Vulnerabilities > Uncontrolled Resource Consumption ('Resource Exhaustion')

DATE CVE VULNERABILITY TITLE RISK
2022-05-10 CVE-2022-24040 Resource Exhaustion vulnerability in Siemens products
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884).
network
low complexity
siemens CWE-400
6.5
2022-05-06 CVE-2022-24902 Resource Exhaustion vulnerability in Python Tkvideoplayer
TkVideoplayer is a simple library to play video files in tkinter.
network
low complexity
python CWE-400
4.3
2022-05-05 CVE-2022-1468 Resource Exhaustion vulnerability in F5 products
On all versions of 17.0.x, 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x on F5 BIG-IP, an authenticated iControl REST user with at least guest role privileges can cause processing delays to iControl REST requests via undisclosed requests.
network
low complexity
f5 CWE-400
4.3
2022-05-05 CVE-2022-26372 Resource Exhaustion vulnerability in F5 products
On F5 BIG-IP 15.1.x versions prior to 15.1.0.2, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when a DNS listener is configured on a virtual server with DNS queueing (default), undisclosed requests can cause an increase in memory resource utilization.
network
low complexity
f5 CWE-400
7.5
2022-05-05 CVE-2022-27181 Resource Exhaustion vulnerability in F5 Big-Ip Access Policy Manager
On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when APM is configured on a virtual server and the associated access profile is configured with APM AAA NTLM Auth, undisclosed requests can cause an increase in internal resource utilization.
network
low complexity
f5 CWE-400
5.3
2022-05-05 CVE-2022-27182 Resource Exhaustion vulnerability in F5 products
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, and 14.1.x versions prior to 14.1.4.6, when BIG-IP packet filters are enabled and a virtual server is configured with the type set to Reject, undisclosed requests can cause an increase in memory resource utilization.
network
low complexity
f5 CWE-400
5.3
2022-05-05 CVE-2022-28691 Resource Exhaustion vulnerability in F5 products
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when a Real Time Streaming Protocol (RTSP) profile is configured on a virtual server, undisclosed traffic can cause an increase in Traffic Management Microkernel (TMM) resource utilization.
network
low complexity
f5 CWE-400
7.5
2022-05-05 CVE-2022-28701 Resource Exhaustion vulnerability in F5 products
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, when the stream profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.
network
low complexity
f5 CWE-400
7.5
2022-05-05 CVE-2022-29480 Resource Exhaustion vulnerability in F5 products
On F5 BIG-IP 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when multiple route domains are configured, undisclosed requests to big3d can cause an increase in CPU resource utilization.
network
low complexity
f5 CWE-400
5.3
2022-05-04 CVE-2022-25779 Resource Exhaustion vulnerability in Secomea products
Logging of Excessive Data vulnerability in audit log of Secomea GateManager allows logged in user to write text entries in audit log.
network
low complexity
secomea CWE-400
4.3