CWE-770

High likelihood

Allocation of Resources Without Limits or Throttling

Parent: CWE-400 - Uncontrolled Resource Consumption

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

1,859 vulnerabilities with CWE-770
CVE-2025-8014 HIGH
GitLab 11.10-18.2.6, 18.3-18.3.2, 18.4-18.4.0 - Unauthenticated Denial of Service via GraphQL Query Complexity Bypass
CVSS 7.5
CVE-2025-11042 MEDIUM
GitLab 17.2-18.2.6, 18.3-18.3.2, 18.4 - Denial of Service via GraphQL Query
CVSS 4.3
CVE-2025-10867 LOW
GitLab 18.1-18.2.6, 18.3-18.3.2, 18.4-18.4.0 - Authenticated Denial of Service via GraphQL API
CVSS 3.5
CVE-2025-10858 HIGH
GitLab < 18.2.7, 18.3 < 18.3.3, 18.4 < 18.4.1 - Unauthenticated Denial of Service via Large JSON File Upload
CVSS 7.5
CVE-2025-59830 HIGH
Rack < 2.2.18 - Denial of Service via Query Parameter Separator Bypass
CVSS 7.5
CVE-2025-59418 MEDIUM
BunnyPad <11.0.27000.0915 - Buffer Overflow
CVSS 5.5
CVE-2025-59421 LOW
frappe/press - Unauthenticated Resource Exhaustion via Repeated Invite Requests
CVE-2025-8396 MEDIUM
Temporal Server < 1.26.3, 1.27.0-1.27.2, 1.28.0 - Denial of Service via Authorization Header Bounds Check
CVE-2025-59375 HIGH
libexpat < 2.7.2 - Denial of Service via Large Dynamic Memory Allocation
CVSS 7.5
CVE-2025-36035 MEDIUM
IBM PowerVM Hypervisor FW950.00-FW950.E0, FW1050.00-FW1050.50, FW1060.00-FW1060.40 DoS
CVSS 6.7
CVE-2025-59139 MEDIUM
Hono < 4.9.7 - Denial of Service via Body Size Limit Bypass
CVSS 5.3
CVE-2025-7337 MEDIUM
GitLab 7.8-18.1.5, 18.2-18.2.5, 18.3-18.3.1 - Authenticated Denial of Service via Large File Upload
CVSS 6.5
CVE-2025-1250 MEDIUM
GitLab CE/EE <18.1.6-18.3.2 - Privilege Escalation
CVSS 6.5
CVE-2025-58754 HIGH
Axios <0.30.2, <1.12.0 - Buffer Overflow
CVSS 7.5
CVE-2025-48041 HIGH
Erlang/OTP 17.0-28.0.3, 27.3.4.3, 26.2.5.15 - Uncontrolled Resource Consumption in SSH SFTP Module
CVE-2025-48040 MEDIUM
Erlang OTP <28.0.3 - Uncontrolled Resource Consumption
CVE-2025-48039 MEDIUM
Erlang OTP <28.0.3 - Excessive Allocation
CVE-2025-48038 MEDIUM
Erlang OTP - Resource Leak Exposure
CVE-2025-59045 HIGH
Stalwart <0.13.3 - Memory Corruption
CVE-2025-58446 HIGH
xgrammar >=0.1.23 <0.1.24 - Denial of Service via Grammar Optimizer
CVSS 7.5
CVE-2025-52494 HIGH
Adacore Ada Web Server < 26.0 - Denial of Service via Malformed TLS ClientHello
CVSS 7.5
CVE-2025-9784 HIGH
Red Hat build of Apache Camel for Spring Boot - Denial of Service via MadeYouReset Attack
CVSS 7.5
CVE-2025-30261 MEDIUM
Qsync Central - Denial of Service via Resource Exhaustion
CVSS 6.5
CVE-2025-30260 MEDIUM
Qsync Central 4.5.0.3-4.5.0.6 - Authenticated Denial of Service via Resource Exhaustion
CVSS 6.5
CVE-2025-29900 MEDIUM
QNAP File Station 5.5.6.4691-5.5.6.4906 - Authenticated Denial of Service
CVSS 6.5
Details
Vulnerabilities 1,859
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits