Vulnerabilities > Allocation of Resources Without Limits or Throttling

DATE CVE VULNERABILITY TITLE RISK
2023-07-13 CVE-2023-29449 Allocation of Resources Without Limits or Throttling vulnerability in Zabbix
JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization.
network
low complexity
zabbix CWE-770
4.9
2023-07-11 CVE-2023-36521 Allocation of Resources Without Limits or Throttling vulnerability in Siemens products
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4).
network
low complexity
siemens CWE-770
7.5
2023-07-10 CVE-2023-27540 Allocation of Resources Without Limits or Throttling vulnerability in IBM Cloud PAK for Data and Watson Cp4D Data Stores
IBM Watson CP4D Data Stores 4.6.0 does not properly allocate resources without limits or throttling which could allow a remote attacker with information specific to the system to cause a denial of service.
network
low complexity
ibm CWE-770
7.5
2023-07-10 CVE-2023-3566 Allocation of Resources Without Limits or Throttling vulnerability in Wallabag 2.5.4
A vulnerability was found in wallabag 2.5.4.
network
low complexity
wallabag CWE-770
6.5
2023-07-06 CVE-2023-36461 Allocation of Resources Without Limits or Throttling vulnerability in Joinmastodon Mastodon
Mastodon is a free, open-source social network server based on ActivityPub.
network
low complexity
joinmastodon CWE-770
7.5
2023-07-03 CVE-2023-34450 Allocation of Resources Without Limits or Throttling vulnerability in Cometbft
CometBFT is a Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine and replicates it on many machines.
network
low complexity
cometbft CWE-770
5.3
2023-07-03 CVE-2023-36814 Allocation of Resources Without Limits or Throttling vulnerability in Zope Products.Cmfcore
Products.CMFCore are the key framework services for the Zope Content Management Framework (CMF).
network
low complexity
zope CWE-770
7.5
2023-06-28 CVE-2023-20108 Allocation of Resources Without Limits or Throttling vulnerability in Cisco Unified Communications Manager IM and Presence Service 12.5(1)/14Su
A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P) could allow an unauthenticated, remote attacker to cause a temporary service outage for all Cisco Unified CM IM&amp;P users who are attempting to authenticate to the service, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of user-supplied input.
network
low complexity
cisco CWE-770
7.5
2023-06-21 CVE-2023-2828 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers.
network
low complexity
isc debian fedoraproject netapp CWE-770
7.5
2023-06-15 CVE-2023-34455 Allocation of Resources Without Limits or Throttling vulnerability in Xerial Snappy-Java
snappy-java is a fast compressor/decompressor for Java.
network
low complexity
xerial CWE-770
7.5