CWE-400

3,134 vulnerabilities with CWE-400

CVE-2024-4183 MEDIUM

Mattermost 8.1.0-8.1.11, 9.6.0-rc1-9.6.0, 9.5.0-9.5.2, 9.4.0-9.4.4 - DoS via Session Table Flooding

CVSS 4.3

CVE-2024-22091 LOW

Mattermost <8.1.11, <9.5.2, <9.6.0 - DoS

CVSS 3.1

CVE-2024-33664 MEDIUM

python-jose < 3.3.0 - Denial of Service via JWE Token Decompression

CVSS 5.3

CVE-2024-3508 MEDIUM

Trusted Profile Analyzer - Authenticated Unrestricted Upload of Compressed SBOM Files

CVSS 4.3

CVE-2024-28717 MEDIUM

OpenStack Storlets < 13.0.0.0rc1 - Remote Code Execution via gateway.py

CVSS 4.9

CVE-2024-31994 MEDIUM

Mealie < 1.4.0 - Denial of Service via Image Request Resource Exhaustion

CVSS 6.5

CVE-2024-31992 MEDIUM

Mealie < 1.4.0 - Denial of Service via Uncontrolled Resource Consumption in safe_scrape_html

CVSS 6.5

CVE-2024-21062 MEDIUM

MySQL Server < 8.0.36 and 8.3.0 - Authenticated Denial of Service in Optimizer

CVSS 4.9

CVE-2024-21057 MEDIUM

MySQL Server < 8.0.35 - Authenticated Denial of Service in Optimizer

CVSS 4.9

CVE-2024-21055 MEDIUM

MySQL Server <= 8.0.35 - Authenticated Denial of Service in Optimizer

CVSS 4.9

CVE-2024-21051 MEDIUM

MySQL Server <= 8.0.34 - Authenticated Denial of Service in DML Component

CVSS 4.9

CVE-2024-21050 MEDIUM

MySQL Server <= 8.0.34 - Authenticated Denial of Service in DML Component

CVSS 4.9

CVE-2024-21013 MEDIUM

MySQL Server <= 8.0.36 and 8.3.0 - Authenticated Denial of Service in Optimizer

CVSS 4.4

CVE-2024-21008 MEDIUM

MySQL Server <= 8.0.36 and 8.3.0 - Authenticated Denial of Service in Optimizer

CVSS 4.4

CVE-2024-3872 LOW

Mattermost Mobile < 2.13.0 - Unauthenticated Denial of Service via Malicious Deeplink

CVSS 3.1

CVE-2024-1569 HIGH

lollms-webui - Unauthenticated Denial of Service via /open_code_in_vs_code Endpoint

CVSS 7.5

CVE-2024-0157 MEDIUM

Dell Storage Resource Manager <4.9.0.0 - Privilege Escalation

CVSS 5.9

CVE-2024-30915 MEDIUM

OpenDDS - Denial of Service and Information Disclosure via DataReaderQoS max_samples Parameter

CVSS 4.3

CVE-2024-3569 HIGH

AnythingLLM < 1.0.0 - Denial of Service via Crafted Authorization Header

CVSS 7.5

CVE-2024-26215 HIGH

Microsoft Windows Server 2008 < 10.0.14393.6897 - Denial of Service

CVSS 7.5

CVE-2024-26212 HIGH

Microsoft Windows Server 2008 < 10.0.14393.6897 - Denial of Service

CVSS 7.5

CVE-2024-28949 MEDIUM

Mattermost Server 8.1.0-8.1.10, 9.3.0-9.3.2, 9.4.0-9.4.3, 9.5.0-9.5.1 - Denial of Service via Unlimited User Preferences

CVSS 4.3

CVE-2024-31209 MEDIUM

oidcc 3.0.0-3.0.1, 3.1.0-3.1.1, 3.2.0-beta.1-3.2.0-beta.2 - Denial of Service via Atom Exhaustion

CVSS 5.3

CVE-2024-26723 HIGH

Linux Kernel 6.1-6.1.78, 6.2-6.6.17, 6.7-6.7.5 - DoS via NULL Pointer Dereference in LAN966x

CVSS 7.8

CVE-2024-29893 MEDIUM

Argo CD 2.4.0-2.8.13 - Denial of Service via Malicious Helm Registry

CVSS 6.5