Vulnerabilities > Uncontrolled Resource Consumption ('Resource Exhaustion')

DATE CVE VULNERABILITY TITLE RISK
2020-08-13 CVE-2020-13280 Resource Exhaustion vulnerability in Gitlab
For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message.
network
low complexity
gitlab CWE-400
6.5
2020-08-03 CVE-2020-12739 Resource Exhaustion vulnerability in Fanuc products
A denial-of-service vulnerability in the Fanuc i Series CNC (0i-MD and 0i Mate-MD) could allow an unauthenticated, remote attacker to cause an affected CNC to become inaccessible to other devices.
network
low complexity
fanuc CWE-400
5.3
2020-07-30 CVE-2020-8220 Resource Exhaustion vulnerability in multiple products
A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform command injection via the administrator web which can cause DOS.
network
low complexity
pulsesecure ivanti CWE-400
6.5
2020-07-30 CVE-2020-8192 Resource Exhaustion vulnerability in Fastify 2.14.1/3.0.0
A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors option is used) with specially crafted schemas.
network
low complexity
fastify CWE-400
6.5
2020-07-27 CVE-2020-7016 Resource Exhaustion vulnerability in multiple products
Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion.
network
high complexity
elasticsearch oracle CWE-400
4.8
2020-07-24 CVE-2020-8175 Resource Exhaustion vulnerability in Jpeg-Js Project Jpeg-Js
Uncontrolled resource consumption in `jpeg-js` before 0.4.0 may allow attacker to launch denial of service attacks using specially a crafted JPEG image.
local
low complexity
jpeg-js-project CWE-400
5.5
2020-07-23 CVE-2020-8557 Resource Exhaustion vulnerability in Kubernetes
The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage by a pod which writes to its own /etc/hosts file.
local
low complexity
kubernetes CWE-400
5.5
2020-07-16 CVE-2020-3372 Resource Exhaustion vulnerability in Cisco Sd-Wan Firmware
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to consume excessive system memory and cause a denial of service (DoS) condition on an affected system.
network
low complexity
cisco CWE-400
6.5
2020-07-16 CVE-2020-3351 Resource Exhaustion vulnerability in Cisco products
A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.
network
low complexity
cisco CWE-400
8.6
2020-07-14 CVE-2020-7584 Resource Exhaustion vulnerability in Siemens products
A vulnerability has been identified in SIMATIC S7-200 SMART CPU family (All versions >= V2.2 < V2.5.1).
network
low complexity
siemens CWE-400
7.5