CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- palo alto networks prisma sd-wanPrisma SD-WAN: Denial of Service (DoS) Vulnerability Through Burst of Crafted Packets5.1 Medium
- ibm qradar wincollect agent, qradar wincollect +1 moreIBM QRadar WinCollect Agent denial of service4.3 Medium
- oisf suricataSuricata decode_base64: signature can do large memory allocation6.2 Medium
- oisf suricataSuricata datasets: ruleset declared settings can lead to resource starvation6.2 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- dell powerscale onefsDell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.0, contains an uncontrolled resource...5.3 Medium
- helmHelm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination6.5 Medium
- drupal web-tWEB-T - Moderately critical - Access bypass, Denial of service - SA-CONTRIB-2025-0306.5 Medium
- dnnsoftware dnn.platform, dotnetnuke +1 morePossible Denial of Service (DoS) in DNN.PLATFORM registration5.9 Medium
- mlc-ai xgrammarDenial of Service by abusing xgrammar unbounded cache in memory6.5 Medium
- bep imagemetabep/imagemeta allows a potentially large memory allocation in PNG and WebP parsing6.9 Medium
- bep imagemetabep/imagemeta allows excessively large EXIF data structures6.9 Medium
- microsoft asp.net core, asp.net core 8.0, asp.net core 9.0 +5 more +7 moreASP.NET Core and Visual Studio Denial of Service Vulnerability7.5 High
- apollographql apollo-rsapollo-compiler Named Fragment Processing Vulnerability7.5 High
- apollographql apollo gateway, federation +1 moreApollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass7.5 High
- apollographql apollo gateway, federation +1 moreApollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion7.5 High
- apollographql routerApollo Router Query Validation Vulnerable to Excessive Resource Consumption via Named Fragment Processing7.5 High
- apollographql routerApollo Router Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion7.5 High
- apollographql routerApollo Router Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass7.5 High
- jtekt electronics corporation hmi gc-a2 series, hmi viewjet c-more series +1 moreAllocation of resources without limits or throttling issue exists in HMI ViewJet C-more series...5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreLibsoup: denial of service attack to websocket server7.5 High
- image-size, red hat gatekeeper 3, build of podman desktop +15 more +17 moreimage-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser8.7 High
- zabbixDoS vulnerability due to uncontrolled resource exhaustion6.0 Medium
- djangoproject djangoDjango Potential Denial of Service (DoS) on Windows5.8 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab4.3 Medium
- nethermind junoNethermind Juno Potential Denial of Service (DoS) via Integer Overflow7.5 High
- directusDirectus's S3 assets become unavailable after a burst of HEAD requests5.3 Medium
- directusDirectus's S3 assets become unavailable after a burst of malformed transformations5.3 Medium
- red hat build of keycloak, build of keycloak 26.0, single sign-on 7 +2 moreOrg.keycloak/keycloak-services: jwt token cache exhaustion leading to denial of service (dos) in keycloak4.9 Medium
- b&r industrial automation gmbh aprolEnabled ICMP redirection in B&R APROL7.2 High
- vercel next.jsAuthorization Bypass in Next.js Middleware9.1 Critical
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 moreDenial of Service (DoS) in gaizhenbiao/chuanhuchatgpt7.5 High
- gradio video, gradio-app gradio-app/gradio +1 moreDenial of Service in gradio-app/gradio7.5 High
- aimhubio aimhubio/aim, aimstack aim +1 moreDenial of Service in aimhubio/aim7.5 High
- shaunwei realchar, shaunwei/realchar +1 moreUnauthenticated Denial of Service in shaunwei/realchar7.5 High
- parisneo parisneo/lollms-webui, lollms web ui +1 moreInsufficient Patch Leading to DoS in parisneo/lollms-webui7.5 High
- h2o, h2oai h2oai/h2o-3 +1 moreDenial of Service in h2oai/h2o-37.5 High
- stangirard stangirard/quivrDenial of Service (DoS) via Multipart Boundary in stangirard/quivr7.5 High
- superagi, transformeroptimus transformeroptimus/superagi +1 moreUnauthenticated Denial of Service in transformeroptimus/superagi7.5 High
- binary-husky binary-husky/gpt academic, gpt academic +1 moreDenial of Service in binary-husky/gpt_academic7.5 High
- imartinez imartinez/privategpt, pribai privategpt +1 moreDenial of Service (DOS) in imartinez/privategpt7.5 High
- danny-avila danny-avila/librechat, librechat +1 moreImproper Input Validation in danny-avila/librechat7.5 High
- bentoml bentoml/bentomlDenial of Service in bentoml/bentoml7.5 High
- aimhubio aimhubio/aim, aimstack aim +1 moreDenial of Service in aimhubio/aim7.5 High
- danswer-ai danswer-ai/danswerDenial of Service in danswer-ai/danswer7.5 High
- danswer-ai danswer-ai/danswerDenial of Service in danswer-ai/danswer7.5 High
- automatic1111 automatic1111/stable-diffusion-webui, stable-diffusion-webui +1 moreUnauthenticated DoS via Multipart Boundary in automatic1111/stable-diffusion-webui7.5 High
- ollama, ollama ollama/ollama +1 moreAllocation of Resources Without Limits or Throttling in ollama/ollama7.5 High
- berriai berriai/litellm, litellm +1 moreDenial of Service (DoS) in berriai/litellm7.5 High
- haotian-liu haotian-liu/llava, hliu llava +1 moreDenial of Service in haotian-liu/llava7.5 High
- Show moreLoading…