CWE-400

3,371 vulnerabilities with CWE-400

CVE-2026-28342 HIGH

olivetin < 3000.10.2 - Unauthenticated Denial of Service via PasswordHash Endpoint

CVSS 7.5

CVE-2026-26999 HIGH

Traefik < 2.11.38 - Unauthenticated Denial of Service via TLS Handshake Stall

CVSS 7.5

CVE-2026-1605 HIGH

Eclipse Jetty 12.0.0-12.0.31/12.1.0-12.0.5 - Memory Corruption

CVSS 7.5

CVE-2026-28435 HIGH

cpp-httplib < 0.35.0 - Uncontrolled Resource Consumption via Decompressed Request Body Bypass

CVSS 7.5

CVE-2026-20066 MEDIUM

Cisco Snort 3 Detection Engine - Unauthenticated Denial of Service via JSTokenizer JavaScript Normalization

CVSS 5.8

CVE-2026-23809 MEDIUM

ArubaOS 6.5.4.0-8.10.0.21, AOS-10 & AOS-8 8.13.0.0-10.8.0.0 - Resource Consumption via Port-Stealing

CVSS 5.4

CVE-2026-26673 HIGH

DJI Mavic Mini/Spark/Air <0.1.00.0500 - DoS

CVSS 7.5

CVE-2026-25673 HIGH

Django 6.0-6.0.2/5.2-5.2.11/4.2-4.2.28 - DoS

CVSS 7.5

CVE-2026-28412 MEDIUM

Textream < 1.5.1 - Unauthenticated Denial of Service via WebSocket Connection Flood

CVSS 6.5

CVE-2026-28351 MEDIUM

pypdf < 6.7.4 - Uncontrolled Resource Consumption via RunLengthDecode Filter

CVSS 5.3

CVE-2026-21619 HIGH

hex_core < 0.12.1, hex < 2.3.2, rebar3 < 3.27.0 - Resource Consumption & Untrusted Data Deserialization

CVSS 7.5

CVE-2026-3293 LOW

snowflakedb snowflake-jdbc <=4.0.1 - DoS

CVSS 3.3

CVE-2026-26937 MEDIUM

Kibana 8.0.0-8.19.11 - Denial of Service via Timelion Input Data Manipulation

CVSS 6.5

CVE-2026-27888 HIGH

pypdf < 6.7.3 - Denial of Service via XFA Property with FlateDecode Compression

CVSS 7.5

CVE-2026-27633 HIGH

TinyWeb < 2.02 - Unauthenticated Denial of Service via Large Content-Length Header

CVSS 7.5

CVE-2026-27630 HIGH

TinyWeb < 2.02 - Unauthenticated Denial of Service via Slowloris Attack

CVSS 7.5

CVE-2026-27204 MEDIUM

Wasmtime <24.0.6/36.0.6/40.0.4/41.0.4/42.0.0 - DoS

CVSS 6.5

CVE-2026-26066 MEDIUM

ImageMagick <7.1.2-15/6.9.13-40 - DoS

CVSS 6.2

CVE-2026-24485 HIGH

ImageMagick <7.1.2-15/6.9.13-40 - DoS

CVSS 7.5

CVE-2026-24484 MEDIUM

ImageMagick <7.1.2-15/6.9.13-40 - DoS

CVSS 5.3

CVE-2026-27576 MEDIUM

OpenClaw < 2026.2.17 - Uncontrolled Resource Consumption via Large Prompt Payloads

CVSS 4.0

CVE-2026-26047 MEDIUM

Moodle 4.5.0-4.5.8 and 5.1.0-beta-5.1.1 - Authenticated Denial of Service via TeX Formula Rendering

CVSS 6.5

CVE-2026-25535 HIGH

jsPDF < 4.2.0 - Denial of Service via GIF Image Header Parsing

CVSS 7.5

CVE-2026-20139 MEDIUM

Splunk Enterprise <10.2.0 - DoS

CVSS 4.3

CVE-2026-23596 MEDIUM

Aruba Networking Private 5G Core 1.24.3.0-1.24.3.2 - Unauthenticated Denial of Service via Management API

CVSS 6.5