CWE-400

High likelihood

Uncontrolled Resource Consumption

Parent: CWE-664 - Improper Control of a Resource Through its Lifetime

The product does not properly control the allocation and maintenance of a limited resource.

3,102 vulnerabilities with CWE-400
CVE-2025-55972 HIGH
TCL 65C655 Firmware - Unauthenticated Denial of Service via UPnP SetAVTransportURI Flood
CVSS 7.5
CVE-2025-61600 HIGH
Stalwart <0.13.3 - Memory Corruption
CVSS 7.5
CVE-2025-61595 HIGH
MANTRA-Chain mantrachain < 4.0.2 - Uncontrolled Resource Consumption via Send Hook Gas Limit Bypass
CVE-2025-20370 MEDIUM
Splunk <10.0.1, 9.4.4, 9.3.6, 9.2.8 - DoS
CVSS 4.9
CVE-2025-56572 HIGH
finance.js 4.1.0 - Denial of Service via seekZero() Parameter
CVSS 7.5
CVE-2025-11149 HIGH
node-static - Denial of Service via Null Byte Handling
CVSS 7.5
CVE-2025-56234 HIGH
AT_NA2000 - Denial of Service via TCP RST Packet Sequence Number Spoofing
CVSS 7.5
CVE-2025-56233 HIGH
Openindiana kernel SunOS 5.11 - DoS
CVSS 7.5
CVE-2025-57446 HIGH
O-RAN Near Realtime RIC ric-plt-submgr - DoS
CVSS 7.5
CVE-2025-55560 HIGH
PyTorch < 2.7.0 - Denial of Service via Inductor Compilation of Sparse/Dense Tensor Operations
CVSS 7.5
CVE-2025-55559 HIGH
TensorFlow 2.18.0 - Denial of Service via Conv2D Layer Padding
CVSS 7.5
CVE-2025-55558 HIGH
PyTorch < 2.7.0 - Denial of Service via Buffer Overflow in Inductor-Compiled Models
CVSS 7.5
CVE-2025-59830 HIGH
Rack < 2.2.18 - Denial of Service via Query Parameter Separator Bypass
CVSS 7.5
CVE-2025-55551 HIGH
PyTorch < 2.8.0 - Denial of Service via torch.linalg.lu Slice Operation
CVSS 7.5
CVE-2025-57317 HIGH
apidoc-core < 0.15.0 - Prototype Pollution via PreProcess Function
CVSS 7.5
CVE-2025-48392 HIGH
Apache IoTDB <2.0.4 - Info Disclosure
CVSS 7.5
CVE-2025-6921 HIGH
huggingface/transformers < 4.53.0 - Regular Expression Denial of Service in AdamWeightDecay Optimizer
CVSS 7.5
CVE-2025-57440 HIGH
Blackmagic ATEM Mini Pro - Unauthenticated RCE
CVSS 7.5
CVE-2025-4444 LOW
Tor < 0.4.7.16 and 0.4.8.0-0.4.8.17 - Uncontrolled Resource Consumption in Onion Service Descriptor Handler
CVSS 3.7
CVE-2025-58767 MEDIUM
REXML 3.3.3-3.4.1 - Denial of Service via Multiple XML Declarations
CVSS 5.3
CVE-2025-35432 MEDIUM
CISA Thorium - Unauthenticated Denial of Service via Unlimited Verification Email Requests
CVSS 5.3
CVE-2025-56264 HIGH
zhyd oneblog 2.3.9 - Denial of Service via /api/comment Endpoint
CVSS 7.5
CVE-2025-43295 MEDIUM
iPadOS < 18.7 - Denial of Service
CVSS 5.5
CVE-2025-43796 HIGH
Liferay Portal 7.4.0-7.4.3.101 and DXP 2023.Q3.0-2023.Q3.4 - Uncontrolled Resource Consumption via GraphQL Queries
CVSS 7.5
CVE-2025-59139 MEDIUM
Hono < 4.9.7 - Denial of Service via Body Size Limit Bypass
CVSS 5.3
Details
Vulnerabilities 3,102
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits