Vulnerabilities > Uncontrolled Resource Consumption ('Resource Exhaustion')

DATE CVE VULNERABILITY TITLE RISK
2024-08-01 CVE-2024-41946 Resource Exhaustion vulnerability in Ruby-Lang Rexml
REXML is an XML toolkit for Ruby.
network
low complexity
ruby-lang CWE-400
7.5
2024-07-30 CVE-2024-37299 Resource Exhaustion vulnerability in Discourse
Discourse is an open source discussion platform.
network
low complexity
discourse CWE-400
7.5
2024-07-29 CVE-2024-41818 Resource Exhaustion vulnerability in Fast-Xml-Parser Project Fast-Xml-Parser 4.2.4
fast-xml-parser is an open source, pure javascript xml parser.
network
low complexity
fast-xml-parser-project CWE-400
7.5
2024-07-16 CVE-2024-5795 Resource Exhaustion vulnerability in Github Enterprise Server
A Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause unbounded resource exhaustion by sending a large payload to the Git server.
network
low complexity
github CWE-400
6.5
2024-06-27 CVE-2024-4557 Resource Exhaustion vulnerability in Gitlab
Multiple Denial of Service (DoS) conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1 which allowed an attacker to cause resource exhaustion via banzai pipeline.
network
low complexity
gitlab CWE-400
6.5
2024-06-25 CVE-2024-5011 Resource Exhaustion vulnerability in Progress Whatsup Gold
In WhatsUp Gold versions released before 2023.1.3, an uncontrolled resource consumption vulnerability exists. A specially crafted unauthenticated HTTP request to the TestController Chart functionality can lead to denial of service.
network
low complexity
progress CWE-400
7.5
2024-06-06 CVE-2024-3153 Resource Exhaustion vulnerability in Mintplexlabs Anythingllm 0.0.1/0.1.0
mintplex-labs/anything-llm is affected by an uncontrolled resource consumption vulnerability in its upload file endpoint, leading to a denial of service (DOS) condition.
network
low complexity
mintplexlabs CWE-400
6.5
2024-02-15 CVE-2024-20716 Resource Exhaustion vulnerability in Adobe Commerce 2.4.4/2.4.5/2.4.6
Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to an application denial-of-service.
network
low complexity
adobe CWE-400
4.9
2024-02-12 CVE-2023-6681 Resource Exhaustion vulnerability in multiple products
A vulnerability was found in JWCrypto.
network
low complexity
latchset redhat fedoraproject CWE-400
5.3
2024-02-09 CVE-2024-23323 Resource Exhaustion vulnerability in Envoyproxy Envoy
Envoy is a high-performance edge/middle/service proxy.
network
low complexity
envoyproxy CWE-400
5.3