CWE-400

3,128 vulnerabilities with CWE-400

CVE-2025-29907 HIGH

jsPDF < 3.0.1 - Denial of Service via addImage Method

CVSS 7.5

CVE-2025-25293 HIGH

ruby-saml < 1.12.4 - Denial of Service via Compressed SAML Response Bypass

CVSS 7.5

CVE-2025-0114 HIGH

Palo Alto Networks PAN-OS >= 10.1.0 < 10.1.14 - Unauthenticated Denial of Service via GlobalProtect Packet Flood

CVSS 7.5

CVE-2025-27669 HIGH

Vasion Print < 20.0.1923 and Virtual Appliance < 22.0.843 - Remote Network Scanning and Denial of Service

CVSS 7.5

CVE-2025-27421 HIGH

Abacus < 1.4.0 - Denial of Service via SSE Connection Goroutine Leak

CVSS 7.5

CVE-2025-27100 MEDIUM

lakeFS < 1.50.0 - Authenticated Denial of Service via Memory Exhaustion

CVSS 6.5

CVE-2025-27097 HIGH

GraphQL Mesh - Use-After-Free in DocumentNode Cache

CVSS 7.5

CVE-2025-0426 MEDIUM

Kubernetes 1.32.0-1.32.1, 1.31.0-1.31.5, 1.30.0-1.30.9 - DoS via Container Checkpoint Requests

CVSS 6.2

CVE-2025-25205 HIGH

Audiobookshelf <2.19.1 - Auth Bypass

CVSS 8.2

CVE-2025-21352 MEDIUM

Windows 10 1507-24H2 and Windows Server 2008 - Denial of Service in Internet Connection Sharing

CVSS 6.5

CVE-2025-21351 HIGH

Windows Active Directory Domain Services API - Denial of Service

CVSS 7.5

CVE-2025-21181 HIGH

Microsoft Windows 10 1507-24H2 and Windows Server 2008 - Denial of Service in Message Queuing

CVSS 7.5

CVE-2025-25193 MEDIUM

Netty <= 4.1.118.Final - Denial of Service via Environment File Read

CVSS 5.5

CVE-2025-25186 MEDIUM

Net::IMAP 0.3.2-0.3.7, 0.4.0-0.4.18, 0.5.0-0.5.5 - Denial of Service via Memory Exhaustion in Response Parser

CVSS 6.5

CVE-2025-21087 HIGH

F5 BIG-IP 15.1.0-15.1.9 - Uncontrolled Resource Consumption via SSL Profile or DNSSEC Operations

CVSS 7.5

CVE-2025-20058 HIGH

F5 BIG-IP 15.1.0-15.1.10 - Uncontrolled Resource Consumption via Message Routing Profile

CVSS 7.5

CVE-2025-24151 MEDIUM

macOS < 13.7.3, < 14.7.3, < 15.3 - Denial of Service via Memory Corruption

CVSS 5.5

CVE-2025-24126 HIGH

iPadOS < 18.3 - Uncontrolled Resource Consumption

CVSS 7.3

CVE-2025-0704 MEDIUM

JoeyBling bootplus <247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d - DoS

CVSS 5.3

CVE-2025-21549 HIGH

Oracle WebLogic Server 14.1.1.0.0 - Unauthenticated Denial of Service via HTTP/2

CVSS 7.5

CVE-2025-21548 MEDIUM

Oracle MySQL Connector/Python < 9.1.0 - Denial of Service via Uncontrolled Resource Consumption

CVSS 6.4

CVE-2025-21547 CRITICAL

Oracle Hospitality OPERA 5 5.6.19.20, 5.6.25.8, 5.6.26.6, 5.6.27.1 - Unauthenticated Denial of Service via Opera Servlet

CVSS 9.1

CVE-2025-21545 HIGH

Oracle PeopleSoft Enterprise PeopleTools 8.60 and 8.61 - Unauthenticated Denial of Service via OpenSearch

CVSS 7.5

CVE-2025-21529 MEDIUM

MySQL Server < 8.0.40, 8.4.3, 9.1.0 - Authenticated Denial of Service in Information Schema

CVSS 4.9

CVE-2025-23184 MEDIUM

Apache CXF < 3.5.10, 3.6.5, 4.0.6 - Denial of Service via Unclosed CachedOutputStream

CVSS 5.9