ROS-20260929-73-0188

The vulnerability of the wdtprobe function in the drivers/watchdog/viawdt.c module related to Linux kernel watchdog timer support involves unlimited and unregulated resource allocation. Exploiting this vulnerability could allow a attacker to cause a system failure...

EUVD-2026-73251

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to trigger a service failure.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to unlimited resource allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-45646

A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized remote attacker to cause a Denial of Service DoS by allocating resources without limits or throttling. This can lead to the affected system becoming unresponsive or unavailable to legitimate users...

The vulnerability of the JDBC driver pgjdbc, related to unlimited resource allocation, allows attackers to cause service failures.

The vulnerability of the JDBC driver pgjdbc is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

EUVD-2026-43802

Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network...

.NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

ROS-20260605-73-0045

The vulnerability in Tomcat11 is related to unlimited resource allocation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Mint 安全漏洞

Mint is a functional underlying HTTP client library developed by Elixir Mint. Versions of Mint from 0.1.0 to 1.9.0 contained security vulnerabilities. These vulnerabilities stemmed from unlimited resource allocation, which could allow attackers to exhaust the memory of the Mint client on an HTTP/...

Progress Software MOVEit 安全漏洞

Progress Software MOVEit is a secure hosted file transfer software developed by Progress Software Corporation in the United States. Versions of Progress Software MOVEit prior to 2025.0.11, as well as versions from 2025.1.0 to 2025.1.7, contained security vulnerabilities. These vulnerabilities wer...

Vulnerability of specialized cryptographic modules: BC Java bcpkix on All (API modules), BC Java bcprov on All (API modules), BCPKIX FIPS bcpkix-fips on All (API modules). Libraries from Bouncy Castle allow attackers to exploit these resources excessively.

The vulnerability of specialized cryptographic modules such as BC Java bcpkix in All API modules, BC Java bcprov in All API modules, and BCPKIX FIPS bcpkix-fips in All API modules is related to unlimited resource allocation. Exploiting this vulnerability can allow a remote attacker to excessively...

EUVD-2025-209720

Improperly controlled modification of Dynamically-Determined object attributes, Allocation of resources without limits or throttling vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Excessive Allocation, Flooding. This issue affects DivvyDrive: from 4.8.2.19 before...

CVE-2025-14341 Input Data Manipulation in DivvyDrive Information Technologies' DivvyDrive

Improperly controlled modification of Dynamically-Determined object attributes, Allocation of resources without limits or throttling vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Excessive Allocation, Flooding. This issue affects DivvyDrive: from 4.8.2.19 before...

DivvyDrive 安全漏洞

DivvyDrive is a file storage and sharing management platform developed by DivvyDrive Inc. in Turkey. Versions of DivvyDrive prior to 4.8.3.2 contained security vulnerabilities. These vulnerabilities stemmed from improper control over modifications to object properties and unlimited resource...

asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation

A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized attacker to perform a Denial of Service DoS attack over a network by allocating resources without limits or throttling. This can lead to the unavailability of the service for legitimate users...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the Optimizer component. An attacker can cause the server to hang or crash repeatedly by sending crafted requests over the network while authenticated with high privileges...

Bouncy Castle Java 安全漏洞

Bouncy Castle Java is an open-source encryption algorithm developed by Legion of the Bouncy Castle Inc. Versions of Bouncy Castle Java prior to 1.84 contained security vulnerabilities. These vulnerabilities stemmed from unlimited resource allocation, which could lead to exhaustion of pre-authoriz...

MediaWiki ReportIncident Extension 安全漏洞

The MediaWiki ReportIncident Extension is an open-source extension for reporting wiki incidents in MediaWiki. Versions 1.43.7, 1.44.4, and 1.45.2 of the MediaWiki ReportIncident Extension contain security vulnerabilities. These vulnerabilities stem from unlimited resource allocation, which may le...

The vulnerability of the vdec_msg_queue_init() function in the drivers/media/platform/mediatek/vcodec/vdec_msg_queue.c file of the Linux kernel-based multimedia device driver allows a hacker to cause a system failure.

The vulnerability of the vdecmsgqueueinit function in the drivers/media/platform/mediatek/vcodec/vdecmsgqueue.c file of the Linux kernel-based multimedia device driver leads to unlimited resource allocation. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx, related to unlimited resource allocation, allows a attacker to cause a service failure.

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx is related to unlimited resource allocation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...