CWE-400

A vulnerability was found in Brondahl EnumStringValues up to 4.0.0. It has been declared as problematic. This vulnerabil

Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG image

Mattermost version 7.1.x and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded w

TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideo

Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.11, 24.0.7, and 25.0.0, there is no pas

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in con

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arb

A redirect vulnerability in the `fastify-static` module version >= 4.2.4 and < 4.4.1 allows remote attackers to redirect

ZIV Automation 4CCT-EA6-334126BF firmware version 3.23.80.27.36371, allows an unauthenticated, remote attacker to cause

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to

A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defens

A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Thre

Uncontrolled resource consumption in the Intel(R) HAXM software before version 7.6.6 may allow an unauthenticated user t

The webinstaller is a Golang web server executable that enables the generation of an Auvesy image agent. Resource consum

A denial of service vulnerability in GitLab CE/EE affecting all versions since 11.8 allows an attacker to create a recur

A vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to cause uncontrolled resour

Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a Denial of Service vulnerability on NAS

Engine.IO before 4.0.0 allows attackers to cause a denial of service (resource consumption) via a POST request to the lo

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC (Modular Port Concentrator) where Integrat

IBM MQ Internet Pass-Thru 2.1 and 9.2 could allow a remote user to cause a denial of service by sending malformed MQ dat

A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password

The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-serv

blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. All servers running blaze-core

Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services. Http4s before versions 0.21.17,

httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.19.0, a malicious server which

IBM Spectrum Protect Plus 10.1.0 through 10.1.7 could allow a remote user to inject arbitrary data iwhich could cause th

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a mal

The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of ser

On BIG-IP APM version 16.0.x before 16.0.1.1, under certain conditions, when processing VPN traffic with APM, TMM consum

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory a

This affects the package three before 0.125.0. This can happen when handling rgb or hsl colors. PoC: var three = require

A ReDoS (regular expression denial of service) flaw was found in the @progfay/scrapbox-parser package before 6.0.3 for N

Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status i

A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an

UniFi Protect before v1.17.1 allows an attacker to use spoofed cameras to perform a denial-of-service attack that may ca

The vulnerabilities can be exploited to cause the web visualization component of the PLC to stop and not respond, leadin

Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connecti

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when al

Tor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU resources on a target, aka T

Schema-Inspector is an open-source tool to sanitize and validate JS objects (npm package schema-inspector). In before ve

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnera

A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in

A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly m

In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon re

CXF supports (via JwtRequestCodeFilter) passing OAuth 2 parameters via a JWT token as opposed to query parameters (see:

Sydent is a reference Matrix identity server. Sydent does not limit the size of requests it receives from HTTP clients.

OMICRON StationGuard before 1.10 allows remote attackers to cause a denial of service (connectivity outage) via crafted

On Juniper Networks SRX Series devices with link aggregation (lag) configured, executing any operation that fetches Aggr

A vulnerability in Juniper Networks Junos OS ACX500 Series, ACX4000 Series, may allow an attacker to cause a Denial of S

Unsafe validation RegEx in EmailValidator class in com.vaadin:vaadin-server versions 7.0.0 through 7.7.21 (Vaadin 7.0.0