CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro v520, radeon™ pro v620 +19 more +21 moreImproper system call parameter validation in the Trusted OS may allow a malicious driver to...7.1 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreAn authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplification7.1 High
- mongodb inc server, mongodb, mongodb, inc. mongodb server +2 moreConnections received from the proxy port may not count towards total accepted connections8.2 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may crash when inserting large documents7.1 High
- sap supply chain management, advanced planning and optimization +1 moreDenial of service (DOS) in SAP Supply Chain Management7.7 High
- tanium serverTanium addressed an uncontrolled resource consumption vulnerability in Tanium Server.6.5 Medium
- powerdns recursorCrafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor5.3 Medium
- hclsoftware hcl devops velocityHCL DevOps Velocity is susceptible to a Denial of Service vulnerability6.8 Medium
- antrea-io antreaAntrea has invalid enforcement order for network policy rules caused by integer overflow8.0 High
- adonisjs bodyparser, core +1 moreAdonisJS vulnerable to Denial of Service (DoS) via Unrestricted Memory Buffering in PartHandler during File Type Detection7.5 High
- significant-gravitas autogpt, agpt autogpt platform +1 moreAutoGPT has a DoS vulnerability in ReadRSSFeedBlock8.7 High
- ge intelligent platforms, inc. proficyscada for iosProficySCADA for iOS 5.0.25920 - 'Password' Denial of Service4.6 Medium
- odin-secure-ftp-expert odin secure ftp expertOdin Secure FTP Expert 7.6.3 - 'Site Info' Denial of Service4.6 Medium
- ultravnc team viewer, uvnc ultravnc viewer +1 moreUltraVNC Viewer 1.2.4.0 - 'VNCServer' Denial of Service4.6 Medium
- ibm jazz reporting serviceIBM Jazz Reporting Service Denial of Service3.5 Low
- ibm db2 big sql on cloud pak for dataIBM Db2 Big SQL on Cloud Pak for Data is vulnerable to a denial of service due to lack of throttling on an API5.3 Medium
- navidromeNavidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints9.2 Critical
- chainguard apkoapko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams7.5 High
- chainguard apkoapko is vulnerable to unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams5.5 Medium
- kubernetes ingress-nginxingress-nginx Admission Controller denial of service6.5 Medium
- sunnysidesoft virtualtablet serverVirtualTablet Server 3.0.2 - Denial of Service (PoC)8.7 High
- utillyty filettoFiletto 1.0 - 'FEAT' Denial of Service7.1 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +8 more +10 moreAn issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor...5.5 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +8 more +10 moreAn issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor...5.5 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +8 more +10 moreAn issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor...5.5 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +8 more +10 moreAn issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor...5.5 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +8 more +10 moreAn issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor...6.2 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +8 more +10 moreAn issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor...5.5 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +8 more +10 moreAn issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor...6.2 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +8 more +10 moreAn issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor...6.2 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +8 more +10 moreAn issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor...6.2 Medium
- @clerk fastifyFastify Vulnerable to DoS via Unbounded Memory Allocation in sendWebStream3.7 Low
- rizinRizin has a heap overflow on mach0_chained_fixups.c4.4 Medium
- parall jspdfjsPDF Affected by Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoder8.7 High
- mediatek nr15, nr16, nr17 +2 more +4 moreIn Modem, there is a possible system crash due to an uncaught exception. This could lead to...6.5 Medium
- winfrigate frigate 2Frigate 2.02 - Denial Of Service4.6 Medium
- code::blocksCode Blocks 20.03 - Denial Of Service4.6 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of Service6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of Service6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of Service6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of Service6.2 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of Service6.5 Medium
- red hat build of apicurio registry 2, build of quarkus, data grid 8 +7 more +9 moreUndertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks7.5 High
- obsidianforensics unfurlUnfurl < 2026.04 - Denial of Service via Unbounded zlib Decompression8.7 High
- discourseDiscourse Has Denial of Service (DoS) Vulnerability in Drafts Creation Endpoint6.5 Medium
- discourseDiscourse has DoS vulnerability in username change endpoint4.3 Medium
- asc applied software consultants timetablesaSc TimeTables 2021.6.2 - Denial of Service6.7 Medium
- vercel next.jsNext.js: Server-Side Request Forgery in Server Actions on Custom Servers8.3 High
- Show moreLoading…