CWE-408

7 CVEs classified under CWE-408. Browse by severity and year.

Top CVEs for CWE-408
CVESeverityScorePublishedSummary
CVE-2026-11605High7.52026-07-22The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not…
CVE-2026-41405High7.52026-04-28OpenClaw before 2026.3.31 parses MS Teams webhook request bodies before performing JWT validation, allowing unauthenticated attackers to trigger resource exhau…
CVE-2022-2576High7.52022-07-29In Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a DTLS resumption handshake falls back to a DTLS full handshake on a parameter mismatch without u…
CVE-2020-1657High7.52020-10-16On SRX Series devices, a vulnerability in the key-management-daemon (kmd) daemon of Juniper Networks Junos OS allows an attacker to spoof packets targeted to I…
CVE-2026-3592Medium5.32026-05-20BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the reso…
CVE-2026-41374Medium5.32026-04-28OpenClaw before 2026.3.31 performs Discord audio preflight transcription before validating member authorization, allowing unauthenticated attackers to consume…
CVE-2026-41331Medium5.32026-04-21OpenClaw before 2026.3.31 contains a resource consumption vulnerability in Telegram audio preflight transcription that allows unauthorized group senders to tri…
All CVEs classified under CWE-408 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-11605High7.52026-07-22The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not…
CVE-2026-3592Medium5.32026-05-20BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the reso…
CVE-2026-41405High7.52026-04-28OpenClaw before 2026.3.31 parses MS Teams webhook request bodies before performing JWT validation, allowing unauthenticated attackers to trigger resource exhau…
CVE-2026-41374Medium5.32026-04-28OpenClaw before 2026.3.31 performs Discord audio preflight transcription before validating member authorization, allowing unauthenticated attackers to consume…
CVE-2026-41331Medium5.32026-04-21OpenClaw before 2026.3.31 contains a resource consumption vulnerability in Telegram audio preflight transcription that allows unauthorized group senders to tri…
CVE-2022-2576High7.52022-07-29In Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a DTLS resumption handshake falls back to a DTLS full handshake on a parameter mismatch without u…
CVE-2020-1657High7.52020-10-16On SRX Series devices, a vulnerability in the key-management-daemon (kmd) daemon of Juniper Networks Junos OS allows an attacker to spoof packets targeted to I…