CWE-770

High likelihood

Allocation of Resources Without Limits or Throttling

Parent: CWE-400 - Uncontrolled Resource Consumption

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

1,858 vulnerabilities with CWE-770
CVE-2026-26130 HIGH
Microsoft.AspNetCore.App.Runtime 8.0.0-8.0.24 - Unauthenticated Denial of Service
CVSS 7.5
CVE-2026-30827 HIGH
express-rate-limit 8.0.0-8.0.1 - DoS
CVSS 7.5
CVE-2026-29795 MEDIUM
stellar-xdr <25.0.1 - Memory Corruption
CVSS 4.0
CVE-2026-26018 HIGH
CoreDNS < 1.14.2 - Denial of Service via Predictable PRNG in Loop Detection Plugin
CVSS 7.5
CVE-2026-29062 HIGH
jackson-core 3.0.0-3.1.0 - Denial of Service via UTF8DataInputJsonParser and ReaderBasedJsonParser
CVSS 7.5
CVE-2026-29612 MEDIUM
OpenClaw < 2026.2.14 - Denial of Service via Large Base64 Media File Decoding
CVSS 5.5
CVE-2026-29609 HIGH
OpenClaw < 2026.2.14 - Denial of Service via Unbounded URL-Backed Media Fetch
CVSS 7.5
CVE-2026-28478 HIGH
OpenClaw < 2026.2.13 - Unauthenticated Denial of Service via Webhook Request Body Buffering
CVSS 7.5
CVE-2026-28452 MEDIUM
OpenClaw < 2026.2.14 - Denial of Service via Unguarded Archive Extraction
CVSS 5.5
CVE-2026-28394 MEDIUM
OpenClaw < 2026.2.15 - Denial of Service via Unbounded Response Parsing in Web Fetch Tool
CVSS 6.5
CVE-2026-28342 HIGH
olivetin < 3000.10.2 - Unauthenticated Denial of Service via PasswordHash Endpoint
CVSS 7.5
CVE-2026-26998 MEDIUM
Traefik <2.11.38/3.6.9 - Memory Corruption
CVSS 4.4
CVE-2026-20103 HIGH
Cisco ASA & FTD Unauthenticated DoS via Remote Access SSL VPN
CVSS 8.6
CVE-2026-27932 HIGH
joserfc < 1.6.3 - Unauthenticated Denial of Service via PBES2 Count Parameter
CVSS 7.5
CVE-2026-27601 MEDIUM
Underscore.js < 1.13.8 - Denial of Service via Recursive Data Structure in _.flatten and _.isEqual
CVSS 5.9
CVE-2026-25673 HIGH
Django 6.0-6.0.2/5.2-5.2.11/4.2-4.2.28 - DoS
CVSS 7.5
CVE-2026-27887 MEDIUM
Spin < 3.6.1, SpinKube < 0.6.2, containerd-shim-spin < 0.22.1 - Denial of Service via Unbounded Response Buffering
CVE-2026-27633 HIGH
TinyWeb < 2.02 - Unauthenticated Denial of Service via Large Content-Length Header
CVSS 7.5
CVE-2026-27630 HIGH
TinyWeb < 2.02 - Unauthenticated Denial of Service via Slowloris Attack
CVSS 7.5
CVE-2026-2845 MEDIUM
GitLab 11.2-18.7.4, 18.8-18.8.4, 18.9-18.9.0 - Authenticated Denial of Service via Bitbucket Server Import Endpoint
CVSS 6.5
CVE-2026-1725 MEDIUM
GitLab 18.9 - Unauthenticated Denial of Service via CI Jobs API Endpoint
CVSS 5.3
CVE-2026-1662 HIGH
GitLab 14.4-18.7.4, 18.8-18.8.4, 18.9-18.9.0 - Unauthenticated Denial of Service via Jira Events Endpoint
CVSS 7.5
CVE-2026-3201 MEDIUM
Wireshark 4.6.0-4.6.3/4.4.0-4.4.13 - DoS
CVSS 4.7
CVE-2026-27695 MEDIUM
zae-limiter < 0.10.1 - Denial of Service via DynamoDB Partition Key Collision
CVSS 4.3
CVE-2026-27572 HIGH
Wasmtime <24.0.6/36.0.6/4.0.04/41.0.4/42.0.0 - DoS
CVSS 7.5
Details
Vulnerabilities 1,858
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits