CWE-400

Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource cons

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource cons

Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, when PROXY protocol v1 support i

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser

An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via the nni_qos_db_set function in

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 93

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 9265bdd, there is an HTTP/2 state am

IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused

Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.9

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote

Uncontrolled Resource Consumption vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: fro

Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the Mailpit SMTP server has a Server.M

The Tenda TX9 V22.03.02.20 firmware has a denial of service vulnerability in the update_dev_name function of the file /g

Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2

Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2

Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp

Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491,

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final up to

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final throug

Netty is a network application framework for development of protocol servers and clients. Prior to 4.2.16.Final, Netty's

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/C++). Supported versions that are a

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar

Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). Supported versions that are aff

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported vers

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final throug

fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with

brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the

Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply nested s

It is possible to bypass the maximum number of normalized policy alternatives that was introduced in Apache Neethi 3.2.2

Although remote policy references are not retrieved during policy normalization, if they are manually retrieved via the

React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint could be accessed via unauth

An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI fu

Addressing certain issues, in particular related to operations which may take excessively long and therefore would need

PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 t

PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 t

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 a

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior accept a BMP image and generates a PDF-compatible PN

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service (DoS) attack v

Apache Traffic Server can be crashed or driven to resource exhaustion by abusive HTTP/2 framing and flow-control. This

Apache Traffic Server drops the per-stream buffer cap when dechunking HTTP/2 or HTTP/3 responses, letting a slow client

OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/inte

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 a