CWE-400

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte

The issue was addressed with improved checks. This issue is fixed in iOS 17.2 and iPadOS 17.2. An attacker in a privileg

A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead t

mailcow is a dockerized email package, with multiple containers linked in one bridged network. The application is vulner

In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: netjet: Fix crash in nj_probe: 'nj_se

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported versi

IBM QRadar WinCollect Agent 10.0 through 10.1.2 could allow a privileged user to cause a denial of service. IBM X-Force

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a

GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape

In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a deni

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as problematic. Affected

Discourse is a platform for community discussion. For fields that are client editable, limits on sizes are not imposed.

Mattermost fails to check if a custom emoji reaction exists when sending it to a post and to limit the amount of custom

Envoy is a high-performance edge/middle/service proxy. The regex expression is compiled for every request and can result

An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service (outage of reader

Mattermost fails to properly validate the length of the emoji value in the custom user status, allowing an attacker to s

Mattermost versions 8.1.x before 8.1.9, 9.2.x before 9.2.5, 9.3.0, and 9.4.x before 9.4.2 fail to limit the number of ro

Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to limit th

Mattermost Server versions 9.5.x before 9.5.2, 9.4.x before 9.4.4, 9.3.x before 9.3.3, 8.1.x before 8.1.11 don't limit t

The Mojolicious module before 9.11 for Perl has a bug in format detection that can potentially be exploited for denial o

An issue was discovered in OpenDDS commit b1c534032bb62ad4ae32609778de6b8d6c823a66, allows a local attacker to cause a d

A flaw was found in Bombastic, which allows authenticated users to upload compressed (bzip2 or zstd) SBOMs. The API endp

Mattermost versions 8.1.x before 8.1.12, 9.6.x before 9.6.1, 9.5.x before 9.5.3, 9.4.x before 9.4.5 fail to limit the nu

An infinite loop in the retrieveActiveBody function of Soot before v4.4.1 under Java 8 allows attackers to cause a Denia

Rubygems.org is the Ruby community's gem hosting service. A Gem publisher can cause a Remote DoS when publishing a Gem.

An invalid pointer in the modbus_receive() function of libmodbus v3.1.6 allows attackers to cause a Denial of Service (D

A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuou

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.1 has some DoS vulnerabilities when it parses an XML that ha

A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions starting with 15.9 before

Mattermost Plugin Channel Export versions <=1.0.0 fail to restrict concurrent runs of the /export command which allows a

discourse-calendar is a discourse plugin which adds the ability to create a dynamic calendar in the first post of a topi

PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component (*Column).GetDecimal. This allows atta

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader c

Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated user to conduct a de

Dell PowerScale OneFS Versions 9.5.0.x through 9.8.0.x contain an uncontrolled resource consumption vulnerability. A low

An Uncontrolled Resource Consumption vulnerability has been found on Sandsprite Scdbg.exe, affecting version 1.0. This v

A flaw was found within the handling of SMB2_READ commands in the kernel ksmbd module. The issue results from not releas

Cloudflare quiche was discovered to be vulnerable to unbounded storage of information related to connection ID retiremen

octo-sts is a GitHub App that acts like a Security Token Service (STS) for the Github API. This vulnerability can spike

Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block

A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pa

Resource Exhaustion in Mattermost Server versions 8.1.x before 8.1.10 fails to limit the size of the payload that can be

Mattermost Mobile app versions 2.13.0 and earlier use a regular expression with polynomial complexity to parse certain d

Mattermost versions 8.1.x <= 8.1.10, 9.6.x <= 9.6.0, 9.5.x <= 9.5.2 and 8.1.x <= 8.1.11 fail to limit the size of a requ

The Premium Addons for Elementor plugin for WordPress is vulnerable to Regular Expression Denial of Service (ReDoS) in a

A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 c

Mattermost versions 9.11.x <= 9.11.0 and 9.5.x <= 9.5.8 fail to validate that the message of the permalink post is a str