Vulnerabilities > Uncontrolled Resource Consumption ('Resource Exhaustion')

DATE CVE VULNERABILITY TITLE RISK
2024-02-07 CVE-2024-1066 Resource Exhaustion vulnerability in Gitlab
An issue has been discovered in GitLab EE affecting all versions from 13.3.0 prior to 16.6.7, 16.7 prior to 16.7.5, and 16.8 prior to 16.8.2 which allows an attacker to do a resource exhaustion using GraphQL `vulnerabilitiesCountByDay`
network
low complexity
gitlab CWE-400
6.5
2024-02-06 CVE-2024-24575 Resource Exhaustion vulnerability in Libgit2
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application.
network
low complexity
libgit2 CWE-400
7.5
2024-02-06 CVE-2024-24943 Resource Exhaustion vulnerability in Jetbrains Toolbox
In JetBrains Toolbox App before 2.2 a DoS attack was possible via a malicious SVG image
local
low complexity
jetbrains CWE-400
5.5
2024-02-05 CVE-2023-22819 Resource Exhaustion vulnerability in Westerndigital products
An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the service being stopped and restarted was discovered in Western Digital My Cloud Home, My Cloud Home Duo, SanDisk ibi and Western Digital My Cloud OS 5 devices.
network
low complexity
westerndigital CWE-400
4.9
2024-02-04 CVE-2023-52425 Resource Exhaustion vulnerability in Libexpat Project Libexpat
libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.
network
low complexity
libexpat-project CWE-400
7.5
2024-02-03 CVE-2023-30999 Resource Exhaustion vulnerability in IBM products
IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow an attacker to cause a denial of service due to uncontrolled resource consumption.
network
low complexity
ibm CWE-400
7.5
2024-02-01 CVE-2024-24752 Resource Exhaustion vulnerability in Mnapoli Bref
Bref enable serverless PHP on AWS Lambda.
network
low complexity
mnapoli CWE-400
6.5
2024-01-29 CVE-2024-1014 Resource Exhaustion vulnerability in Se-Elektronicgmbh E-Ddc3.3 Firmware 03.07.03
Uncontrolled resource consumption vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher.
network
low complexity
se-elektronicgmbh CWE-400
7.5
2024-01-16 CVE-2024-0581 Resource Exhaustion vulnerability in Sandsprite Scdbg 1.0
An Uncontrolled Resource Consumption vulnerability has been found on Sandsprite Scdbg.exe, affecting version 1.0.
local
low complexity
sandsprite CWE-400
5.5
2024-01-16 CVE-2023-52098 Resource Exhaustion vulnerability in Huawei Emui and Harmonyos
Denial of Service (DoS) vulnerability in the DMS module.
network
low complexity
huawei CWE-400
7.5