CWE-400

A denial of service vulnerability exists in the cgiserver.cgi session creation functionality of reolink RLC-410W v3.0.0.

XStream is an open source java library to serialize objects to XML and back again. Versions prior to 1.4.19 may allow a

A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service on ports 80 (HTTP

Tensorflow is an Open Source Machine Learning Framework. The `GraphDef` format in TensorFlow does not allow self recursi

A flaw was found in StarWind iSCSI target. An attacker could script standard iSCSI Initiator operation(s) to exhaust the

SAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) - versions KERNEL 7.22, 8.04, 7.49, 7.53,

client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golan

An security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One, Trend Micro Apex One as a

A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping a huge section filled w

A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas pri

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote att

regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations t

.NET and Visual Studio Denial of Service Vulnerability

Istio is an open platform to connect, manage, and secure microservices. In affected versions the Istio control plane, is

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expressio

org.cyberneko.html is an html parser written in Java. The fork of `org.cyberneko.html` used by Nokogiri (Rubygem) raises

A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (Al

A specially crafted packet sent to the Fernhill SCADA Server Version 3.77 and earlier may cause an exception, causing th

An issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it is possible to download files that are not

http-swagger is an open source wrapper to automatically generate RESTful API documentation with Swagger 2.0. In versions

Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ bypassing security policy un

On F5 BIG-IP 15.1.x versions prior to 15.1.0.2, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, when the stream profile is configured on a virtual server, undisclosed r

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78

Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abu

OPC UA Legacy Java Stack 2022-04-01 allows a remote attacker to cause a server to stop processing messages by sending cr

libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's c

Play Framework is a web framework for Java and Scala. A denial of service vulnerability has been discovered in verions 2

MinIO is a multi-cloud object storage solution. Starting with version RELEASE.2019-09-25T18-25-51Z and ending with versi

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the

Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 secompressors accumulate decompressed data i

Argo Events is an event-driven workflow automation framework for Kubernetes. Prior to version 1.7.1, several `HandleRout

OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to cause a server to crash via a large number of messages t

OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted r

The Security Team noticed that the termination condition of the for loop in the readExternal method is a controllable va

The simplepush server iterates through the application installations and pushes a notification to the server provided by

quic-go through 0.27.0 allows remote attackers to cause a denial of service (CPU consumption) via a Slowloris variant in

moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of mo

In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker

In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized atta

Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264.

An issue was discovered in H96 Smart TV Box H96 Pro Plus allows attackers to corrupt files via calls to the saveDeepColo

A regular expression used in Apache MXNet (incubating) is vulnerable to a potential denial-of-service by excessive resou

An attacker could use specially crafted invalid Modbus frames to crash the Ovarro TBox system.

Juniper is a GraphQL server library for Rust. Affected versions of Juniper are vulnerable to uncontrolled recursion resu

Rust-WebSocket is a WebSocket (RFC6455) library written in Rust. In versions prior to 0.26.5 untrusted websocket connect

v8n is a javascript validation library. Versions of v8n prior to 1.5.1 were found to have an inefficient regular express