CWE-770

A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a m

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Possible d

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Stage File Proxy allows Flooding.This issue

Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacke

If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g. through server-side request forgery

An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit

In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Ser

An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As

The Authorino service in the Red Hat Connectivity Link is the authorization service for zero trust API security. Authori

There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specify

quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overfl

In the Linux kernel, the following vulnerability has been resolved: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE

IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, m

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3. Parsing a

The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequ

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Ratelimit warning logs to prevent VM

In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Fix KASAN hit by not flaggin

Denial of service due to allocation of resources without limits. The following products are affected: Acronis Cyber Prot

In the Linux kernel, the following vulnerability has been resolved: sound/virtio: Fix cancel_sync warnings on uninitial

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash.  This issue affects

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the

BunnyPad is a note taking software. Prior to version 11.0.27000.0915, opening files greater than or equal to 20MB causes

In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority. In some cases the check of

An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing pe

A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files w

Interactive service agent in OpenVPN version 2.5.0 through 2.6.16 and 2.7_alpha1 through 2.7_rc2 on Windows allows a loc

An issue in HCL Technologies Limited HCLTech GRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code vi

In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion.

In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to lo

Next.js is a React framework for building full-stack web applications. Starting in version 13.0.0 and prior to versions

An allocation of resources without limits or throttling [CWE-770] vulnerability in FortiOS versions 7.6.0, versions 7.4.

Matrix Media Repo (MMR) is a highly configurable multi-homeserver media repository for Matrix. MMR before version 1.3.5

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. A denial of service vulnerabi

An Allocation of Resources Without Limits or Throttling vulnerability in Cesanta Frozen versions less than 1.7 allows an

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0 allows attackers to se

Mastodon is a self-hosted, federated microblogging platform. Starting in version 4.2.0 and prior to versions 4.2.16 and

Directus is a real-time API and App dashboard for managing SQL database content. The `@directus/storage-driver-s3` packa

Directus is a real-time API and App dashboard for managing SQL database content. The `@directus/storage-driver-s3` packa

Allocation of resources without limits or throttling issue exists in HMI ViewJet C-more series and HMI GC-A2 series, whi

Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.0, contains an uncontrolled resource consumption vulnerability. A

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 un

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 coul

An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.strip

A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protoco

Schule is open-source school management system software. Prior to version 1.0.1, the file forgot_password.php (or equiva

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could

Rack is a modular Ruby web server interface. Starting in version 3.1.0 and prior to version 3.1.16, there is a denial of

Impact Cloudflare quiche was discovered to be vulnerable to incorrect congestion window growth, which could cause it to

Starlette is a lightweight ASGI (Asynchronous Server Gateway Interface) framework/toolkit, designed for building async w