CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- oracle database server, oracle corporation database - enterprise edition +1 moreVulnerability in the Java VM component of Oracle Database Server. Supported versions that are...3.1 Low
- oisf suricataSuricata http2: oom from duplicate headers7.5 High
- oisf suricataSuricata modbus: txs without responses are never freed7.5 High
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 moreArbitrary Folder Creation in gaizhenbiao/chuanhuchatgpt7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in WebGL API6.3 Medium
- djangoproject djangoDjango vulnerable to Denial of Service7.5 High
- djangoproject djangoDjango vulnerable to Denial of Service7.5 High
- knime business hubDenial-of-service on KNIME Business Hub when certain jobs are executed7.1 High
- siemens sinema remote connect serverA vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1)....5.3 Medium
- linux, linux kernel +1 moremmc: davinci: Don't strip remove function when driver is builtin5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morebcache: fix variable length array abuse in btree_iter7.8 High
- linux, linux kernel +1 morecrypto: starfive - Do not free stack buffer7.8 High
- linux, linux kernel +1 moremm/hugetlb: do not call vma_add_reservation upon ENOMEM7.8 High
- linux, linux kernel +1 moremm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL5.5 Medium
- linux, linux kernel +1 morexfs: fix log recovery buffer allocation for the legacy h_size fixup7.3 High
- opcfoundation ua-.netstandardOPCFoundation.NetStandard.Opc.Ua.Core buffer-management vulnerability7.5 High
- mesbookUncontrolled Resource Consumption vulnerability in MESbook7.5 High
- github.com/rs/corsDenial of service via malicious preflight requests in github.com/rs/cors7.5 High
- gorilla schemaPotential memory exhaustion attack due to sparse slice deserialization7.5 High
- randombit botanBotan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters7.5 High
- pendulum-project ntpd-rsUnlimited number of NTS-KE connections can crash ntpd-rs server7.5 High
- ibm mqIBM MQ denial of service5.9 Medium
- ibm mqIBM MQ denial of service5.9 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moref2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock7.8 High
- shanxichuangxiang cmsAn issue the background management system of Shanxi Internet Chuangxiang Technology Co., Ltd v1.0...6.5 Medium
- lg electronics supersign cmsPort scanning vulnerability in LG SuperSign CMS4.8 Medium
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreUncontrolled Resource Consumption in mintplex-labs/anything-llm6.5 Medium
- crate, cratedb +1 moreClient initialized Session-Renegotiation DoS5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
github.com/vektah/gqlparserGo,github.com/vektah/gqlparser/v2Go +1 moregqlparser denial of service vulnerability via the parserDirectives function3.7 Lowtypo3/cmsPackagistTYPO3 Denial of Service in Online Media Asset Handling6.5 Mediumtypo3/cmsPackagistTYPO3 Denial of Service in Frontend Record Registration7.5 High- cyrusimap cyrus imapCyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause...6.5 Medium
- pimcorePimcore Vulnerable to Flooding Server with Thumbnail files7.5 High
- google androidIn multiple functions of ShortcutService.java, there is a possible persistent DOS due to resource...5.5 Medium
typo3/cms-corePackagistTYPO3 Denial of Service in Frontend Record Registration7.5 Hightypo3/cms-corePackagistTYPO3 Denial of Service in Online Media Asset Handling5.3 Medium- jetbrains teamcityIn JetBrains TeamCity before 2024.03.2 server was susceptible to DoS attacks with incorrect auth tokens5.9 Medium
- mindersec minderDenial of service of Minder Server from maliciously crafted GitHub attestations5.3 Medium
- rack rack-contribrack-contrib vulnerable to Denial of Service due to the unconstrained value of the incoming "profiler_runs" parameter8.6 High
- linux, linux kernel +1 moredrm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again7.8 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- litespeedtech openlitespeedOpenLiteSpeed before 1.8.1 mishandles chunked encoding.5.3 Medium
- linux, linux kernel +1 moredma-debug: prevent an error message from causing runtime problems7.5 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr8.8 High
- ibm security guardiumIBM Security Guardium denial of service4.4 Medium
- mindersec minderDenial of service of Minder Server with attacker-controlled REST endpoint5.3 Medium
- ruby rexmlREXML contains a denial of service vulnerability5.3 Medium
- typo3TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController5.3 Medium
- Show moreLoading…