CWE-400
High likelihoodUncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
3,102 vulnerabilities with CWE-400
CVE-2025-6075
MEDIUM
os.path.expandvars - Info Disclosure
CVSS 5.5
CVE-2025-64388
CRITICAL
Circutor TCPRS1plus - Denial of Service via Specific Web Server Requests
CVE-2025-30188
HIGH
OX App Suite < 2.1.7 - Denial of Service via Cache Flooding
CVSS 7.5
CVE-2025-8849
HIGH
LibreChat 0.7.9 - Denial of Service via Unbounded Parameters in /api/memories Endpoint
CVSS 7.5
CVE-2025-6176
HIGH
Scrapy < 2.13.4 - Denial of Service via Brotli Decompression Bomb
CVSS 7.5
CVE-2025-5342
MEDIUM
ManageEngine Exchange Reporter Plus <= 5721 - Denial of Service via Search Module ReDOS
CVSS 4.3
CVE-2025-10932
HIGH
Progress MOVEit Transfer - Uncontrolled Resource Consumption
CVSS 8.2
CVE-2025-54605
HIGH
Bitcoin Core < 30.0 - Uncontrolled Resource Consumption
CVSS 7.5
CVE-2025-54604
HIGH
Bitcoin Core < 30.0 - Uncontrolled Resource Consumption
CVSS 7.5
CVE-2025-61155
MEDIUM
GameDriverX64.sys <7.23.4.7 - Privilege Escalation
CVSS 5.5
CVE-2025-60349
HIGH
Prevx 3.0.5.220 - Denial of Service via IOCTL Code 0x22E044
CVSS 7.5
CVE-2025-62260
HIGH
Liferay Portal 7.4.0-7.4.3.99 & DXP 2023.Q3.1-2023.Q3.4, 7.4 GA-92, 7.3 GA-35 - DoS via Headless API
CVSS 7.5
CVE-2025-12194
MEDIUM
Bouncy Castle for Java FIPS 2.1.0-2.1.1 & LTS 2.73.0-2.73.7 - Resource Consumption in Native Crypto Engines
CVE-2025-60419
MEDIUM
NDIS Usermode IO <6.0.5600.16348 - DoS
CVSS 6.2
CVE-2025-62706
MEDIUM
Authlib < 1.6.5 - Denial of Service via Unbounded DEFLATE Decompression in JWE zip=DEF
CVSS 6.5
CVE-2025-62478
MEDIUM
Oracle ZFS Storage Appliance Kit 8.8 - Denial of Service in Object Store
CVSS 4.9
CVE-2025-62477
MEDIUM
Oracle ZFS Storage Appliance Kit 8.8 - Denial of Service in Remote Replication
CVSS 4.9
CVE-2025-62476
MEDIUM
Oracle ZFS Storage Appliance Kit 8.8 - Denial of Service in Remote Replication
CVSS 4.9
CVE-2025-62475
MEDIUM
Oracle ZFS Storage Appliance Kit 8.8 - Denial of Service via HTTP
CVSS 4.9
CVE-2025-53068
MEDIUM
Oracle Solaris 11 - Denial of Service via Kernel Resource Consumption
CVSS 6.5
CVE-2025-53067
MEDIUM
MySQL Server 9.0.0-9.4.0 - Authenticated Denial of Service in Server Optimizer
CVSS 4.9
CVE-2025-53062
MEDIUM
MySQL Server 8.0.0-8.0.43, 8.4.0-8.4.6, 9.0.0-9.4.0 - Denial of Service in InnoDB
CVSS 4.9
CVE-2025-53054
MEDIUM
MySQL Server 8.0.0-8.0.43, 8.4.0-8.4.6, 9.0.0-9.4.0 - Uncontrolled Resource Consumption in InnoDB
CVSS 5.5
CVE-2025-53053
MEDIUM
MySQL Server 8.0.0-8.0.43, 8.4.0-8.4.6, 9.0.0-9.4.0 - DoS and Data Manipulation via DML
CVSS 5.5
CVE-2025-53050
HIGH
Oracle PeopleSoft Enterprise PeopleTools 8.60-8.62 - Unauthenticated Denial of Service in Performance Monitor
CVSS 7.5
Details
Vulnerabilities
3,102
Exploit Likelihood
High