CWE-400
High likelihoodUncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
3,147 vulnerabilities with CWE-400
CVE-2021-43859
HIGH
XStream <1.4.19 - DoS
CVSS 7.5
CVE-2021-46668
MEDIUM
MariaDB 10.2.0-10.2.42 - Denial of Service via Long SELECT DISTINCT Statements
CVSS 5.5
CVE-2021-40406
HIGH
Reolink RLC-410W <3.0.0.136_20121102 - DoS
CVSS 7.5
CVE-2021-23236
HIGH
Fresenius Kabi Agilia Link+ <3.0 - DoS
CVSS 7.5
CVE-2021-39942
MEDIUM
GitLab 12.0-14.3.5, 14.4-14.4.3, 14.5-14.5.1 - Denial of Service via NPM Package Repository File Size Limit Bypass
CVSS 4.3
CVE-2021-37865
MEDIUM
Mattermost < 6.2.0 - Authenticated Denial of Service via Crafted GIF File Upload
CVSS 4.3
CVE-2021-30301
HIGH
Snapdragon Auto/Snapdragon Industrial IOT/Snapdragon Mobile - DoS
CVSS 7.5
CVE-2021-46149
HIGH
MediaWiki < 1.35.5, 1.36.x < 1.36.3, 1.37.x < 1.37.1 - Denial of Service via Language Name Search
CVSS 7.5
CVE-2021-40011
HIGH
Huawei EMUI - Uncontrolled Resource Consumption in Display Module
CVSS 7.5
CVE-2021-24893
HIGH
Stars Rating < 3.5.1 - Denial of Service via Unvalidated Rating Submission
CVSS 7.5
CVE-2021-30348
MEDIUM
Qualcomm Firmware - Denial of Service via LLM Utility Timer Validation
CVSS 6.5
CVE-2021-44716
HIGH
GO < 1.16.12 - Denial of Service
CVSS 7.5
CVE-2021-3622
MEDIUM
hivex - Denial of Service via Recursive _get_children() Function Call
CVSS 4.3
CVE-2021-43854
HIGH
nltk < 3.6.5 - Regular Expression Denial of Service in PunktSentenceTokenizer
CVSS 7.5
CVE-2021-43843
MEDIUM
jsx-slack < 4.5.2 - Regular Expression Denial of Service via Blockquote Multibyte Character Handling
CVSS 5.3
CVE-2021-43838
MEDIUM
jsx-slack < 4.5.1 - Regular Expression Denial-of-Service via Blockquote Tag
CVSS 5.3
CVE-2021-39939
MEDIUM
GitLab Runner 13.7-14.3.5, 14.4-14.4.3, 14.5-14.5.1 - Uncontrolled Resource Consumption via Crafted Docker Image
CVSS 6.5
CVE-2021-39938
LOW
GitLab 8.15.0-14.3.5, 14.4.0-14.4.3, 14.5.0-14.5.1 - Denial of Service via Deploy Slash Command Regex
CVSS 3.1
CVE-2021-44228
CRITICAL
KEV
Log4Shell HTTP Header Injection
CVSS 10.0
CVE-2021-41014
HIGH
FortiWeb <= 6.4.1 and <= 6.3.15 - Unauthenticated Denial of Service via HTTP Packet Flood
CVSS 7.5
CVE-2021-37061
HIGH
HarmonyOS < 2.0 - Denial of Service via Screen Projection Application
CVSS 7.5
CVE-2021-44527
MEDIUM
UniFi Switch Firmware < 5.76.6 - Denial of Service via Uncontrolled Resource Consumption
CVSS 6.5
CVE-2021-22956
HIGH
Citrix ADC <13.0-83.27,<12.1-63.22,11.1-65.23 - DoS
CVSS 7.5
CVE-2021-22955
HIGH
Citrix ADC <13.0-83.27,<12.1-63.22,11.1-65.23 - DoS
CVSS 7.5
CVE-2021-44686
HIGH
calibre < 5.32.0 - Denial of Service via ReDoS in HTML Preprocessing
CVSS 7.5
Details
Vulnerabilities
3,147
Exploit Likelihood
High