CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- corednsCoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification7.5 High
- qnap systems inc. file station 5File Station 57.1 High
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 57.1 High
- huawei harmonyosResource allocation control failure vulnerability in the ArkUI framework Impact: Successful...4.0 Medium
- qtWhen loading a specifically crafted ICNS format image file in QImage then it will trigger a crash...5.1 Medium
- rackReDoS Vulnerability in Rack::Multipart handle_mime_head6.6 Medium
- phoenix contact ilc 131, ilc 151, ilc 171 +1 more +3 morePHOENIX CONTACT: ILC 1x1 ETH Denial of Service7.5 High
- inventreeInvenTree has uncontrolled memory allocation via built-in label-sheet plugin3.5 Low
- https://github.com/yrutschle/sslh/releases/tag/v2.2.4 sslhFile Descriptor Exhaustion in sslh-select and sslh-ev triggers SEGFAULT8.7 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- vercel next.jsInformation exposure in Next.js dev server due to lack of origin verification2.3 Low
- schule111 schule, schule school management system +1 moreSchule Missing Rate Limiting on OTP Email Requests – Susceptible to Abuse & DoS6.6 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- strangebee thehiveAn e-mail flooding vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11,...6.9 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab7.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- admin audit trail project audit trail, drupal admin audit trail +1 moreAdmin Audit Trail - Less critical - Denial of Service - SA-CONTRIB-2025-0686.5 Medium
- nextcloud server, kiteworks security-advisories, nextcloud group folders +2 moreNextcloud Server and Groupfolders app vulnerable to bypass of group folder quota limit using attachment in text file4.3 Medium
- tornadoweb tornado, debian linux +1 moreTornado vulnerable to excessive logging caused by malformed multipart form data7.5 High
github.com/babylonlabs-io/babylonGoBabylon Integer Overflow in Distribution Module CumulativeRewardRatio Calculation Leading to Chain Halt8.2 High- drupal events log track, events log track project log track +1 moreEvents Log Track - Moderately critical - Denial of Service - SA-CONTRIB-2025-0597.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Deployment Services Denial of Service Vulnerability6.2 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability5.9 Medium
- microsoft windows server 2016, windows server 2016 (server core installation), windows server 2019 +6 more +8 moreWindows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability7.5 High
- ibm 4769 developers toolkitIBM 4769 Developers Toolkit denial of service7.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- linux, linux kernel +1 moresound/virtio: Fix cancel_sync warnings on uninitialized work_structs5.5 Medium
- rackUnbounded-Parameter DoS in Rack::QueryParser7.5 High
- f5 big-ip, big-ip next, big-ip next cnf +25 more +27 moreBIG-IP HTTP/2 vulnerability8.7 High
- djangoproject djangoDjango has a denial-of-service possibility in strip_tags()5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- open-policy-agent opaOPA server Data API HTTP path injection of Rego7.4 High
- volcano-sh volcanoVolcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin8.2 High
- bosch rexroth ag ctrlx os - device adminA vulnerability in the web application of ctrlX OS allows a remote authenticated (low-privileged)...6.5 Medium
- vllmData exposure via ZeroMQ on multi-node vLLM deployment7.5 High
- ruby net-imap, ruby-lang net\ +1 morenet-imap rubygem vulnerable to possible DoS by memory exhaustion6.0 Medium
- bellard quickjsquickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a...5.6 Medium
@escape.tech/graphql-armor-cost-limitnpmGraphQL Armor Cost-Limit Plugin Bypass via Introspection Query Obfuscation5.3 Medium- acronis cyber protect 17, cyber protect cloud agent +1 moreDenial of service due to allocation of resources without limits. The following products are...5.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- mattermost, mattermost server +1 moreDoS in Mattermost Playbooks via Excessive Task Actions6.5 Medium
- redis, debian linux, lfprojects valkey +2 moreRedis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client7.5 High
- cuba-platform cubaCUBA Vulnerable to Denial of Service (DoS) in the File Storage6.5 Medium
- jmix-framework jmix, haulmont cuba platform, cuba rest api +2 more +4 moreio.jmix.localfs:jmix-localfs affected by DoS in the Local File Storage6.5 Medium
- drupal stage file proxy, stage file proxy project file proxy +1 moreStage File Proxy - Moderately critical - Denial of Service - SA-CONTRIB-2025-0355.9 Medium
vllmPyPIvLLM vulnerable to Denial of Service by abusing xgrammar cache6.5 Medium- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...6.5 Medium
- surrealdbSurrealDB before 2.2.2 Denial of Service via JavaScript Scripting2.3 Low
- Show moreLoading…