Vulnerabilities > Uncontrolled Resource Consumption ('Resource Exhaustion')

DATE CVE VULNERABILITY TITLE RISK
2021-01-29 CVE-2021-21254 Resource Exhaustion vulnerability in Ckeditor Ckeditor5
CKEditor 5 is an open source rich text editor framework with a modular architecture.
network
low complexity
ckeditor CWE-400
6.5
2021-01-29 CVE-2021-25909 Resource Exhaustion vulnerability in Zivautomation 4Cct-Ea6-334126Bf Firmware 3.23.80.27.36371
ZIV Automation 4CCT-EA6-334126BF firmware version 3.23.80.27.36371, allows an unauthenticated, remote attacker to cause a denial of service condition on the device.
network
low complexity
zivautomation CWE-400
7.5
2021-01-27 CVE-2021-25226 Resource Exhaustion vulnerability in Trendmicro Serverprotect 3.0
A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product.
local
low complexity
trendmicro CWE-400
5.5
2021-01-27 CVE-2021-25225 Resource Exhaustion vulnerability in Trendmicro Serverprotect 3.0
A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product.
local
low complexity
trendmicro CWE-400
5.5
2021-01-27 CVE-2021-25224 Resource Exhaustion vulnerability in Trendmicro Serverprotect 3.0
A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product.
local
low complexity
trendmicro CWE-400
5.5
2021-01-26 CVE-2021-21271 Resource Exhaustion vulnerability in Tendermint 0.34.0/0.34.1/0.34.2
Tendermint Core is an open source Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine - written in any programming language - and securely replicates it on many machines.
network
low complexity
tendermint CWE-400
6.5
2021-01-26 CVE-2020-27295 Resource Exhaustion vulnerability in Honeywell OPC UA Tunneller
The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-service condition on the OPC UA Tunneller (versions prior to 6.3.0.8233).
network
low complexity
honeywell CWE-400
7.5
2021-01-26 CVE-2020-8295 Resource Exhaustion vulnerability in Nextcloud Server
A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user.
network
low complexity
nextcloud CWE-400
7.5
2021-01-26 CVE-2020-8293 Resource Exhaustion vulnerability in Nextcloud Server
A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage with those rules.
network
low complexity
nextcloud CWE-400
6.5
2021-01-22 CVE-2020-4766 Resource Exhaustion vulnerability in IBM MQ Internet Pass-Thru 2.1/9.2
IBM MQ Internet Pass-Thru 2.1 and 9.2 could allow a remote user to cause a denial of service by sending malformed MQ data requests which would consume all available resources.
network
low complexity
ibm CWE-400
7.5