CWE-400

High likelihood

Uncontrolled Resource Consumption

Parent: CWE-664 - Improper Control of a Resource Through its Lifetime

The product does not properly control the allocation and maintenance of a limited resource.

3,102 vulnerabilities with CWE-400
CVE-2025-6075 MEDIUM
os.path.expandvars - Info Disclosure
CVSS 5.5
CVE-2025-64388 CRITICAL
Circutor TCPRS1plus - Denial of Service via Specific Web Server Requests
CVE-2025-30188 HIGH
OX App Suite < 2.1.7 - Denial of Service via Cache Flooding
CVSS 7.5
CVE-2025-8849 HIGH
LibreChat 0.7.9 - Denial of Service via Unbounded Parameters in /api/memories Endpoint
CVSS 7.5
CVE-2025-6176 HIGH
Scrapy < 2.13.4 - Denial of Service via Brotli Decompression Bomb
CVSS 7.5
CVE-2025-5342 MEDIUM
ManageEngine Exchange Reporter Plus <= 5721 - Denial of Service via Search Module ReDOS
CVSS 4.3
CVE-2025-10932 HIGH
Progress MOVEit Transfer - Uncontrolled Resource Consumption
CVSS 8.2
CVE-2025-54605 HIGH
Bitcoin Core < 30.0 - Uncontrolled Resource Consumption
CVSS 7.5
CVE-2025-54604 HIGH
Bitcoin Core < 30.0 - Uncontrolled Resource Consumption
CVSS 7.5
CVE-2025-61155 MEDIUM
GameDriverX64.sys <7.23.4.7 - Privilege Escalation
CVSS 5.5
CVE-2025-60349 HIGH
Prevx 3.0.5.220 - Denial of Service via IOCTL Code 0x22E044
CVSS 7.5
CVE-2025-62260 HIGH
Liferay Portal 7.4.0-7.4.3.99 & DXP 2023.Q3.1-2023.Q3.4, 7.4 GA-92, 7.3 GA-35 - DoS via Headless API
CVSS 7.5
CVE-2025-12194 MEDIUM
Bouncy Castle for Java FIPS 2.1.0-2.1.1 & LTS 2.73.0-2.73.7 - Resource Consumption in Native Crypto Engines
CVE-2025-60419 MEDIUM
NDIS Usermode IO <6.0.5600.16348 - DoS
CVSS 6.2
CVE-2025-62706 MEDIUM
Authlib < 1.6.5 - Denial of Service via Unbounded DEFLATE Decompression in JWE zip=DEF
CVSS 6.5
CVE-2025-62478 MEDIUM
Oracle ZFS Storage Appliance Kit 8.8 - Denial of Service in Object Store
CVSS 4.9
CVE-2025-62477 MEDIUM
Oracle ZFS Storage Appliance Kit 8.8 - Denial of Service in Remote Replication
CVSS 4.9
CVE-2025-62476 MEDIUM
Oracle ZFS Storage Appliance Kit 8.8 - Denial of Service in Remote Replication
CVSS 4.9
CVE-2025-62475 MEDIUM
Oracle ZFS Storage Appliance Kit 8.8 - Denial of Service via HTTP
CVSS 4.9
CVE-2025-53068 MEDIUM
Oracle Solaris 11 - Denial of Service via Kernel Resource Consumption
CVSS 6.5
CVE-2025-53067 MEDIUM
MySQL Server 9.0.0-9.4.0 - Authenticated Denial of Service in Server Optimizer
CVSS 4.9
CVE-2025-53062 MEDIUM
MySQL Server 8.0.0-8.0.43, 8.4.0-8.4.6, 9.0.0-9.4.0 - Denial of Service in InnoDB
CVSS 4.9
CVE-2025-53054 MEDIUM
MySQL Server 8.0.0-8.0.43, 8.4.0-8.4.6, 9.0.0-9.4.0 - Uncontrolled Resource Consumption in InnoDB
CVSS 5.5
CVE-2025-53053 MEDIUM
MySQL Server 8.0.0-8.0.43, 8.4.0-8.4.6, 9.0.0-9.4.0 - DoS and Data Manipulation via DML
CVSS 5.5
CVE-2025-53050 HIGH
Oracle PeopleSoft Enterprise PeopleTools 8.60-8.62 - Unauthenticated Denial of Service in Performance Monitor
CVSS 7.5
Details
Vulnerabilities 3,102
Exploit Likelihood High