Lucene search
+L

4038 matches found

Redos
Redos
•added 2026/05/05 12:00 a.m.•20 views

ROS-20260505-73-0024

A vulnerability in the os.path.expandvars function of the Python programming language interpreter is associated with uncontrolled resource consumption. Exploitation of the vulnerability allows an attacker to cause a denial of service...

5.5CVSS6.4AI score0.00149EPSS
SaveExploits0
Redos
Redos
•added 2026/05/05 12:00 a.m.•19 views

ROS-20260505-73-0034

A vulnerability in the Content-Length component of the Python interpreter is associated with uncontrolled resource consumption. Exploitation of the vulnerability allows an attacker acting remotely to cause a denial of service...

7.5CVSS7.3AI score0.01631EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/04 12:00 a.m.•3 views

CVE-2026-25863: Improper Validation of Specified Quantity in Input

Conditional Fields for Contact Form 7 WordPress plugin through version 2.7.2 contains an uncontrolled resource consumption vulnerability in the Wpcf7cfMailParser class where the hidehiddenmailfieldsregexcallback method reads an iteration count directly from user-supplied POST parameters without...

8.7CVSS5.9AI score0.00605EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/04 12:00 a.m.•1 views

CVE-2026-42154: Uncontrolled Resource Consumption

Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint /api/v1/read does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An unauthenticated attacker can send a sma...

7.5CVSS5.8AI score0.00893EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2026/05/04 12:00 a.m.•13 views

The vulnerability in the Firefox web browser and Thunderbird email client, related to uncontrolled resource consumption, allows attackers to trigger a service failure.

The vulnerability in the Firefox web browser and Thunderbird email client is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7.4AI score0.00604EPSS
SaveExploits1References12Affected Software3
OSV
OSV
•added 2026/04/30 12:49 a.m.•23 views

CLEANSTART-2026-SR31778 Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc

Multiple security vulnerabilities affect the apache-nifi package. Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. See references for individual vulnerability details...

9.8CVSS6.8AI score0.012EPSS
SaveExploits4References23
OSV
OSV
•added 2026/04/30 12:39 a.m.•24 views

CLEANSTART-2026-VN28553 Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc

Multiple security vulnerabilities affect the apache-nifi package. Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. See references for individual vulnerability details...

9.8CVSS6.8AI score0.012EPSS
SaveExploits4References25
IBM Security Bulletins
IBM Security Bulletins
•added 2026/04/29 9:03 a.m.•10 views

Security Bulletin: IBM Engineering Lifecycle Management - Jazz Foundation is impacted by vulnerabilities in Apache Commons IO

Summary A vulnerability has been identified in Apache Commons IO, which is used in IBM Engineering Lifecycle Management - Jazz Foundation. Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The...

4.3CVSS6.4AI score0.01315EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/29 12:00 a.m.•1 views

CVE-2026-22740: Uncontrolled Resource Consumption

A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the request is fully processed. This allows an attacker to consume available disk space. Older, unsupported versions are...

6.5CVSS5.6AI score0.00344EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/29 12:00 a.m.•2 views

CVE-2026-22745: Uncontrolled Resource Consumption

Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application can be vulnerable when all the following are true: the application is using Spring MVC or Spring WebFlux the application is serving static resources from...

5.3CVSS7.2AI score0.00341EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/28 12:00 a.m.•0 views

CVE-2026-40980: Uncontrolled Resource Consumption

In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by ForkPDFLayoutTextStripper. Affected versions: Spring AI: 1.0.0 - 1.0.5 fixed in 1.0.6, 1.1.0 - 1.1.4 fixed in 1.1.5...

6.5CVSS5.8AI score0.0042EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/27 12:00 a.m.•0 views

CVE-2026-35901: Uncontrolled Resource Consumption

A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated attacker to trigger session termination by repeatedly sending SETUP requests for the same media track within a single RTSP session. This causes the server to reset the RTSP connectio...

4.4CVSS5.8AI score0.00161EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2026/04/27 12:00 a.m.•14 views

The vulnerability of the onHeaderDecoded() function in Android operating systems, allowing a hacker to trigger a service failure

The vulnerability of the onHeaderDecoded function in Android operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a hacker to cause a service failure...

6.2CVSS7.7AI score0.00101EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2026/04/22 7:07 a.m.•41 views

CVE-2026-6022 Uncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAX

In Progress® Telerik® UI for AJAX prior to 2026.1.421, RadAsyncUpload contains an uncontrolled resource consumption vulnerability that allows file uploads to exceed the configured maximum size due to missing cumulative size enforcement during chunk reassembly, leading to disk space exhaustion...

7.5CVSS0.00494EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/22 3:31 a.m.•14 views

EUVD-2026-24597

Tanium addressed an uncontrolled resource consumption vulnerability in Interact...

2.7CVSS5.8AI score0.0044EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/04/22 1:46 a.m.•9 views

CVE-2026-6416 Tanium addressed an uncontrolled resource consumption vulnerability in Interact.

Tanium addressed an uncontrolled resource consumption vulnerability in Interact...

2.7CVSS5.8AI score0.0044EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/22 1:46 a.m.•32 views

CVE-2026-6416

Technical details for CVE-2026-6416 are not publicly available in the provided documents. Monitor for updates.

4.9CVSS5.8AI score0.0044EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/04/22 1:46 a.m.•50 views

CVE-2026-6416 Tanium addressed an uncontrolled resource consumption vulnerability in Interact.

Tanium addressed an uncontrolled resource consumption vulnerability in Interact...

2.7CVSS0.0044EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/22 12:00 a.m.•1 views

CVE-2026-6022: Uncontrolled Resource Consumption

In Progress® Telerik® UI for AJAX prior to 2026.1.421, RadAsyncUpload contains an uncontrolled resource consumption vulnerability that allows file uploads to exceed the configured maximum size due to missing cumulative size enforcement during chunk reassembly, leading to disk space exhaustion...

7.5CVSS5.8AI score0.00494EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/22 12:00 a.m.•24 views

PT-2026-34245

Name of the Vulnerable Software and Affected Versions Tanium Interact affected versions not specified Description Tanium Interact contains an issue involving uncontrolled resource consumption, which occurs when a system consumes excessive hardware or software resources, potentially leading to a...

4.9CVSS5.7AI score0.0044EPSS
SaveExploits0References4
Rows per page
Query Builder