CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- hashicorp consul, consul enterprise +1 moreConsul's event endpoint is vulnerable to denial of service6.5 Medium
- red hat build of keycloak 26.0, build of keycloak 26.0.16, build of keycloak 26.2 +1 more +3 moreKeycloak: keycloak tls client-initiated renegotiation denial of service7.5 High
- sick tloc100-100 firmware, sick ag tloc100-100 +1 moreDenial-of-service (DoS) via resource consumption5.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab7.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab7.5 High
- hashicorp vault, vault enterprise +1 moreVault Vulnerable to Denial of Service Due to Rate Limit Regression7.5 High
- suse neuvectorNeuVector telemetry sender is vulnerable to MITM and DoS8.6 High
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services...4.9 Medium
- ascertia signinghubA lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows...7.5 High
- boyns rplayrplay through 3.3.2 allows attackers to cause a denial of service (SIGSEGV and daemon crash) or...5.3 Medium
- the wikimedia foundation mediawiki - cirrussearch extensionDoS vector through the cirrusbuilddoc query API6.9 Medium
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 moreAPIs Lack Rate Limiting10.0 Critical
- f5 big-ip, big-ip access policy manager +1 moreBigIP APM Vulnerability9.3 Critical
- f5 f5os-c, f5os - chassis +1 moreVELOS partition container network vulnerability7.7 High
- f5 big-ip next cnf, big-ip next for kubernetes, big-ip next spk +2 more +4 moreBIG-IP Next (CNF, SPK, and Kubernetes) vulnerability7.1 High
- f5 big-ip, big-ip ssl orchestrator, ssl orchestrator +2 moreBIG-IP SSL Orchestrator vulnerability8.7 High
- f5 big-ip, big-ip next cnf, big-ip next spk +23 more +25 moreBIG-IP iRules vulnerability8.7 High
- f5 big-ip, big-ip advanced web application firewall, big-ip application security manager +1 more +3 moreBIG-IP Advanced WAF and ASM and NGINX App Protect DNS lookup vulnerability6.9 Medium
- eclipse threadxMissing check for thread priority5.7 Medium
- rockwell automation 1715-aentr ethernet/ip adapterRockwell Automation 1715 EtherNet/IP Comms Module Denial-Of-Service Vulnerability7.7 High
- phoenix contact quint4-ups/24dc/24dc/10/eip, quint4-ups/24dc/24dc/20/eip, quint4-ups/24dc/24dc/40/eip +1 more +3 morePhoenix Contact: Unauthenticated Modbus Service DoS via Crafted Function Code5.3 Medium
- whimsies-yat vickeyVickey's unexpired email confirmation link can be reused to send repeated confirmation emails6.9 Medium
- authlibAuthlib : JWE zip=DEF decompression bomb enables DoS6.5 Medium
- authlibAuthlib is vulnerable to Denial of Service via Oversized JOSE Segments7.5 High
- ibm aspera faspexIBM Aspera Faspex denial of service4.9 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab7.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab4.3 Medium
- go standard library net/textproto, golang go +1 moreExcessive CPU consumption in Reader.ReadResponse in net/textproto5.3 Medium
- go standard library encoding/pem, golang go +1 moreQuadratic complexity when parsing some invalid inputs in encoding/pem7.5 High
- go standard library encoding/asn1, golang go +1 moreParsing DER payload can cause memory exhaustion in encoding/asn15.3 Medium
vllmPyPIvLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server6.5 Medium- pdfmakepdfmake is vulnerable to Throttling via repeatedly redirecting URL in file embedding8.7 High
- sick enterprise analyticsUncontrolled Resource Consumption via log file5.3 Medium
- sick enterprise analyticsUnlimited user creation by authorized users3.8 Low
- assimpOpen Asset Import Library Assimp Q3DLoader.cpp InternReadFile allocation of resources4.8 Medium
- qnap qsync centralQsync Central6.0 Medium
- qnap qsync centralQsync Central7.1 High
- qnap qsync centralQsync Central7.1 High
- qnap qsync centralQsync Central7.1 High
- qnap qsync centralQsync Central7.1 High
- qnap qsync centralQsync Central7.1 High
- splunk, splunk enterprise, cloud platform +1 more +3 moreDenial of Service (DoS) through Multiple LDAP Bind Requests in Splunk Enterprise4.9 Medium
- mantra-chain mantrachainMANTRA tx gas limit is not enforced in send hooks8.8 High
- ebradyjobory finance.jsFinance.js vulnerable to DoS via the seekZero() parameter7.5 High
- ebradyjobory finance.jsFinance.js vulnerable to DoS via the IRR function’s depth parameter7.5 High
- ibm websphere application serverIBM WebSphere Application Server denial of service4.9 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab7.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab7.5 High
- Show moreLoading…