CWE-400

3,094 vulnerabilities with CWE-400

CVE-2026-42400 MEDIUM

Uncontrolled Resource Consumption in Kibana Leading to Denial of Service

CVSS 6.5

CVE-2026-42399 MEDIUM

Uncontrolled Resource Consumption in Kibana Leading to Denial of Service

CVSS 6.5

CVE-2026-35277 HIGH

Oracle REST Data Services 24.2.0-26.1.0 - Authenticated Unauthorized Data Access and Modification via HTTPS

CVSS 8.1

CVE-2026-35266 HIGH

Oracle Rest Data Services < 26.1.0 - Denial of Service

CVSS 7.9

CVE-2026-33464 MEDIUM

Uncontrolled Resource Consumption in Kibana Leading to Denial of Service

CVSS 6.5

CVE-2026-44796 MEDIUM

Nautobot: Object bulk rename UI actions vulnerable to denial of service by crafted regular expression (REDoS)

CVSS 6.5

CVE-2026-48525 MEDIUM

PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS

CVSS 5.3

CVE-2026-48155 MEDIUM

pypdf: Possible large memory usage for large offsets for layout mode text

CVSS 5.5

CVE-2026-44247 MEDIUM

Volcano: Webhook server vulnerable to OOM due to unbounded HTTP request body size

CVSS 6.8

CVE-2026-45047 HIGH

bird-lg-go: Fatal Out-of-Memory (OOM) Denial of Service via Unbounded JSON Decoding

CVSS 7.5

CVE-2026-7528 HIGH

Unauthenticated File Upload Vulnerability Allows Disk Space Exhaustion and Path Disclosure in Langflow OSS

CVSS 7.1

CVE-2026-6052 MEDIUM

IBM® Db2® is vulnerable to running out of memory when executing certain queries with MDC tables

CVSS 6.5

CVE-2026-6051 MEDIUM

IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a small statement heap

CVSS 5.5

CVE-2026-4410 MEDIUM

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service

CVSS 4.8

CVE-2026-7493 MEDIUM

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.11.5 - Unauthenticated Denial of Service

CVSS 5.3

CVE-2026-48593 MEDIUM

Unbounded range expansion in cron describe causes memory exhaustion in oban_web

CVE-2026-8856 HIGH

IBM HTTP Server is affected by multiple vulnerabilities

CVSS 7.7

CVE-2026-9496 HIGH

Pacote - Inefficient Regular Expression Complexity

CVSS 7.5

CVE-2026-47077 HIGH

Unbounded body accumulation in HTTP/3 response loop in hackney

CVSS 7.5

CVE-2026-47073 HIGH

Unbounded memory consumption in WebSocket client in hackney

CVSS 7.5

CVE-2026-47071 HIGH

SOCKS5 TLS upgrade ignores caller timeout in hackney

CVSS 7.5

CVE-2026-42626 MEDIUM

HP ENVY 5000 VERBASPP1N003.2237A.00 - Unauthenticated Denial of Service via Persistent TCP Connection to Port 9100

CVSS 5.9

CVE-2026-25680 MEDIUM

Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html

CVSS 6.5

CVE-2026-5755 MEDIUM

Mattermost - Denial of Service via Crafted TIFF File Upload

CVSS 6.5

CVE-2026-5308 MEDIUM

Missing request body size limits on Zoom plugin HTTP endpoints

CVSS 4.9