CWE-400
High likelihoodUncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
3,152 vulnerabilities with CWE-400
CVE-2020-20221
MEDIUM
Mikrotik RouterOS < 6.44.6 - Authenticated Denial of Service via /nova/bin/cerm Process
CVSS 6.5
CVE-2020-20248
MEDIUM
Mikrotik RouterOs - Authenticated Denial of Service via Memtest Process
CVSS 6.5
CVE-2020-20230
MEDIUM
Mikrotik RouterOS < 6.47 - Authenticated Denial of Service via SSH Resource Consumption
CVSS 6.5
CVE-2020-20217
MEDIUM
MikroTik RouterOS < 6.47 - Authenticated Denial of Service via /nova/bin/route Process
CVSS 6.5
CVE-2020-8299
MEDIUM
Citrix ADC <13.0-76.29,12.1-61.18,11.1-65.20 - DoS
CVSS 6.5
CVE-2020-12296
MEDIUM
Intel Thunderbolt Firmware - Authenticated Denial of Service via Uncontrolled Resource Consumption
CVSS 5.5
CVE-2020-12291
MEDIUM
Intel Thunderbolt Controllers - Authenticated Denial of Service via Uncontrolled Resource Consumption
CVSS 5.5
CVE-2020-1750
MEDIUM
Machine-Config-Operator <4.4.3 - DoS
CVSS 6.5
CVE-2020-28469
MEDIUM
glob-parent < 5.1.2 - Uncontrolled Resource Consumption
CVSS 5.3
CVE-2020-35510
MEDIUM
jboss-remoting < 5.0.20 - Denial of Service via EJB Client ACK Message Omission
CVSS 5.9
CVE-2020-14340
MEDIUM
XNIO 3.6.0.Beta1-3.8.1.Final - Denial of Service via File Descriptor Leak
CVSS 5.9
CVE-2020-14326
HIGH
Redhat Integration Camel K < 4.5.6 - Denial of Service
CVSS 7.5
CVE-2020-1702
LOW
Containers-image <5.2.0 - Memory Corruption
CVSS 3.3
CVE-2020-25673
MEDIUM
Linux Kernel < 5.3.18 - Denial of Service via Non-Blocking Socket in llcp_sock_connect
CVSS 5.5
CVE-2020-36332
HIGH
libwebp < 1.0.1 - Denial of Service via Excessive Memory Allocation
CVSS 7.5
CVE-2020-25242
HIGH
SIMATIC NET CP 343-1 Advanced, Lean, and Standard - Denial of Service via Crafted TCP Port 102 Packets
CVSS 7.5
CVE-2020-28944
HIGH
OX Guard < 2.10.4 - Denial of Service via WKS Server Response
CVSS 7.5
CVE-2020-36320
HIGH
Vaadin 7.0.0-7.7.21 - Uncontrolled Resource Consumption via EmailValidator RegEx
CVSS 7.5
CVE-2020-27827
HIGH
Lldpd < 1.0.8 - Denial of Service
CVSS 7.5
CVE-2020-35233
MEDIUM
NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 - Denial of Service via Concurrent TFTP Connections
CVSS 6.5
CVE-2020-27223
MEDIUM
Eclipse Jetty 9.4.6-9.4.36, 10.0.0, 11.0.0 - Denial of Service via Multiple Accept Headers with Quality Parameters
CVSS 5.2
CVE-2020-24686
HIGH
ABB AC500 V2 - Denial of Service in Web Visualization Component
CVSS 7.5
CVE-2020-27782
HIGH
Redhat Jboss Fuse < 2.1.5 - Denial of Service
CVSS 7.5
CVE-2020-11270
HIGH
Qualcomm AQT1000 Firmware - Denial of Service via FTM Parameter IE
CVSS 7.5
CVE-2020-28496
HIGH
three < 0.125.0 - Uncontrolled Resource Consumption via RGB/HSL Color Parsing
CVSS 7.5
Details
Vulnerabilities
3,152
Exploit Likelihood
High