CWE-400
High likelihoodUncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
3,128 vulnerabilities with CWE-400
CVE-2024-44227
HIGH
iPadOS < 18.0 - Denial of Service via Memory Corruption
CVSS 7.5
CVE-2024-44192
MEDIUM
Safari < 18.0 - Denial of Service via Malicious Web Content
CVSS 5.5
CVE-2024-53693
HIGH
QNAP QTS and QuTS hero - CRLF Injection
CVSS 7.1
CVE-2024-53458
HIGH
Sysax Multi Server 6.99 - Denial of Service via SSH Packet Processing
CVSS 7.5
CVE-2024-34036
MEDIUM
O-RAN Near Realtime RIC I-Release - DoS
CVSS 4.3
CVE-2024-34035
MEDIUM
O-RAN Near Realtime RIC H-Release - DoS
CVSS 5.7
CVE-2024-57782
MEDIUM
Docker-proxy v18.09.0 - Denial of Service
CVSS 6.8
CVE-2024-56940
HIGH
LearnDash 6.7.1 - Denial of Service via Profile Image Upload
CVSS 7.5
CVE-2024-46923
HIGH
Samsung Exynos 2200 1480 and 2400 Firmware - Denial of Service via Missing Null Check in Xclipse Driver
CVSS 7.5
CVE-2024-23814
MEDIUM
Siemens SIMATIC and SIDOOR Devices - Unauthenticated Denial of Service via ICMP Fragment Reassembly
CVSS 5.3
CVE-2024-54658
MEDIUM
Safari < 17.4 - Denial of Service via Memory Handling Issue
CVSS 6.5
CVE-2024-57673
MEDIUM
floodlight v1.2 - Denial of Service via Topology Manager and Linkdiscovery Modules
CVSS 5.5
CVE-2024-57672
MEDIUM
floodlight v1.2 - Denial of Service via Topology Manager Module
CVSS 5.5
CVE-2024-45626
MEDIUM
Apache James Server < 3.7.6 and 3.8.0-3.8.2 - Denial of Service via JMAP HTML to Text Conversion
CVSS 6.5
CVE-2024-57085
HIGH
@stryker-mutator/util < 8.7.1 - Denial of Service via Prototype Pollution in deepMerge
CVSS 7.5
CVE-2024-57082
MEDIUM
@rpldy/uploader < 1.9.1 - Denial of Service via Prototype Pollution
CVSS 6.5
CVE-2024-57081
HIGH
underscore-contrib 0.3.0 - Denial of Service via Prototype Pollution in lib.fromQuery
CVSS 7.5
CVE-2024-57079
HIGH
@zag-js/core < 0.82.2 - Denial of Service via Prototype Pollution in deepMerge
CVSS 7.5
CVE-2024-57076
HIGH
ajax-request 1.2.3 - Denial of Service via Prototype Pollution in lib.post Function
CVSS 7.5
CVE-2024-57075
HIGH
eazy-logger < 4.1.0 - Denial of Service via Prototype Pollution
CVSS 7.5
CVE-2024-57074
HIGH
xe-utils 3.5.31 - Denial of Service via Prototype Pollution in lib.merge
CVSS 7.5
CVE-2024-53851
MEDIUM
Discourse < 3.3.3 and < 3.4.0 - Authenticated Denial of Service via Inline Onebox URL Endpoint
CVSS 4.3
CVE-2024-56921
HIGH
open5gs - Denial of Service via gmm_state_exception() Error Handling
CVSS 7.5
CVE-2024-57519
HIGH
open5gs 2.7.2 - Denial of Service via ogs_dbi_auth_info Function
CVSS 7.5
CVE-2024-12345
MEDIUM
INW Krbyyyzo 25.2002 - Resource Consumption via /gbo.aspx s Parameter
CVSS 4.4
Details
Vulnerabilities
3,128
Exploit Likelihood
High