CWE-770

High likelihood

Allocation of Resources Without Limits or Throttling

Parent: CWE-400 - Uncontrolled Resource Consumption

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

1,867 vulnerabilities with CWE-770
CVE-2024-48843 HIGH
ABB ASPECT/NEXUS/MATRIX Firmware < 3.08.03 - Denial of Service
CVSS 7.7
CVE-2024-11316 HIGH
Fileszie Check <3.08.02 - Info Disclosure
CVSS 7.5
CVE-2024-48080 HIGH
aedes 0.51.2 - Denial of Service via Crafted Request
CVSS 7.5
CVE-2024-52805 HIGH
Synapse < 1.120.1 - Denial of Service via Multipart/Form-Data Request
CVSS 7.5
CVE-2024-37302 HIGH
Synapse < 1.106.0 - Unauthenticated Denial of Service via Remote Media Download
CVSS 7.5
CVE-2024-53981 HIGH
python-multipart < 0.0.18 - Denial of Service via Excessive Logging
CVSS 7.5
CVE-2024-31669 HIGH
rizin < 0.6.3 - Uncontrolled Resource Consumption in PE Import Parser
CVSS 7.5
CVE-2024-41761 MEDIUM
IBM Db2 10.5, 11.1, 11.5 - Denial of Service via Crafted Query
CVSS 5.3
CVE-2024-52804 HIGH
Tornado < 6.4.2 - Denial of Service via Malicious Cookie Header Parsing
CVSS 7.5
CVE-2024-52797 MEDIUM
Opencast 11.4-13.9 - Denial of Service via Elasticsearch Query Retry Loop
CVSS 6.5
CVE-2024-52581 HIGH
Litestar < 2.13.0 - Denial of Service via Multipart Form Parser
CVSS 7.5
CVE-2024-48530 HIGH
eSoft Planner 3.24.08271-USA - Denial of Service via Instructor Appointment Availability POST Request
CVSS 7.5
CVE-2024-52796 MEDIUM
Rubygems Pwpush < 1.49.0 - Resource Allocation Without Limits
CVSS 5.3
CVE-2024-21539 HIGH
@eslint/plugin-kit < 0.2.3 - Regular Expression Denial of Service via Improper Input Sanitization
CVSS 7.5
CVE-2024-50285 MEDIUM
Linux Kernel < 6.6.61 - Denial of Service via SMB Operation Memory Exhaustion
CVSS 5.5
CVE-2024-50271 MEDIUM
Linux Kernel 5.14-6.1.117, 6.2-6.6.61, 6.7-6.11.8 - Resource Exhaustion via Signal Delivery
CVSS 5.5
CVE-2024-52920 HIGH
Bitcoin Core < 0.20.0 - Denial of Service via Malformed GETDATA Message
CVSS 7.5
CVE-2024-52918 MEDIUM
Bitcoin Core < 0.20.0 - Denial of Service via BIP21 r Parameter
CVSS 6.5
CVE-2024-52917 MEDIUM
Bitcoin Core < 22.0 - Denial of Service via UPnP M-SEARCH Reply Memory Allocation
CVSS 6.5
CVE-2024-52916 HIGH
Bitcoin Core < 0.15.0 - Denial of Service via Header Flood
CVSS 7.5
CVE-2024-52915 HIGH
Bitcoin Core < 0.20.0 - Denial of Service via Crafted INV Message
CVSS 7.5
CVE-2024-52914 HIGH
Bitcoin Core < 0.18.0 - Denial of Service via Orphan Transaction Processing
CVSS 7.5
CVE-2024-52913 MEDIUM
Bitcoin Core < 0.21.0 - Unconfirmed Transaction Suppression via Mishandled Re-requests
CVSS 5.3
CVE-2024-3760 HIGH
lunary < 1.2.8 - Email Bombing via Forgot Password Page
CVSS 7.5
CVE-2024-4311 MEDIUM
zenml < 0.57.0rc2 - Account Takeover via Unlimited Password Change Attempts
CVSS 5.4
Details
Vulnerabilities 1,867
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits