CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- gitlabAllocation of Resources Without Limits or Throttling in GitLab3.5 Low
- rackRack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters7.5 High
- gsyt-productions bunnypad-srcBunnyPad Vulnerable to Buffer Overflow When Opening Files of Size 20MB or Greater5.5 Medium
- frappe pressPress vulnerable to email flooding to users due to lack of validation and rate limits2.7 Low
- temporal oss serverTemporal OSS Server Vulnerable to Allocation of Resources Without Limits or Throttling6.9 Medium
- libexpat project libexpat, siemens ruggedcom rst2428p (6gk6242-6pa00), scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +19 more +21 morelibexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a...7.5 High
- ibm powervm hypervisorIBM PowerVM Hypervisor denial of service6.7 Medium
- honoHono has Body Limit Middleware Bypass5.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- axiosAxios is vulnerable to DoS attack through lack of data size check7.5 High
- erlang otpSSH_FXP_OPENDIR may Lead to Exhaustion of File Handles7.1 High
- erlang otpMalicious Key Exchange Messages may Lead to Excessive Resource Consumption6.9 Medium
- erlang otpUnverified Paths can Cause Excessive Use of System Resources5.3 Medium
- erlang otpUnverified File Handles can Cause Excessive Use of System Resources5.3 Medium
- ibm security verify information queueIBM Security Verify Information Queue denial of service6.5 Medium
- stalwartlabs stalwartStalwart vulnerable to Memory Exhaustion via CalDAV Event Expansion7.1 High
- ethyca fidesFides Webserver API Rate Limiting Vulnerability in Proxied Environments6.3 Medium
- mlc-ai xgrammarxgrammar vulnerable to denial of service by huge enum grammar6.9 Medium
- flightphp flight, core +1 moreDenial of Service (DoS) vulnerability in mikecao/flight7.5 High
- adacore ada web serverAdacore Ada Web Server (AWS) before 25.2 is vulnerable to a denial-of-service (DoS) condition due...7.5 High
- pmmp pocketmine-mpPocketMine-MP before 5.32.1 Denial of Service via ResourcePackClientResponsePacket7.1 High
- redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel 4.14.2 for spring boot 3.5.8 +32 more +34 moreUndertow: undertow madeyoureset http/2 ddos vulnerability7.5 High
- vercel next.jsNext.js Affected by Cache Key Confusion for Image Optimization API Routes6.2 Medium
- vercel next.jsNext.js Content Injection Vulnerability for Image Optimization4.3 Medium
- vercel next.jsNext.js Improper Middleware Redirect Handling Leads to SSRF6.5 Medium
- qnap qsync centralQsync Central7.1 High
- qnap qsync centralQsync Central7.1 High
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 57.1 High
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 57.1 High
- qnap qsync centralQsync Central6.0 Medium
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 57.1 High
- suse rancherRancher affected by unauthenticated Denial of Service8.2 High
- tukaani-project xzgithub.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives5.3 Medium
- hashicorp vault, vault enterprise +1 moreVault unauthenticated denial of service through complex json payload7.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab5.3 Medium
- parall jspdfjsPDF Parsing of Corrupt PNGs Leads to Potential Denial of Service (DoS)8.7 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal users can upload an unlimited amount of files5.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal's Unlimited File Upload Could Result in DoS5.3 Medium
- red hat openshift container platform 4Cri-o: large /etc/passwd file may lead to denial of service5.7 Medium
- ibm websphere application server liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty denial of service5.3 Medium
- helmHelm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion6.5 Medium
- py-pdf pypdfpypdf's Manipulated FlateDecode streams can exhaust RAM6.6 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- f5 big-ip, big-ip next, big-ip next cnf +27 more +29 moreHTTP/2 Vulnerability6.9 Medium
- legion of the bouncy castle inc. bc java, bcpkix fips, siemens simatic cn 4100 +2 morePossible DOS in processing large name constraint structures in PKIXCertPathReveiwer6.3 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreDirectX Graphics Kernel Denial of Service Vulnerability6.5 Medium
- siemens siprotec 5 6md84 (cp300), siprotec 5 6md85 (cp300), siprotec 5 6md86 (cp300) +33 more +35 moreA vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V10.0), SIPROTEC...2.4 Low
- Show moreLoading…