CWE-400 · Uncontrolled Resource Consumption (page 15)
Page 15 of 35 — CVEs classified under CWE-400, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-38067 | High | 7.5 | 2024-07-09 | Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability |
CVE-2024-38031 | High | 7.5 | 2024-07-09 | Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability |
CVE-2024-38027 | Medium | 6.5 | 2024-07-09 | Windows Line Printer Daemon Service Denial of Service Vulnerability |
CVE-2024-38015 | High | 7.5 | 2024-07-09 | Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
CVE-2024-35270 | Medium | 5.3 | 2024-07-09 | Windows iSCSI Service Denial of Service Vulnerability |
CVE-2024-30105 | High | 7.5 | 2024-07-09 | .NET and Visual Studio Denial of Service Vulnerability |
CVE-2023-39328 | Medium | 5.5 | 2024-07-09 | A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash thro… |
CVE-2024-39895 | Medium | 6.5 | 2024-07-08 | Directus is a real-time API and App dashboard for managing SQL database content. A denial of service (DoS) attack by field duplication in GraphQL is a type of… |
CVE-2024-39479 | High | 7.8 | 2024-07-05 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/hwmon: Get rid of devm When both hwmon and hwmon drvdata (on which hwmon depends… |
CVE-2023-52340 | High | 7.5 | 2024-07-05 | The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can be consumed easily, e.g., leading to a denial of serv… |
CVE-2024-6434 | Low | 3.1 | 2024-07-04 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Regular Expression Denial of Service (ReDoS) in all versions up to, and including, 4.10… |
CVE-2024-34750 | High | 7.5 | 2024-07-03 | Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not… |
CVE-2024-6126 | Low | 3.2 | 2024-07-03 | A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which lead… |
CVE-2024-6427 | High | 7.5 | 2024-07-03 | Uncontrolled Resource Consumption vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can use the "message" parameter to inject a… |
CVE-2024-22104 | Medium | 5.5 | 2024-07-02 | Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS). |
CVE-2024-22102 | Medium | 5.5 | 2024-07-02 | Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error. |
CVE-2024-4557 | Medium | 6.5 | 2024-06-27 | Multiple Denial of Service (DoS) conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0 prior to 16.11.5, starting from 17.0 p… |
CVE-2024-1816 | Medium | 5.3 | 2024-06-27 | An issue was discovered in GitLab CE/EE affecting all versions starting from 12.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1… |
CVE-2024-38520 | Medium | 5.3 | 2024-06-26 | SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. When SoftEtherVPN is deployed with L2TP enabled on a device, it introduces the poss… |
CVE-2024-5013 | High | 7.5 | 2024-06-25 | In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Denial of Service vulnerability was identified. An unauthenticated attacker can put the… |
CVE-2024-5011 | High | 7.5 | 2024-06-25 | In WhatsUp Gold versions released before 2023.1.3, an uncontrolled resource consumption vulnerability exists. A specially crafted unauthenticated HTTP request … |
CVE-2024-39462 | Critical | 9.8 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: clk: bcm: dvp: Assign ->num before accessing ->hws Commit f316cdff8d67 ("clk: Annotate st… |
CVE-2021-4440 | High | 8.8 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: x86/xen: Drop USERGS_SYSRET64 paravirt call commit afd30525a659ac0ae0904f0cb4a2ca75522c31… |
CVE-2024-5216 | High | 7.5 | 2024-06-25 | A vulnerability in mintplex-labs/anything-llm allows for a Denial of Service (DoS) condition due to uncontrolled resource consumption. Specifically, the issue… |
CVE-2023-45196 | High | 7.5 | 2024-06-24 | Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with… |
CVE-2024-38384 | High | 7.8 | 2024-06-24 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix list corruption from reorder of WRITE ->lqueued __blkcg_rstat_flush() can… |
CVE-2022-48748 | High | 7.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix memory leak in __allowed_ingress When using per-vlan state, if vla… |
