CWE-400
High likelihoodUncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
3,152 vulnerabilities with CWE-400
CVE-2020-3487
MEDIUM
Cisco IOS XE - Unauthenticated Denial of Service via CAPWAP Packet Processing
CVSS 6.5
CVE-2020-3479
MEDIUM
Cisco IOS and IOS XE - Unauthenticated Denial of Service via Malformed EVPN BGP Update Messages
CVSS 6.1
CVE-2020-3428
MEDIUM
Cisco IOS XE Wireless Controller Software - DoS
CVSS 6.5
CVE-2020-3414
HIGH
Cisco IOS XE for 4461 ISR - Unauthenticated Denial of Service via IPv4/IPv6 Packet Processing
CVSS 8.6
CVE-2020-3409
HIGH
Cisco IOS Software/Cisco IOS XE Software - DoS
CVSS 7.4
CVE-2020-3408
HIGH
Cisco IOS and IOS XE - Unauthenticated Denial of Service via Split DNS Regex Timeout
CVSS 8.6
CVE-2020-3569
HIGH
KEV
Cisco IOS XR - Unauthenticated Denial of Service via IGMP Packet Handling
CVSS 8.6
CVE-2020-8251
HIGH
Node.js < 14.11.0 - Denial of Service via Delayed HTTP Request Submission
CVSS 7.5
CVE-2020-8246
HIGH
Citrix ADC & Gateway <13.0-64.35 - DoS
CVSS 7.5
CVE-2020-8237
HIGH
json-bigint < 1.0.0 - Denial of Service via Prototype Pollution
CVSS 7.5
CVE-2020-7733
HIGH
ua-parser-js < 0.7.22 - Regular Expression Denial of Service via Redmi and Mi Pad User-Agent Parsing
CVSS 7.5
CVE-2020-15166
HIGH
libzmq < 4.3.3 - Denial of Service via TCP Transport Endpoint
CVSS 7.5
CVE-2020-2039
MEDIUM
PAN-OS 8.1.0-8.1.15 - Unauthenticated Denial of Service via Management Web Interface File Upload
CVSS 5.3
CVE-2020-14384
HIGH
JBossWeb < 7.5.31.Final-redhat-3 - Denial of Service via Invalid WebSocket Payload Length
CVSS 7.5
CVE-2020-3566
HIGH
KEV
Cisco IOS XR - Unauthenticated Denial of Service via DVMRP IGMP Queue Exhaustion
CVSS 8.6
CVE-2020-3504
LOW
Cisco UCS Manager Software - Authenticated Denial of Service via Local Management CLI Command Parameters
CVSS 3.3
CVE-2020-3505
MEDIUM
Cisco Video Surveillance 8000 Series IP Cameras - Denial of Service via Cisco Discovery Protocol Memory Leak
CVSS 6.5
CVE-2020-14522
HIGH
Softing OPC < 4.47.0 - Denial of Service via Uncontrolled Resource Consumption
CVSS 7.5
CVE-2020-3976
MEDIUM
VMware ESXi and vCenter Server - Partial Denial of Service in Authentication Service
CVSS 5.3
CVE-2020-9703
MEDIUM
Adobe Acrobat and Reader DC < 2020.009.20074 - Denial of Service via Stack Exhaustion
CVSS 5.5
CVE-2020-9702
MEDIUM
Adobe Acrobat and Reader DC < 2020.009.20074 - Denial of Service via Stack Exhaustion
CVSS 5.5
CVE-2020-13281
MEDIUM
GitLab 8.9.0-13.0.11 - Denial of Service via Project Import Feature
CVSS 6.5
CVE-2020-13280
MEDIUM
GitLab <13.0.12-13.2.3 - Memory Corruption
CVSS 6.5
CVE-2020-8229
MEDIUM
Nextcloud Desktop Client 2.6.4 - Memory Corruption
CVSS 5.5
CVE-2020-15114
HIGH
etcd 3.3.0-3.3.22 and 3.4.0-rc.0-3.4.9 - Denial of Service via Gateway Endpoint Loop
CVSS 7.7
Details
Vulnerabilities
3,152
Exploit Likelihood
High