CWE-770

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 16.9.7, starting from 16

When BIG-IP AFM is provisioned with IPS module enabled and protocol inspection profile is configured on a virtual server

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause communications to st

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which comp

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Denial of Service (DoS

OpenTelemetry dotnet is a dotnet telemetry framework. A vulnerability in OpenTelemetry.Api package 1.10.0 to 1.11.1 coul

A vulnerability in the Internet Key Exchange version 2 (IKEv2) function of Cisco IOS XR Software could allow an unauthen

Expr is an expression language and expression evaluation for Go. Prior to version 1.17.0, if the Expr expression parser

jsPDF is a library to generate PDFs in JavaScript. Prior to 3.0.1, user control of the first argument of the addImage me

Realchar version v0.0.4 is vulnerable to an unauthenticated denial of service (DoS) attack. The vulnerability exists in

A vulnerability in haotian-liu/llava v1.2.0 allows an attacker to cause a Denial of Service (DoS) by appending a large n

An unauthenticated Denial of Service (DoS) vulnerability was identified in ChuanhuChatGPT version 20240918, which could

A vulnerability in szad670401/hyperlpr v3.0 allows for a Denial of Service (DoS) attack. The server fails to handle exce

A vulnerability in binary-husky/gpt_academic version 3.83 allows an attacker to cause a Denial of Service (DoS) by addin

automatic1111/stable-diffusion-webui version 1.10.0 contains a vulnerability where the server fails to handle excessive

In danny-avila/librechat version git 0c2a583, there is an improper input validation vulnerability. The application uses

A vulnerability in aimhubio/aim version 3.25.0 allows for a denial of service (DoS) attack. The issue arises when a larg

A vulnerability in the `/3/ImportFiles` endpoint of h2oai/h2o-3 version 3.46.1 allows an attacker to cause a denial of s

In version 0.3.8 of open-webui, an endpoint for converting markdown to HTML is exposed without authentication. A malicio

A vulnerability in imartinez/privategpt version 0.5.0 allows for a Denial of Service (DOS) attack. When uploading a file

A vulnerability in danswer-ai/danswer v0.3.94 allows an attacker to cause a Denial of Service (DoS) by uploading a file

A vulnerability in the file upload process of gradio-app/gradio version @gradio/[email protected] allows for a Denial of Serv

A Denial of Service (DoS) vulnerability exists in berriai/litellm version v1.44.5. This vulnerability can be exploited b

BentoML version v1.3.4post1 is vulnerable to a Denial of Service (DoS) attack. The vulnerability can be exploited by app

A Denial of Service (DoS) vulnerability in the file upload feature of stangirard/quivr v0.0.298 allows unauthenticated a

SuperAGI version v0.0.14 is vulnerable to an unauthenticated Denial of Service (DoS) attack. The vulnerability exists in

A vulnerability in danswer-ai/danswer version 0.9.0 allows for denial of service through memory exhaustion. The issue ar

In version 3.25.0 of aimhubio/aim, the tracking server is vulnerable to a denial of service attack. The server overrides

A vulnerability in ollama/ollama <=0.3.14 allows a malicious user to create a customized GGUF model file, upload it to t

A vulnerability in parisneo/lollms-webui v13 arises from the server's handling of multipart boundaries in file uploads.

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup t

apollo-compiler is a query-based compiler for the GraphQL query language. Prior to 1.27.0, a vulnerability in Apollo Com

Apollo Gateway provides utilities for combining multiple GraphQL microservices into a single GraphQL endpoint. Prior to

Apollo Gateway provides utilities for combining multiple GraphQL microservices into a single GraphQL endpoint. Prior to

The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph th

The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph th

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service ove

The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph th

Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An un

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.5.2 and p

When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase i

Rack is a modular Ruby web server interface. Prior to versions 2.2.14, 3.0.16, and 3.1.14, `Rack::QueryParser` parses qu

IBM 4769 Developers Toolkit 7.0.0 through 7.5.52 could allow a remote attacker to cause a denial of service in the Hardw

Uncontrolled resource consumption in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over

Tornado is a Python web framework and asynchronous networking library. When Tornado's ``multipart/form-data`` parser enc

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Events Log Track allows Excessive Allocatio

An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 befor

An unauthenticated remote attacker may use an uncontrolled resource consumption in the IEC 61131 program of the affected

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a r

CoreDNS is a DNS server that chains plugins. In versions prior to 1.12.2, a Denial of Service (DoS) vulnerability exists