CWE-400

YukiWiki 2.1.3 and earlier does not process a particular request properly that may allow consumption of large amounts of

Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is buil

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker

In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, the NFS server lacks a bounds check in the READDIRPLUS NFS r

A vulnerability has been identified in SIMATIC S7-1200 (All versions), SIMATIC S7-1500 (All Versions < V2.6). An attacke

The read_packet function in knc (Kerberised NetCat) before 1.11-1 is vulnerable to denial of service (memory exhaustion)

A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data. This behavior can lead to

A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circular

An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack. This affe

A vulnerability in the Cisco Discovery Protocol (CDP) module of Cisco IOS XE Software Releases 16.6.1 and 16.6.2 could a

A vulnerability in the 802.11r Fast Transition feature set of Cisco IOS Access Points (APs) Software could allow an unau

Multiple integer overflows in TrueCrypt 7.1a allow local users to (1) obtain sensitive information via vectors involving

Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an uncontroll

A vulnerability in the Bulk Administration Tool (BAT) for Cisco Unity Connection could allow an authenticated, remote at

A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat

A vulnerability in the Cisco Aironet Series Access Points (APs) software could allow an authenticated, adjacent attacker

An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading o

ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which al

A sustained sequence of different types of normal transit traffic can trigger a high CPU consumption denial of service c

In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote at

The Supervisor in Sandstorm doesn't set and enforce the resource limits of a process. This allows remote attackers to ca

In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion. This could lead to a remote t

An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-fpm master proce

An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (host OS CPU h

In libming 0.4.8, a memory exhaustion vulnerability was found in the function parseSWF_ACTIONRECORD in util/parser.c, wh

Cloud Foundry Garden-runC, versions prior to 1.13.0, does not correctly enforce disc quotas for Docker image layers. A r

A vulnerability in service logging for Cisco Prime Service Catalog could allow an authenticated, remote attacker to deny

uri-js is a module that tries to fully implement RFC 3986. One of these features is validating whether or not a supplied

In libming 0.4.8, there is an excessive memory allocation attempt in the readBytes function of the util/read.c file, rel

libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a

An issue was discovered in Xen through 4.11.x. ARM never properly implemented grant table v2, either in the hypervisor o

An issue was discovered in Xen through 4.11.x. The logic in oxenstored for handling writes depended on the order of eval

In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1

An issue was discovered in the HDF HDF5 1.10.2 library. Excessive stack consumption has been detected in the function H5

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory exhaustion vulnerability. An authenticated remote a

Technicolor TC7200.20 devices allow remote attackers to cause a denial of service (networking outage) via a flood of ran

Technicolor (formerly RCA) TC8305C devices allow remote attackers to cause a denial of service (networking outage) via a

RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5

Technicolor TG588V V2 devices allow remote attackers to cause a denial of service (networking outage) via a flood of ran

A flaw was found in the 389 Directory Server that allows users to cause a crash in the LDAP server using ldapsearch with

It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized whi

CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive func

On QFX5000 Series and EX4600 switches, a high rate of Ethernet pause frames or an ARP packet storm received on the manag

A vulnerability in the IP next-hop index database in Junos OS 17.3R3 may allow a flood of ARP requests, sent to the mana

The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_

A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY x

A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAM

In LibSass prior to 3.5.5, Sass::Eval::operator()(Sass::Binary_Expression*) inside eval.cpp allows attackers to cause a

In LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENT_AST_OPERATORS expansion allow attackers to cause a den