Vulnerabilities > Allocation of Resources Without Limits or Throttling

DATE CVE VULNERABILITY TITLE RISK
2019-10-02 CVE-2019-5031 Allocation of Resources Without Limits or Throttling vulnerability in Foxitsoftware Phantompdf
An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828.
network
low complexity
foxitsoftware CWE-770
8.8
2019-10-01 CVE-2019-17067 Allocation of Resources Without Limits or Throttling vulnerability in Putty
PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the same port to steal an incoming connection.
network
low complexity
putty CWE-770
critical
9.8
2019-09-27 CVE-2019-9291 Allocation of Resources Without Limits or Throttling vulnerability in Google Android 10.0
In Bluetooth, there is a possible remote code execution due to an improper memory allocation.
network
low complexity
google CWE-770
8.8
2019-09-25 CVE-2019-16889 Allocation of Resources Without Limits or Throttling vulnerability in UI products
Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/run/beaker/container_file/ are created when providing a valid length payload of 249 characters or fewer to the beaker.session.id cookie in a GET header.
network
low complexity
ui CWE-770
7.5
2019-09-16 CVE-2019-15736 Allocation of Resources Without Limits or Throttling vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1.
network
low complexity
gitlab CWE-770
7.5
2019-09-16 CVE-2019-15722 Allocation of Resources Without Limits or Throttling vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.2.1.
network
low complexity
gitlab CWE-770
7.5
2019-08-29 CVE-2019-11060 Allocation of Resources Without Limits or Throttling vulnerability in Asus Hg100 Firmware 1.05.12
The web api server on Port 8080 of ASUS HG100 firmware up to 1.05.12, which is vulnerable to Slowloris HTTP Denial of Service: an attacker can cause a Denial of Service (DoS) by sending headers very slowly to keep HTTP or HTTPS connections and associated resources alive for a long period of time.
network
low complexity
asus CWE-770
7.5
2019-08-28 CVE-2019-15753 Allocation of Resources Without Limits or Throttling vulnerability in Openstack Os-Vif 1.15.0/1.15.1/1.16.0
In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet flooding of non-local destinations, which both impedes network performance and allows users to possibly view the content of packets for instances belonging to other tenants sharing the same network.
network
low complexity
openstack CWE-770
critical
9.1
2019-08-26 CVE-2019-15544 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
An issue was discovered in the protobuf crate before 2.6.0 for Rust.
network
low complexity
rust-protobuf-project apache CWE-770
7.5
2019-08-20 CVE-2019-4338 Allocation of Resources Without Limits or Throttling vulnerability in IBM Security Guardium BIG Data Intelligence 4.0
IBM Security Guardium Big Data Intelligence 4.0 (SonarG) does not properly restrict the size or amount of resources that are requested or influenced by an actor.
network
low complexity
ibm CWE-770
7.5