CVE-2022-48716 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd938x: fix incorrect used of portid Mixer controls have the channel id in… |
CVE-2024-38616 | High | 8.2 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: re-fix fortified-memset warning The carl9170_tx_release() function someti… |
CVE-2024-23443 | Medium | 4.9 | 2024-06-19 | A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack. |
CVE-2024-37904 | Medium | 5.7 | 2024-06-18 | Minder is an open source Software Supply Chain Security Platform. Minder's Git provider is vulnerable to a denial of service from a maliciously configured GitH… |
CVE-2024-36543 | Critical | 9.8 | 2024-06-17 | Incorrect access control in the Kafka Connect REST API in the STRIMZI Project 0.41.0 and earlier allows an attacker to deny the service for Kafka Mirroring, po… |
CVE-2024-32912 | Medium | 5.5 | 2024-06-13 | there is a possible persistent Denial of Service due to test/debugging code left in a production build. This could lead to local denial of service of impaired… |
CVE-2024-32902 | High | 7.5 | 2024-06-13 | Remote prevention of access to cellular service with no user interaction (for example, crashing the cellular radio service with a malformed packet) |
CVE-2024-31399 | Medium | 6.5 | 2024-06-11 | Excessive platform resource consumption within a loop issue exists in Cybozu Garoon 5.0.0 to 5.15.2. If this vulnerability is exploited, processing a crafted m… |
CVE-2024-34688 | High | 7.5 | 2024-06-11 | Due to unrestricted access to the Meta Model Repository services in SAP NetWeaver AS Java, attackers can perform DoS attacks on the application, which may prev… |
CVE-2024-33001 | Medium | 6.5 | 2024-06-11 | SAP NetWeaver and ABAP platform allows an attacker to impede performance for legitimate users by crashing or flooding the service. An impact of this Denial… |
CVE-2024-27812 | Medium | 6.5 | 2024-06-10 | A logic issue was addressed with improved file handling. This issue is fixed in visionOS 1.2. Processing web content may lead to a denial-of-service. |
CVE-2024-27800 | Medium | 6.5 | 2024-06-10 | This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5… |
CVE-2024-37535 | Medium | 4.4 | 2024-06-09 | GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0… |
CVE-2023-51847 | High | 7.5 | 2024-06-06 | An issue in obgm and Libcoap v.a3ed466 allows a remote attacker to cause a denial of service via thecoap_context_t function in the src/coap_threadsafe.c:297:3… |
CVE-2024-3153 | Medium | 6.5 | 2024-06-06 | mintplex-labs/anything-llm is affected by an uncontrolled resource consumption vulnerability in its upload file endpoint, leading to a denial of service (DOS)… |
CVE-2024-36743 | High | 7.5 | 2024-06-06 | An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when an empty array is processed with oneflow.dot. |
CVE-2024-33655 | High | 7.5 | 2024-06-06 | The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service (resource consumption) by arranging for DNS queries to be accumul… |
CVE-2022-28657 | High | 7.8 | 2024-06-04 | Apport does not disable python crash handler before entering chroot |
CVE-2024-34364 | Medium | 5.7 | 2024-06-04 | Envoy is a cloud-native, open source edge and service proxy. Envoy exposed an out-of-memory (OOM) vector from the mirror response, since async HTTP client will… |
CVE-2024-5422 | | 2024-06-04 | An uncontrolled resource consumption of file descriptors in SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-10… | |
CVE-2024-36845 | Medium | 4.3 | 2024-05-31 | An invalid pointer in the modbus_receive() function of libmodbus v3.1.6 allows attackers to cause a Denial of Service (DoS) via a crafted message sent to the u… |
CVE-2024-35221 | Medium | 4.3 | 2024-05-29 | Rubygems.org is the Ruby community's gem hosting service. A Gem publisher can cause a Remote DoS when publishing a Gem. This is due to how Ruby reads the Manif… |
CVE-2023-30311 | High | 7.5 | 2024-05-28 | An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which could lead to a denial of service. |
