CWE-400
High likelihoodUncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
3,141 vulnerabilities with CWE-400
CVE-2023-1605
HIGH
radare2 < 5.8.6 - Denial of Service
CVSS 7.5
CVE-2023-24862
MEDIUM
Windows Secure Channel - Denial of Service via Out-of-bounds Read
CVSS 5.5
CVE-2023-23411
MEDIUM
Windows 10 1507-22H2 and Windows 11 21H2-22H2 - Denial of Service via Hyper-V
CVSS 6.5
CVE-2023-23396
MEDIUM
Microsoft Office Online Server - Denial of Service via Excel File Processing
CVSS 6.5
CVE-2023-27270
MEDIUM
SAP NetWeaver Application Server - DoS
CVSS 6.5
CVE-2023-25618
MEDIUM
SAP NetWeaver Application Server ABAP - Authenticated Denial of Service via Error Handling Class
CVSS 6.5
CVE-2023-27530
HIGH
Rack <2.0.9.3 - Denial of Service via Multipart MIME Parsing
CVSS 7.5
CVE-2023-1072
MEDIUM
GitLab 9.0-15.7.7, 15.8-15.8.3, 15.9-15.9.1 - Uncontrolled Resource Consumption via Commit Details Request
CVSS 4.3
CVE-2023-27484
MEDIUM
crossplane 1.9.0-1.9.1 - Uncontrolled Resource Consumption via High Index in Composition Patch
CVSS 6.2
CVE-2023-27483
MEDIUM
crossplane-runtime 0.17.0-0.19.1 - Uncontrolled Resource Consumption via Paved.SetValue Method
CVSS 5.9
CVE-2023-26601
HIGH
ManageEngine Asset Explorer < 6.9 - Denial of Service
CVSS 7.5
CVE-2023-27567
HIGH
OpenBSD 7.2 - Denial of Service via TCP Packet with Destination Port 0
CVSS 7.5
CVE-2023-26470
MEDIUM
XWiki < 14.0 - Uncontrolled Resource Consumption via Large Object Addition
CVSS 5.7
CVE-2023-20014
HIGH
Cisco Nexus Dashboard Software - DoS
CVSS 7.5
CVE-2023-23689
MEDIUM
Dell PowerScale A200/A2000/H400/H500/H600/H5600/F800/F810 - DoS via Resource Consumption
CVSS 5.3
CVE-2023-23524
HIGH
iPadOS < 16.3.1 - Denial of Service via Maliciously Crafted Certificate
CVSS 7.5
CVE-2023-26104
HIGH
lite-web-server - Denial of Service via Malformed URI Control Characters
CVSS 7.5
CVE-2023-25816
MEDIUM
Nextcloud Server 25.0.0-25.0.3 - Uncontrolled Resource Consumption via Long Password Validation
CVSS 4.3
CVE-2023-23296
MEDIUM
Korenix JetWave Series - Denial of Service via /goform/formDefault
CVSS 6.5
CVE-2023-23009
MEDIUM
Libreswan 4.9 - Denial of Service via Crafted TS Payload
CVSS 6.5
CVE-2023-0662
HIGH
PHP 8.0.0-8.0.27 - Denial of Service via HTTP Form Upload
CVSS 7.5
CVE-2023-24580
HIGH
Django 3.2-3.2.18 - Denial of Service via Multipart Request Parser
CVSS 7.5
CVE-2023-0518
MEDIUM
GitLab 14.0-15.6.6, 15.7-15.7.5, 15.8 - Denial of Service via Malicious Helm Chart Upload
CVSS 4.3
CVE-2023-23631
MEDIUM
go-unixfsnode < 1.5.2 - Denial of Service via Malformed HAMT Directory Handling
CVSS 5.9
CVE-2023-23625
MEDIUM
go-unixfs < 0.4.3 - Denial of Service via Malformed HAMT Directory
CVSS 5.9
Details
Vulnerabilities
3,141
Exploit Likelihood
High