CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- litestarLitestar allows unbounded resource consumption (DoS vulnerability)8.2 High
- pglombardo password pusher, passwordpusher +1 morePassword Pusher's rate limiter can be bypassed by forging proxy headers5.3 Medium
- esoft planner, esoftplanner esoft planner +1 moreAn issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows...7.5 High
- google androidIn removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper...5.5 Medium
- linux, linux kernel +1 moreksmbd: check outstanding simultaneous SMB operations7.5 High
- linux, linux kernel +1 moresignal: restore the override_rlimit logic5.5 Medium
- cisco utd snort ips engine softwareMultiple Cisco Products SNORT Ethernet Frame Decoder Denial of Service Vulnerability7.4 High
- bitcoin coreBitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (infinite loop)...7.5 High
- bitcoin coreBitcoin-Qt in Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service ...6.5 Medium
- bitcoin coreBitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis...6.5 Medium
- bitcoin coreBitcoin Core before 0.15.0 allows a denial of service (OOM kill of a daemon process) via a flood...7.5 High
- bitcoin coreBitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory...7.5 High
- bitcoin coreIn Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a...7.5 High
- bitcoin coreIn Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific...5.3 Medium
- bitcoin coreBitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash)...7.5 High
- eslint rewriteRegular Expression Denial of Service (ReDoS) in @eslint/plugin-kit8.7 High
- lunary, lunary-ai lunary-ai/lunary, lunary-ai\/lunary +2 moreEmail Bombing Vulnerability in lunary-ai/lunary7.5 High
- zenml, zenml-io zenml-io/zenml +1 moreLack of login attempt rate-limiting in zenml-io/zenml5.4 Medium
zlib-rscrates.io,libz-rs-syscrates.io,libz-rs-sys-cdylibcrates.io +2 morezlib-rs stack overflow during decompression with malicious input5.3 Medium- bosch rexroth ag indradrive fwa-indrv*-mp*, boschrexrothag indradrive fwa indrv mp +1 moreA vulnerability in the PROFINET stack implementation of the IndraDrive (all versions) of Bosch...7.5 High
- xinje xd5e-24r-e firmwareAn issue in how XINJE XD5E-24R and XL5E-16T v3.5.3b handles TCP protocol messages allows...7.5 High
- netapp storagegridCVE-2024-21994 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)4.3 Medium
- expressif esp idf, espressif esp-idf +1 moreAn issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service (DoS) via a...7.5 High
- 63moons wave 2.0, aero +1 moreNo Rate Limiting Vulnerability in Wave 2.07.1 High
- onosproject sdran-in-a-box, opennetworking onos-a1t +1 moreAn issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a...7.5 High
- google androidIn validate of WifiConfigurationUtil.java , there is a possible persistent denial of service due...5.5 Medium
- tongda oa 2017, tongda2000 office anywhere +1 moreTongda OA 2017 package_static_resources.php resource consumption6.9 Medium
- levelone wbr-6012, level1 wbr-6012 firmware +1 moreThe LevelOne WBR-6012 router with firmware R0.40e6 is vulnerable to improper resource allocation...5.3 Medium
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt, gaizhenbiao\/chuanhuchatgpt +2 moreDenial of Service (DOS) in gaizhenbiao/chuanhuchatgpt7.5 High
- mozilla firefox, thunderbird +1 morePotential race conditions in IndexedDB could have caused memory corruption, leading to a...5.3 Medium
- mattermost, mattermost server +1 moreDoS via Amplified GraphQL Response in Playbooks4.3 Medium
- spring, spring webflux +1 moreAuthorization Bypass of Static Resources in WebFlux Applications9.1 Critical
- pallets werkzeug, quart +1 moreWerkzeug possible resource exhaustion when parsing file data in forms6.9 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance software +1 moreA vulnerability in the SSH server of Cisco Adaptive Security Appliance (ASA) Software could allow...5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- red hat openshift container platform 4.18, redhat openshift container platform +1 moreGraphql: denial of service (dos) vulnerability via graphql batching6.5 Medium
- opcfoundation ua-.netstandardSecurity Update for the OPC UA .NET Standard Stack5.3 Medium
OPCFoundation.NetStandard.Opc.UaNuGet,OPCFoundation.NetStandard.Opc.Ua.CoreNuGet +1 moreSecurity Update for the OPC UA .NET Standard Stack7.5 High- oisf libhtpLibHTP's unbounded header handling leads to denial service7.5 High
- railsAction Dispatch has possible ReDoS vulnerability in query parameter filtering6.6 Medium
- encode starletteStarlette Denial of service (DoS) via multipart/form-data8.7 High
- juniper junos os evolvedJunos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #37.1 High
- juniper junos os evolvedJunos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #27.1 High
- juniper junos os evolvedJunos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #17.1 High
- juniper junos os evolved, junos evolved +1 moreJunos OS Evolved: TCP session state is not always cleared on the Routing Engine leading to DoS8.7 High
- bitcoin, bitcoin core +1 moreBitcoin Core before 25.0 allows remote attackers to cause a denial of service (blocktxn message...7.5 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 moreWindows Hyper-V Denial of Service Vulnerability7.5 High
- solidigm d5-p4320, dc p4510, p4326 +11 more +13 moreImproper resource management in firmware of some Solidigm DC Products may allow an attacker to...6.2 Medium
- solidigm d7-p5500, d7-p5510, d7-p5520 +2 more +4 moreImproper resource initialization handling in firmware of some Solidigm DC Products may allow an...4.4 Medium
- Show moreLoading…