CVE-2023-46442 | Medium | 4.3 | 2024-05-24 | An infinite loop in the retrieveActiveBody function of Soot before v4.4.1 under Java 8 allows attackers to cause a Denial of Service (DoS). |
CVE-2024-22588 | Medium | 6.5 | 2024-05-24 | Kwik commit 745fd4e2 does not discard unused encryption keys. |
CVE-2021-47371 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: nexthop: Fix memory leaks in nexthop notification chain listeners syzkaller discovered me… |
CVE-2021-47368 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: enetc: Fix illegal access when reading affinity_hint irq_set_affinity_hit() stores a refe… |
CVE-2021-47329 | Medium | 6.2 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: scsi: megaraid_sas: Fix resource leak in case of probe failure The driver doesn't clean u… |
CVE-2021-47313 | High | 8.4 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init It's a classic example of m… |
CVE-2021-47295 | High | 7.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: sched: fix memory leak in tcindex_partial_destroy_work Syzbot reported memory leak i… |
CVE-2021-47284 | Medium | 4.7 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: netjet: Fix crash in nj_probe: 'nj_setup' in netjet.c might fail with -EIO a… |
CVE-2021-47238 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix memory leak in ip_mc_add1_src BUG: memory leak unreferenced object 0xffff8… |
CVE-2024-35194 | Medium | 5.3 | 2024-05-20 | Minder is a software supply chain security platform. Prior to version 0.0.50, Minder engine is susceptible to a denial of service from memory exhaustion that c… |
CVE-2024-34953 | High | 7.5 | 2024-05-20 | An issue in taurusxin ncmdump v1.3.2 allows attackers to cause a Denial of Service (DoS) via memory exhaustion by supplying a crafted .ncm file |
CVE-2024-35948 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: bcachefs: Check for journal entries overruning end of sb clean section Fix a missing boun… |
CVE-2024-4284 | Medium | 4.9 | 2024-05-19 | A vulnerability in mintplex-labs/anything-llm allows for a denial of service (DoS) condition through the modification of a user's `id` attribute to a value of… |
CVE-2024-35799 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Prevent crash when disable stream [Why] Disabling stream encoder invokes… |
CVE-2023-52672 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: pipe: wakeup wr_wait after setting max_usage Commit c73be61cede5 ("pipe: Add general noti… |
CVE-2024-5055 | High | 7.5 | 2024-05-17 | Uncontrolled resource consumption vulnerability in XAMPP Windows, versions 7.3.2 and earlier. This vulnerability exists when XAMPP attempts to process many inc… |
CVE-2024-5052 | High | 7.5 | 2024-05-17 | Denial of Service (DoS) vulnerability for Cerberus Enterprise 8.0.10.3 web administration. The vulnerability exists when the web server, default port 10001, at… |
CVE-2024-21823 | High | 7.5 | 2024-05-16 | Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation Xeon(R) processors may allow an author… |
CVE-2024-35185 | Medium | 5.3 | 2024-05-16 | Minder is a software supply chain security platform. Prior to version 0.0.49, the Minder REST ingester is vulnerable to a denial of service attack via an attac… |
CVE-2024-35176 | Medium | 5.3 | 2024-05-16 | REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many `<`s in an attribute va… |
CVE-2023-7258 | Medium | 4.8 | 2024-05-15 | A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead to a panic, making it possible for an at… |
CVE-2024-30019 | Medium | 6.5 | 2024-05-14 | DHCP Server Service Denial of Service Vulnerability |
CVE-2024-33498 | Medium | 5.3 | 2024-05-14 | A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (… |
CVE-2024-4068 | High | 7.5 | 2024-05-14 | The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In `lib/parse… |
CVE-2024-3789 | Medium | 6.5 | 2024-05-14 | Uncontrolled resource consumption vulnerability in White Bear Solutions WBSAirback, version 21.02.04. This vulnerability could allow an attacker to send multip… |
CVE-2024-34079 | Low | 3.7 | 2024-05-14 | octo-sts is a GitHub App that acts like a Security Token Service (STS) for the Github API. This vulnerability can spike the resource utilization of the STS ser… |
