CWE-770

High likelihood

Allocation of Resources Without Limits or Throttling

Parent: CWE-400 - Uncontrolled Resource Consumption

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

1,867 vulnerabilities with CWE-770
CVE-2024-50955 HIGH
XINJE XD5E-24R/XL5E-16T <3.5.3b - DoS
CVSS 7.5
CVE-2024-43083 MEDIUM
Android - Denial of Service via WifiConfigurationUtil Resource Exhaustion
CVSS 5.5
CVE-2024-48989 HIGH
Bosch Rexroth IndraDrive FWA-INDRV*-MP* >=17VRS <20V36 - Denial of Service via PROFINET UDP Messages
CVSS 7.5
CVE-2024-21994 MEDIUM
StorageGRID < 11.9.0 - Authenticated Denial of Service
CVSS 4.3
CVE-2024-51428 HIGH
Espressif ESP-IDF 5.3.0 - Denial of Service via Crafted Data Channel Packet
CVSS 7.5
CVE-2024-38286 HIGH
Apache Tomcat <11.0.0-M21 - Allocation of Resources Without Limits ...
CVSS 8.6
CVE-2024-48809 HIGH
sdran-in-a-box 1.4.3 and onos-a1t 0.2.3 - Denial of Service via DeleteWatcher Function
CVSS 7.5
CVE-2024-51557 MEDIUM
63moons Wave 2.0 < 1.1.7 - Authenticated OTP Flooding via Missing Rate Limiting
CVSS 6.5
CVE-2024-10599 MEDIUM
Tongda OA 2017-11.7 - Denial of Service in Package Static Resources Processing
CVSS 5.3
CVE-2024-31152 MEDIUM
LevelOne WBR-6012 Firmware R0.40e6 - Denial of Service via Crafted HTTP Requests
CVSS 5.3
CVE-2024-7807 HIGH
gaizhenbiao/chuanhuchatgpt 20240628 - Denial of Service via Multipart Boundary Processing
CVSS 7.5
CVE-2024-10468 MEDIUM
Firefox < 132.0 - Memory Corruption via IndexedDB Race Condition
CVSS 5.3
CVE-2024-47401 MEDIUM
Mattermost <9.10.2, 9.11.1, 9.5.9 - Info Disclosure
CVSS 4.3
CVE-2024-38821 CRITICAL
Spring WebFlux - Authorization Bypass via Static Resource Handling
CVSS 9.1
CVE-2024-49767 HIGH
Werkzeug <3.0.6 - DoS
CVSS 7.5
CVE-2024-6826 MEDIUM
GitLab 11.2-17.3.5 17.4.0-17.4.2 17.5.0 - Denial of Service via Malicious XML Manifest Import
CVSS 6.5
CVE-2024-20526 MEDIUM
Cisco Adaptive Security Appliance Software - Unauthenticated Denial of Service via SSH Message Handling
CVSS 5.3
CVE-2024-31880 MEDIUM
IBM Db2 10.5.0.0-10.5.10 and 11.5-11.5.8 - Authenticated Denial of Service via Crafted SQL Statement
CVSS 5.3
CVE-2024-45526 MEDIUM
OPC Foundation UA-.NETStandard <1.5.374.78 - DoS
CVSS 5.3
CVE-2024-50311 MEDIUM
OpenShift Container Platform - Denial of Service via GraphQL Batch Query Aliases
CVSS 6.5
CVE-2024-45797 HIGH
libhtp < 0.5.49 - Denial of Service via Unbounded HTTP Header Processing
CVSS 7.5
CVE-2024-41128 MEDIUM
Rubygems Actionpack < 6.1.7.9 - Resource Allocation Without Limits
CVE-2024-47874 HIGH
Starlette < 0.40.0 - Denial of Service via Unbounded Multipart Form Data Handling
CVE-2024-8184 MEDIUM
Eclipse Jetty 9.3.12-9.4.55 and 12.0.0-12.0.8 - Unauthenticated Denial of Service via ThreadLimitHandler
CVSS 5.9
CVE-2024-6762 LOW
Eclipse Jetty 10.0.0-10.0.17 - Unauthenticated Denial of Service via PushSessionCacheFilter
CVSS 3.1
Details
Vulnerabilities 1,867
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits