Vulnerabilities > Allocation of Resources Without Limits or Throttling

DATE CVE VULNERABILITY TITLE RISK
2023-09-29 CVE-2023-5289 Allocation of Resources Without Limits or Throttling vulnerability in Ikus-Soft Rdiffweb
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.
network
low complexity
ikus-soft CWE-770
8.8
2023-09-25 CVE-2023-43642 Allocation of Resources Without Limits or Throttling vulnerability in Xerial Snappy-Java
snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google.
network
low complexity
xerial CWE-770
7.5
2023-09-21 CVE-2023-42457 Allocation of Resources Without Limits or Throttling vulnerability in Plone Rest 2.0.0/3.0.0
plone.rest allows users to use HTTP verbs such as GET, POST, PUT, DELETE, etc.
network
low complexity
plone CWE-770
7.5
2023-09-21 CVE-2023-43632 Allocation of Resources Without Limits or Throttling vulnerability in Linuxfoundation Edge Virtualization Engine
As noted in the “VTPM.md” file in the eve documentation, “VTPM is a server listening on port 8877 in EVE, exposing limited functionality of the TPM to the clients.
network
low complexity
linuxfoundation CWE-770
critical
9.9
2023-09-20 CVE-2023-37279 Allocation of Resources Without Limits or Throttling vulnerability in Contribsys Faktory
Faktory is a language-agnostic persistent background job server.
network
low complexity
contribsys CWE-770
7.5
2023-09-20 CVE-2022-47562 Allocation of Resources Without Limits or Throttling vulnerability in Ormazabal Ekorccp Firmware and Ekorrci Firmware
Vulnerability in the RCPbind service running on UDP port (111), allowing a remote attacker to create a denial of service (DoS) condition.
network
low complexity
ormazabal CWE-770
7.5
2023-09-19 CVE-2023-32186 Allocation of Resources Without Limits or Throttling vulnerability in Suse Rancher Rke2
A Allocation of Resources Without Limits or Throttling vulnerability in SUSE RKE2 allows attackers with access to K3s servers apiserver/supervisor port (TCP 6443) cause denial of service. This issue affects RKE2: from 1.24.0 before 1.24.17+rke2r1, from v1.25.0 before v1.25.13+rke2r1, from v1.26.0 before v1.26.8+rke2r1, from v1.27.0 before v1.27.5+rke2r1, from v1.28.0 before v1.28.1+rke2r1.
network
low complexity
suse CWE-770
7.5
2023-09-18 CVE-2023-32187 Allocation of Resources Without Limits or Throttling vulnerability in K3S
An Allocation of Resources Without Limits or Throttling vulnerability in SUSE k3s allows attackers with access to K3s servers' apiserver/supervisor port (TCP 6443) cause denial of service. This issue affects k3s: from v1.24.0 before v1.24.17+k3s1, from v1.25.0 before v1.25.13+k3s1, from v1.26.0 before v1.26.8+k3s1, from sev1.27.0 before v1.27.5+k3s1, from v1.28.0 before v1.28.1+k3s1.
network
low complexity
k3s CWE-770
7.5
2023-09-15 CVE-2023-38507 Allocation of Resources Without Limits or Throttling vulnerability in Strapi
Strapi is the an open-source headless content management system.
network
low complexity
strapi CWE-770
critical
9.8
2023-09-15 CVE-2023-38706 Allocation of Resources Without Limits or Throttling vulnerability in Discourse
Discourse is an open-source discussion platform.
network
low complexity
discourse CWE-770
6.5