The vulnerability of the h2 library in the Rust programming language, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2026-75632

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...

EUVD-2026-84770

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...

CVE-2026-75632

The CAI Content Credentials software is affected by an Uncontrolled Resource Consumption vulnerability (CWE-400). An attacker can exploit this flaw to exhaust system resources, leading to an application denial-of-service (DoS) condition. The vulnerability is exploitable over the network without r...

CVE-2026-65115

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may lead to denial of service...

CVE-2026-65112

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-65112

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service...

EUVD-2026-84419

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may lead to denial of service...

CVE-2026-78844

요약 javadelight delight-nashorn-sandbox 0.5.5는 통제되지 않은 리소스 소비Uncontrolled Resource Consumption 취약점이 존재합니다. 이 샌드박스는 JavaScript 루프에 정적으로 인터럽트 검사를 주입하여 maxCPUTime 제한을 적용하지만, 동적 코드 평가를 비활성화하지 못합니다. 공격자는 이러한 함수를 사용하여 정적 새니타이저를 우회하는 무한 루프를 실행할 수 있습니다. 취약점 유형: 통제되지 않은 리소스 소비, 보호 메커니즘 실패 제품...

IBM DB2 DoS (7286983) (Unix)

According to its self-reported version number, IBM Db2 is affected by a denial of service vulnerability: - IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a remote authenticated attacker to cause a denial of service due ...

CVE-2026-93587: Uncontrolled Resource Consumption

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy bypass in the PCD and, per the upstream advisory, CUBE and HALD coder: when a specific command line option is supplied, the decoder does not check a configured resource limit, which can result in extra memory allocation. A local...

Security Bulletin: Eclipse parsson security vulnerability in IBM Content Cortex reported for BAI-EVENTS-JAVA-SDK

Summary Eclipse parsson CVE-2026-9563 security vulnerability in IBM Content Cortex. Affected and vulnerable. Vulnerability Details CVEID:CVE-2026-9563 DESCRIPTION: In Eclipse Parsson published Maven Central artifacts before version 1.1.8, the JSON parser did not enforce a default maximum on the...

BIT-MONGODB-2026-82075 Uncontrolled Resource Consumption in MongoDB Sharded Cluster Router Allows Unauthenticated Denial of Service

An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process. A client that has network access to a router port and has not authenticated can supply connection-monitoring parameters that cause the server to expend CPU resources...

BIT-MONGODB-2026-82054 Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Service

A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size,...

CVE-2026-31899

CVE-2026-31899: Экспоненциальный DoS через рекурсивную амплификацию элементов в CairoSVG Ключевые слова: CVE-2026-31899, CairoSVG, экспоненциальный DoS, SVG-бомба, рекурсивный элемент use, отказ в обслуживании, XML-амплификация, уязвимость Python SVG, CWE-400, неконтролируемое потребление ресурсо...

POC_CVE-2024-12537

CVE-2024-12537 Лаборатория DoS-уязвимости Code Format в Open WebUI Этот репозиторий содержит локальную изолированную лабораторию для воспроизведения уязвимости и кандидат шаблона nuclei для CVE-2024-12537 — неаутентифицированной уязвимости типа «отказ в обслуживании» в конечной точке форматирован...

CVE-2026-68523: Uncontrolled Resource Consumption

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into one fragment per page with no upper bound. This is fixed in...

CVE-2026-36958

CVE-2026-36958: 동시 HTTP 요청을 통한 서비스 거부Denial of Service CVE ID: CVE-2026-36958 날짜: 2026-04-29 발견자: Kirubel Solomne 공급업체: U-SPEED 제품: U-SPEED 라우터 펌웨어 버전: V1.0.0 CWE: CWE-400 - 통제되지 않은 리소스 소비 설명 U-SPEED 라우터 펌웨어 V1.0.0은 서비스 거부Denial of Service 취약점에 노출되어 있습니다. 공격자는 웹 관리 인터페이스의 임의 또는 존재하지 않는 엔드포인트에 대량의...

The vulnerability of the Rsync file transfer and synchronization utility, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Rsync file transfer and synchronization utility is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in pyasn1

Summary IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in pyasn1 Vulnerability Details CVEID:CVE-2026-59884 DESCRIPTION: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating...