CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP have a Denial Of Service via File Upload (DOS) vulnerability6.9 Medium
- legion of the bouncy castle inc. bc java, bc-fja, bouncy castle for java +2 morePossible DOS in processing specially formed ASN.1 Object Identifiers6.3 Medium
- joinmastodon mastodonMastodon e‑mail throttle misconfiguration allows unlimited email confirmations against unconfirmed emails5.3 Medium
- davidosipov vision-uiVision UI security-kit.js: Potential Uncontrolled Resource Allocation Vulnerability8.7 High
- setasign fpdiFPDI is Vulnerable to Memory Exhaustion (OOM) through its PDF Parser6.0 Medium
- axiomatic bento4Axiomatic Bento4 mp4decrypt Mp4Decrypt.cpp SetDataSize allocation of resources6.3 Medium
- litespeedtech lsquic, litespeed web adc, litespeed web server +1 more +3 moreLiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak.5.3 Medium
- academysoftwarefoundation openexrOpenEXR's Unbounded File Header Values can Lead to Out-Of-Memory Errors4.6 Medium
- phoenix contact axl f bk eip, axl f bk eip ef, axl f bk eip xc +11 more +13 moreHTTP Service DoS Vulnerability7.5 High
- sixlabors imagesharpImageSharp Triggers an Infinite Loop in its GIF Decoder When Skipping Malformed Comment Extension Blocks5.3 Medium
- saml-toolkits ruby-samlRuby SAML DOS vulnerability with large SAML response6.9 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6,...6.2 Medium
- kron technologies pamDoS in Kron Technologies' Kron PAM6.5 Medium
- oisf suricataSuricata's mishandling of data on HTTP2 stream 0 can lead to resource starvation7.5 High
- ibm qradar network threat analytics, security qradar network threat analytics +1 moreIBM Security QRadar Network Threat Analytics denial of service4.5 Medium
- encode starletteStarlette has possible denial-of-service vector when parsing large files in multipart forms5.3 Medium
- netgear rax30 firmwareIn Netgear RAX30 V1.0.10.94_3, the USERLIMIT_GLOBAL option is set to 0 in multiple bftpd-related...7.5 High
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- libp2p py-libp2ppy-libp2p is vulnerable to DoS attacks through use of large RSA keys4.3 Medium
- yhirose cpp-httplibcpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability7.5 High
- yhirose cpp-httplibcpp-httplib does not limit the length of a line6.3 Medium
- ctfer-io chall-managerChall-Manager's HTTP Gateway have no header check timeout leading to potential slow loris attacks8.7 High
- labredescefetrj wegiaWeGIA allows Uncontrolled Resource Consumption via the fid parameter8.7 High
- labredescefetrj wegiaWeGIA allows Uncontrolled Resource Consumption via the errorstr parameter8.7 High
- redisRedis DoS Vulnerability due to bad connection error handling7.5 High
- iroad dashcam q9, q9 firmware +1 moreIROAD Dashcam Q9 MFA Pairing Request allocation of resources5.3 Medium
- vercel next.jsNext.js DoS vulnerability via cache poisoning7.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- lxc incusIncus vulnerable to DoS through antispoofing nftables firewall rule bypass on bridge networks with ACLs3.4 Low
- hitachi energy relion 670/650 and sam600-ioA denial-of-service vulnerability due to improper prioritization of network traffic over...8.7 High
- nekernel-org nekernelNeKernal Multiple Memory Corruption Vulnerabilities in mkfs.hefs8.8 High
- advantech wireless sensing and equipment (wise), wise-4010lan firmware, wise-4050lan firmware +1 more +3 moreDenial of Service via Malformed Modbus Packets6.5 Medium
- advantech wireless sensing and equipment (wise), wise-4010lan firmware, wise-4050lan firmware +1 more +3 moreLogin Session Exhaustion4.2 Medium
- mbuesch letmeinLetmein connection limiter allows an arbitrary amount of simultaneous connections1.7 Low
- ibm infosphere information serverIBM InfoSphere Information Server denial of service7.5 High
- yealink rps, ymcs +1 moreThe Yealink YMCS RPS API before 2025-05-26 lacks rate limiting, potentially enabling information...4.3 Medium
- cloudflare quicheIncorrect congestion window growth by invalid ACK ranges7.5 High
- cloudflare quicheIncorrect congestion window growth by optimistic ACK5.3 Medium
- asvd microlightWithdrawn Advisory: microlight allows a denial of service2.9 Low
- apache commons fileuploadApache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers7.5 High
- apache tomcatApache Tomcat: FileUpload large number of parts with headers DoS7.5 High
- salt project saltCVE-2025-22242 salt advisory5.6 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- ibm cognos analyticsIBM Cognos Analytics denial of service7.5 High
- autodesk maya, universal scene description, usd for 3ds max +1 more +3 moreUSD File Parsing Memory Allocation Vulnerability6.6 Medium
- pion interceptorPion Interceptor's improper RTP padding handling allows remote crash for SFU users (DoS)7.5 High
- discourseDiscourse vulnerable to DoS via large URL payload in PM to a bot8.7 High
- red hat connectivity link 1, openshift ai (rhoai) +1 moreRhcl: authpolicy callbacks result in denial of service in authorino severity5.7 Medium
- Show moreLoading…