CWE-770

The parseSWF_ACTIONRECORD function in util/parser.c in libming through 0.4.8 allows remote attackers to have unspecified

The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a

A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. U

In Bluetooth, there is a possible remote code execution due to an improper memory allocation. This could lead to remote

An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, ver

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances (ES

A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a

A vulnerability in the processing of IP Service Level Agreement (SLA) packets by Cisco IOS Software and Cisco IOS XE sof

A vulnerability in the TCP ingress handler for the data interfaces that are configured with management access to Cisco F

A vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense (FTD) Software for the

A vulnerability in the interactions between the DHCP and TFTP features for Cisco Small Business 300 Series (Sx300) Manag

Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discover

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discover

A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file (a quine), causes a St

A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Small Business Sx200, S

An SRX Series Service Gateway configured for Unified Threat Management (UTM) may experience a system crash with the erro

A vulnerability in the UDP protocol implementation for Cisco IoT Field Network Director (IoT-FND) could allow an unauthe

Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a m

In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial o

There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where

In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client se

In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can

Keep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js 6.16.0 and earlier. No

Specific IPv6 DHCP packets received by the jdhcpd daemon will cause a memory resource consumption issue to occur on a Ju

ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers

Dell EMC Open Manage System Administrator (OMSA) versions prior to 9.3.0 contain an Improper Range Header Processing Vul

An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versi

Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fra

In FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-RELEASE-p6, a bug in the non-default RACK TCP stack c

A vulnerability in the FTP daemon on MikroTik routers through 6.44.3 could allow remote attackers to exhaust all availab

It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied i

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potential

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker op

Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker

Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of s

Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The a

An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may cause uncontrolled memory a

In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression

A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake

IBM Security Guardium Big Data Intelligence 4.0 (SonarG) does not properly restrict the size or amount of resources that

An issue was discovered in the protobuf crate before 2.6.0 for Rust. Attackers can exhaust all memory via Vec::reserve c

The web api server on Port 8080 of ASUS HG100 firmware up to 1.05.12, which is vulnerable to Slowloris HTTP Denial of Se

An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.2.1. Particular mathematical expressi

An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Under certain circumstances, CI pipel

Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.c

JetBrains PyCharm before 2019.2 was allocating a buffer of unknown size for one of the connection processes. In a very s

An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can eith

The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resulta

By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of al