CVE-2024-33774 | Medium | 6.5 | 2024-05-14 | A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanSetup_Wizard allows remote authenticated users to trigger a denial of s… |
CVE-2024-32476 | Medium | 6.5 | 2024-05-14 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. There is a Denial of Service (DoS) vulnerability via OOM using jq in ignoreDifference… |
CVE-2022-32508 | High | 7.5 | 2024-05-14 | An issue was discovered on certain Nuki Home Solutions devices. By sending a malformed HTTP verb, it is possible to force a reboot of the device. This affects… |
CVE-2022-32505 | High | 7.1 | 2024-05-14 | An issue was discovered on certain Nuki Home Solutions devices. It is possible to send multiple BLE malformed packets to block some of the functionality and re… |
CVE-2024-33382 | Medium | 5.3 | 2024-05-08 | An issue in Open5GS v.2.7.0 allows an attacker to cause a denial of service via the 64 unsuccessful UE/gnb registration |
CVE-2024-4438 | High | 7.5 | 2024-05-08 | The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2023-39325/CVE-2023-44487, known as Rapid Reset. This issue occu… |
CVE-2024-4437 | High | 7.5 | 2024-05-08 | The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2021-44716. This issue occurs because the etcd package in the Re… |
CVE-2024-4436 | High | 7.5 | 2024-05-08 | The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2022-41723. This issue occurs because the etcd package in the Re… |
CVE-2024-1930 | Medium | 6.5 | 2024-05-08 | No Limit on Number of Open Sessions / Bad Session Close Behaviour in dnf5daemon-server before 5.1.17 allows a malicious user to impact Availability via No Lim… |
CVE-2023-27321 | High | 7.5 | 2024-05-07 | OPC Foundation UA .NET Standard ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a de… |
CVE-2024-23712 | Medium | 5.5 | 2024-05-07 | In multiple functions of AppOpsService.java, there is a possible way to saturate the content of /data/system/appops_accesses.xml due to resource exhaustion. Th… |
CVE-2024-0026 | Medium | 5.5 | 2024-05-07 | In multiple functions of SnoozeHelper.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of ser… |
CVE-2024-34084 | High | 7.5 | 2024-05-07 | Minder's `HandleGithubWebhook` is susceptible to a denial of service attack from an untrusted HTTP request. The vulnerability exists before the request has bee… |
CVE-2024-32663 | High | 7.5 | 2024-05-07 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, a small amount… |
CVE-2024-4599 | High | 7.5 | 2024-05-07 | Remote denial of service vulnerability in LAN Messenger affecting version 3.4.0. This vulnerability allows an attacker to crash the LAN Messenger service by se… |
CVE-2024-32972 | High | 7.5 | 2024-05-06 | go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to 1.13.15, a vulnerable node can be made to consume very large a… |
CVE-2024-4549 | High | 7.5 | 2024-05-06 | A denial of service vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior. When processing an 'ICS Restart!' message, CEBC.exe restarts t… |
CVE-2024-34506 | High | 7.5 | 2024-05-05 | An issue was discovered in includes/specials/SpecialMovePage.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. If a user with the… |
CVE-2024-34483 | High | 7.5 | 2024-05-05 | OFPGroupDescStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via OFPBucket.len=0. |
CVE-2023-39477 | High | 7.5 | 2024-05-03 | Inductive Automation Ignition ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a deni… |
CVE-2023-27334 | High | 7.5 | 2024-05-03 | Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a deni… |
CVE-2023-50685 | High | 7.5 | 2024-05-02 | An issue in Hipcam Cameras RealServer v.1.0 allows a remote attacker to cause a denial of service via a crafted script to the client_port parameter. |
CVE-2024-25355 | High | 7.5 | 2024-05-01 | s3-url-parser 1.0.3 is vulnerable to Denial of service via the regexes component. |
CVE-2024-32984 | High | 7.5 | 2024-05-01 | Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. The Rust implementation of the Yamux stream multiplexer uses a vector for pend… |