CWE-400

mintplex-labs/anything-llm is affected by an uncontrolled resource consumption vulnerability in its upload file endpoint

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5

A logic issue was addressed with improved file handling. This issue is fixed in visionOS 1.2. Processing web content may

SAP NetWeaver and ABAP platform allows an attacker to impede performance for legitimate users by crashing or flooding th

Excessive platform resource consumption within a loop issue exists in Cybozu Garoon 5.0.0 to 5.15.2. If this vulnerabili

Multiple Denial of Service (DoS) conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0

Directus is a real-time API and App dashboard for managing SQL database content. A denial of service (DoS) attack by fie

Windows Line Printer Daemon Service Denial of Service Vulnerability

An Uncontrolled Resource Consumption vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Network

A flaw was found in OpenJPEG. A resource exhaustion can occur in the opj_t1_decode_cblks function in tcd.c through a cra

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a

An issue in the Certificate Authenticated Session Establishment (CASE) protocol for establishing secure sessions between

An issue was discovered in Kibana where a user with Viewer role could cause a Kibana instance to crash by sending a larg

A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions starting with 12.6 before

Multiple Denial of Service (DoS) conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0

An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change f

A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions prior to 17.1.6, 17.2 prior t

Rustix is a set of safe Rust bindings to POSIX-ish APIs. When using `rustix::fs::Dir` using the `linux_raw` backend, it'

In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.107, 9.1.2

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: X Plugin). Supported versions that are af

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a

Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulner

An incomplete fix for ose-olm-catalogd-container was issued for the Rapid Reset Vulnerability (CVE-2023-39325/CVE-2023-4

Trend Micro ID Security, version 3.0 and below contains a vulnerability that could allow an attacker to send an unlimite

quic-go is an implementation of the QUIC protocol (RFC 9000, RFC 9001, RFC 9002) in Go. An attacker can cause its peer t

Uncontrolled resource consumption vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. A

In the Linux kernel, the following vulnerability has been resolved: scsi: megaraid_sas: Fix resource leak in case of pr

A vulnerability was found in the ilab model serve component, where improper handling of the best_of parameter in the vll

In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service

NVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may caus

An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF

Cloudflare Quiche (through version 0.19.1/0.20.0) was affected by an unlimited resource allocation vulnerability causing

Dell Storage Resource Manager, 4.9.0.0 and below, contain(s) a Session Fixation Vulnerability in SRM Windows Host Agent.

There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized u

Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond with an unexp

Vulnerability in the Oracle Database Portable Clusterware component of Oracle Database Server. Supported versions that

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devic

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devic

Autel EVO NANO drone flight control firmware version 1.6.5 is vulnerable to denial of service (DoS).

Envoy is a cloud-native, open source edge and service proxy. Envoy exposed an out-of-memory (OOM) vector from the mirror

Minder is an open source Software Supply Chain Security Platform. Minder's Git provider is vulnerable to a denial of ser

Nextcloud Server is a self hosted personal cloud system. Due to a pre-flighted HEAD request, the link reference provider

Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds re

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_smacro function in

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the yasm_section_bcs_first fun

An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use syst

An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. I

Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4_UrlAtom::AP4_UrlAtom() function.

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image file