10016 matches found
The vulnerability of the h2 library in the Rust programming language, related to uncontrolled resource consumption, allows attackers to cause service failures.
The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the CrocoTime employee attendance system, related to uncontrolled resource consumption, allows a violator to trigger a service failure.
The vulnerability of the CrocoTime employee attendance system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
CVE-2026-108577 Konstanty Bialkowski libmodplug ABC Music Format load_abc.cpp abc_add_gchord resource consumption
A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abcaddgchord of the file src/loadabc.cpp of the component ABC Music Format Parser. This manipulation causes resource consumption. The attack may be initiated remotely. The vendor was...
CVE-2026-108577
A vulnerability exists in Konstanty Bialkowski libmodplug versions up to 0.8.9.1 . The flaw is located within the abc_add_gchord function in the src/load_abc.cpp file of the ABC Music Format Parser component. This issue leads to resource consumption and can be initiated remotely. No specific reme...
CVE-2021-35492
معلومات الثغرة عنوان الثغرة: Wowza Streaming Engine 4.8.11+5 - رفض الخدمة CVE: CVE-2021-35492 التاريخ: 2021-10-06 مؤلف الثغرة: N4nj0 رابط البرنامج: https://www.wowza.com/products/streaming-engine الإصدار: 4.8.11+5 تم الاختبار على: Wowza Streaming Engine = 4.8.11+5 النشرة الأمنية:...
Security Bulletin: IBM Integration Designer is vulnerable to multiple CVEs
Summary Vulnerability in jackson-databind.jar in IBM Integration Designer: CVE-2026-91776 and CVE-2026-91777 Vulnerability Details CVEID:CVE-2026-91776 DESCRIPTION: TypeDeserializerBase.findDeserializer in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplie...
CVE-2026-87110
The Ops Manager web port is susceptible to uncontrolled resource consumption (CWE-770). An unauthenticated user with network access can repeatedly request specific monitoring endpoints that perform costly operations. Because these endpoints lack rate limiting , the attack can temporarily slow dow...
The vulnerability of the net/http component in the Golang programming language, which allows a hacker to trigger a service failure
The vulnerability of the net/http component in the Golang programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Security Bulletin: Multiple vulnerabilities in IBM Aspera Enterprise Webapps
Summary Multiple vulnerabilities were addressed in IBM Aspera Enterprise Webapps version 1.0.7 Vulnerability Details CVEID:CVE-2026-75095 DESCRIPTION: IBM Aspera Enterprise WebApps could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. CWE:CWE-400:...
CVE-2026-50787
CVE-2026-50787 — استهلاك غير مُتحكم فيه للموارد في e-SIC Livre الملخص توجد ثغرة استهلاك الموارد في مكوّن توليد الكابتشا CAPTCHA في e-SIC Livre esiclivre. يقبل نقطة النهاية المُعرَّضة معاملات يتحكم بها المستخدم تُحدد أبعاد صورة الكابتشا، وحجم الخط، وعدد الأحرف المطلوب عرضها. تُستخدم هذه القيم دون...
CVE-2026-36958
CVE-2026-36958: رفض الخدمة عبر طلبات HTTP المتزامنة معرف CVE: CVE-2026-36958 التاريخ: 2026-04-29 المكتشف: Kirubel Solomne البائع: U-SPEED المنتج: راوتر U-SPEED إصدار البرنامج الثابت: V1.0.0 CWE: CWE-400 - استهلاك غير متحكم فيه للموارد الوصف البرنامج الثابت V1.0.0 لراوتر U-SPEED عرضة لرفض الخدمة. ...
CVE-2026-23842-Denial-of-Service-via-Database-Connection-Pool-Exhaustion-version-1.2.10
CVE-2026-23842 Déni de service via épuisement du pool de connexions de base de données dans ≤ 1.2.10 📌 Aperçu Ce dépôt documente ma découverte et ma divulgation responsable de la CVE-2026-23842 , une vulnérabilité de déni de service de haute sévérité dans ChatterBot. Avis GitHub :...
CVE-2026-31899
CVE-2026-31899: رفض الخدمة الأُسّي عبر تضخيم عنصر العودي في CairoSVG الكلمات المفتاحية: CVE-2026-31899, CairoSVG, exponential DoS, SVG bomb, recursive use element, denial of service, XML amplification, Python SVG vulnerability, CWE-400, uncontrolled resource consumption, billion laughs SVG Table ...
CVE-2026-38361
CVE-2026-38361: ثغرات متعددة لحجب الخدمة DoS دون مصادقة في dash-uploader ثغرات متعددة لحجب الخدمة Denial of Service - DoS دون مصادقة في fohrloop/dash-uploader Python، PyPI، بما في ذلك على سبيل المثال لا الحصر انهيار العملية بسبب نفاد الذاكرة OOM، واقتطاع الملفات إلى صفر بايت، واستنزاف القرص بشكل...
CVE-2026-105826
Removed by vendor...
CVE-2026-105826
...
CVE-2026-16169
IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
CVE-2026-16169
The IBM DataPower Gateway versions 11.0.0.0 through 11.0.0.2 are susceptible to a denial of service (DoS) condition. The root cause is uncontrolled resource consumption (CWE-400), which allows a remote attacker to impact the availability of the service. IBM addresses this vulnerability in release...
