CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- vercel next.jsNext.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies6.3 Medium
- vercel next.jsNext.js: Unbounded Server Action payload in Edge runtime6.3 Medium
- vercel next.jsNext.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname8.3 High
- vercel next.jsNext.js: Unauthenticated Disclosure of Internal Server Function endpoints6.3 Medium
- vercel next.jsNext.js: Cross-site scripting in App Router applications using CSP nonces4.7 Medium
- vercel next.jsNext.js: Cross-site scripting in beforeInteractive scripts with untrusted input6.1 Medium
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Denial of Service via connection exhaustion in applications using Cache Components7.5 High
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Server-side request forgery in applications using WebSocket upgrades8.6 High
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Denial of Service in the Image Optimization API5.9 Medium
- vercel next.jsNext.js: Cache poisoning in React Server Component responses5.4 Medium
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Middleware / Proxy bypass in Pages Router applications using i18n7.5 High
- vercel next.jsNext.js: Middleware / Proxy redirects can be cache-poisoned3.7 Low
- vercel next.jsNext.js: HTTP request smuggling in rewrites6.3 Medium
- vercel next.jsNext.js: Unbounded next/image disk cache growth can exhaust storage6.9 Medium
- facebook react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack +2 moreNext.js HTTP request deserialization can lead to DoS when using insecure React Server Components7.5 High
- kyvernoKyverno Denial of Service via Context Variable Amplification in Policy Engine7.7 High
- eclipse threadx netx duo, eclipse foundation threadx - netx duo +1 moreA denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A specially crafted network packet of "Packet Too Big" with more than 15 different source…8.7 High
- laravel holdings inc. novaLaravel Nova 3.7.0 - 'range' DoS8.7 High
- raimersoft tapinradioTapinRadio 2.13.7 - Denial of Service6.7 Medium
- flexense syncbreezeSyncBreeze 10.0.28 - 'login' Denial of Service8.7 High
- gmrtdgmrtd ReadFile Vulnerable to Denial of Service via Excessive TLV Length Values5.9 Medium
- red hat openshift virtualization 4Kubevirt: kubevirt: vm administration denial of service via guest agent6.4 Medium
- tanium discoverTanium addressed an uncontrolled resource consumption vulnerability in Discover.4.9 Medium
- nsasoft nsauditorNsauditor 3.2.2.0 - 'Event Description' Denial of Service6.7 Medium
- northwest performance software, inc. managed switch port mapping toolManaged Switch Port Mapping Tool 2.85.2 - Denial of Service6.7 Medium
- agatasoft pingmaster proAgataSoft PingMaster Pro 2.1 - Denial of Service6.7 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab7.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab5.3 Medium
- lxsmnsyc serovalSeroval affected by Denial of Service via Deeply Nested Objects7.5 High
- joinmastodon mastodonMastodon missing length limits on list names, filter names, and filter keywords4.3 Medium
- joinmastodon mastodonMastodon vulnerable to Denial of Service from a single post (client/server)7.5 High
- oisf suricataSuricata dnp3: unbounded transaction growth7.5 High
- oisf suricataSuricata DCERPC: unbounded fragment buffering leads to memory exhaustion7.5 High
- ijl orjsonorjson does not limit recursion for deeply nested JSON documents7.5 High
- linuxfoundation libocpp, everest everest-core +1 moreEVerest affected by memory exhaustion in libocpp4.7 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest's inadequate session handling can lead to memory-related errors or exhaustion of the operating system’s file descriptors, resulting in a denial of service7.4 High
- geogebra graphing calculatorGeoGebra Graphing Calculator 6.0.631.0 - Denial Of Service6.7 Medium
- geogebra classicGeoGebra Classic 5.0.631.0-d - Denial of Service6.7 Medium
- geogebra cas calculatorGeoGebra CAS Calculator 6.0.631.0 - Denial of Service4.6 Medium
- proftpdProFTPD 1.3.7a - Remote Denial of Service8.7 High
- lxsmnsyc serovalseroval is vulnerable to Denial of Service via array serialization7.5 High
- linuxfoundation everest, everest everest-core +1 moreEVerest's unlimited connections can lead to DoS through operating system resource exhaustion7.4 High
- pterodactyl wingsEndless reprocessing/reupload of activity log data due to SQLite max parameters limit not being considered8.3 High
- convoypanel panel, pterodactyl wings +1 morePterodactyl Wings's websocket endpoints have no visible rate limits or monitoring, allowing for DOS attacks under certain circumstances8.3 High
- b&r industrial automation gmbh automation runtimeVulnerability on Automation Runtime my cause DoS Conditions8.9 High
- pyasn1, debian linux, red hat lightspeed core +48 more +50 morepyasn1 has a DoS vulnerability in decoder7.5 High
- go standard library archive/zip, golang go +1 moreExcessive CPU consumption when building archive index in archive/zip6.5 Medium
- go standard library net/url, golang go, red hat assisted installer for red hat openshift container platform 2 +160 more +162 moreMemory exhaustion in query parameter parsing in net/url7.5 High
- mattermost, mattermost server +1 moreApplication-Level DoS via infinite re-render loop in user profile handling6.8 Medium
- mattermost, mattermost server +1 moreDoS from quadratic complexity in model.ParseHashtags3.1 Low
- Show moreLoading…