security, enterprise security (es) +1 moreDenial of Service of an Investigation in Splunk Enterprise Security through Investigation attachments4.3 Medium
- amazon ion, amazon-ion ion-java +1 moreIon Java StackOverflow vulnerability7.5 High
- cubefsAuthenticated users can crash the CubeFS servers with maliciously crafted requests6.5 Medium
- red hat eap 7.4.13, jboss enterprise application platform 7.4 for rhel 8, jboss enterprise application platform 7.4 for rhel 9 +2 more +4 moreEap-7: heap exhaustion via deserialization7.5 High
- dvsekhvalnov jose2gojose2go vulnerable to denial of service via large p2c value7.5 High
- m-files serverUncontrolled Resource Consumption in M-Files Server6.5 Medium
- typelevel grackleGrackle has StackOverflowError in GraphQL query processing7.5 High
- redhat keycloak, red hat build of keycloak, single sign-on 7.6 for rhel 7 +8 more +10 moreKeycloak: offline session token dos7.7 High
- redhat undertow, red hat build of quarkus, data grid 8 +12 more +14 moreUndertow: ajp request closes connection exceeding maxrequestsize7.5 High
- dena h2oh2o QUIC state exhaustion DoS3.7 Low
- zammadAn issue was discovered in Zammad before 6.2.0. Due to lack of rate limiting in the "email...7.5 High
- hashicorp vault, vault enterprise +1 moreVault May be Vulnerable to a Denial of Service Through Memory Exhaustion When Handling Large HTTP Requests7.5 High
- johnson controls facility explorer f4-snc, metasys nae55/sne/snc, johnsoncontrols f4-snc firmware +9 more +11 moreUncontrolled Resource Consumption in Metasys and Facility Explorer7.5 High
- phpjabbers availability booking calendarA lack of rate limiting in pjActionAJaxSend in Availability Booking Calendar 5.0 allows attackers...7.5 High
- traefikUncontrolled Resource Consumption in Traefik7.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab2.6 Low
- schweitzer engineering laboratories sel-451, selinc sel-451 firmware +1 moreAllocation of resources without limits could lead to denial of service4.5 Medium
- apache supersetApache Superset: Lack of rate limiting allows for possible denial of service5.8 Medium
- m-files serverM-Files REST API allows Denial of Service5.7 Medium
- librenmsRate limiting Bypass on login page in libreNMS5.3 Medium
- free5gcFree5gc allows a local attacker to cause a denial of service via the free5gc-compose component5.5 Medium
- ivanti secure access client, secure access client windows +1 moreWhen a specific component is loaded a local attacker and is able to send a specially crafted...8.8 High
- opentelemetry, open-telemetry opentelemetry-go-contrib +1 moreDoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics7.5 High
- discourseDiscourse DoS through Onebox favicon URL7.5 High
- discourseBypassing height value allowed in some theme components4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab3.1 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLab4.3 Medium
- python pillow, fedoraproject fedora +1 morePillow Denial of Service vulnerability7.5 High
- djangoproject djangoDjango potential denial of service vulnerability in UsernameField on Windows7.5 High
- cisco firepower management center, secure firewall management center +1 moreA vulnerability in a logging API in Cisco Firepower Management Center (FMC) Software could allow...7.5 High
- red hat ironic content for red hat openshift container platform 4.12, openstack platform 17.1 for rhel 8, openstack platform 17.1 for rhel 9 +5 more +7 morePython-eventlet: patch regression for cve-2021-21419 in some red hat builds5.3 Medium
- diaconou encodedid\encoded_id-rails Denial of Service Vulnerability7.5 High
- pfsensePfsense CE version 2.6.0 is vulnerable to No rate limit which can lead to an attacker creating...4.9 Medium
- apache http server, debian linux, fedoraproject fedora +2 moreApache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST5.9 Medium
- golang go, traefik, red hat openshift ai (rhoai) +2 more +4 moreTraefik - Denial of Service via HTTP/2 Request Handling8.7 High
- linux kernel, netapp active iq unified manager, h410c firmware +2 moreAn issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in...5.5 Medium
- Show moreLoading…