CWE-400

2,909 vulnerabilities with CWE-400

CVE-2026-42402 HIGH

Apache Neethi: Policy Normalization Unbounded Resource Allocation DoS

CVSS 7.5

CVE-2026-42403 HIGH

Apache Neethi: Circular Policy Reference Infinite Loop

CVSS 7.5

CVE-2026-28221 MEDIUM

Wazuh: Pre-auth stack-based buffer overflow in wazuh-remoted print_hex_string() due to signed char promotion on x86_64

CVSS 6.5

CVE-2026-22745 MEDIUM

CVE-2026-22745 : Denial of service in static resource handling on Windows platforms

CVSS 5.3

CVE-2026-22740 MEDIUM

Spring Framework DoS with Multipart Temp Files in WebFlux

CVSS 6.5

CVE-2026-40980 MEDIUM

Spring AI 1.0.0-1.0.5 - Memory Corruption

CVSS 6.5

CVE-2026-35901 MEDIUM

Mercury MIPC252W 1.0.5 - DoS

CVSS 4.4

CVE-2026-30350 HIGH

Untitled

CVSS 7.5

CVE-2026-41680 HIGH

Marked: OOM Denial of Service via Infinite Recursion in marked Tokenizer

CVSS 7.5

CVE-2026-41324 HIGH

basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()

CVSS 7.5

CVE-2026-41309 HIGH

Open Source Social Network (OSSN) Vulnerable to Resource Exhaustion via Malicious Image Processing

CVSS 8.2

CVE-2026-33610 MEDIUM

Possible file descriptor exhaustion in forward-dnsupdate

CVSS 5.9

CVE-2026-6844 MEDIUM

Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files

CVSS 5.5

CVE-2026-6022 HIGH

Uncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAX

CVSS 7.5

CVE-2026-6416 LOW

Tanium addressed an uncontrolled resource consumption vulnerability in Interact.

CVSS 2.7

CVE-2026-41146 HIGH

facil.io and downstream iodine ruby gem vulnerable to uncontrolled resource consumption and loop with unreachable exit condition

CVE-2026-41135 HIGH

free5GC PCF: Memory Leak via CORS Middleware Registration in HTTP Handler Leads to Denial of Service

CVSS 7.5

CVE-2026-6797 MEDIUM

Sanluan PublicCMS DocToHtmlUtils.java ZipSecureFile.setMinflateRatio resource consumption

CVSS 4.3

CVE-2026-40924 MEDIUM

Tekton Pipelines: HTTP Resolver Unbounded Response Body Read Enables Denial of Service via Memory Exhaustion

CVSS 6.5

CVE-2026-34308 MEDIUM

Oracle Corporation MySQL Server < 8.0.45 - Denial of Service

CVSS 6.5

CVE-2026-34304 MEDIUM

Oracle Corporation MySQL Server < 8.0.45 - Denial of Service

CVSS 4.9

CVE-2026-34303 MEDIUM

Oracle Corporation MySQL Server < 8.0.45 - Denial of Service

CVSS 6.5

CVE-2026-34293 MEDIUM

Oracle Corporation MySQL Server < 8.0.45 - Denial of Service

CVSS 4.9

CVE-2026-34290 HIGH

Oracle Corporation Oracle Identity Manager Connector < 12.2.1.4.0 - Denial of Service

CVSS 7.5

CVE-2026-34282 HIGH

Oracle Corporation Oracle Java SE < 8u481-perf - Denial of Service

CVSS 7.5