Vulnerabilities > Uncontrolled Resource Consumption ('Resource Exhaustion')

DATE CVE VULNERABILITY TITLE RISK
2023-11-14 CVE-2023-36042 Resource Exhaustion vulnerability in Microsoft Visual Studio 2019 and Visual Studio 2022
Visual Studio Denial of Service Vulnerability
local
low complexity
microsoft CWE-400
5.5
2023-11-14 CVE-2023-44321 Resource Exhaustion vulnerability in Siemens products
Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition.
network
low complexity
siemens CWE-400
6.5
2023-11-08 CVE-2023-35767 Resource Exhaustion vulnerability in Perforce Helix Core
In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified.
network
low complexity
perforce CWE-400
7.5
2023-11-06 CVE-2023-5969 Resource Exhaustion vulnerability in Mattermost
Mattermost fails to properly sanitize the request to /api/v4/redirect_location allowing an attacker, sending a specially crafted request to /api/v4/redirect_location, to fill up the memory due to caching large items.
network
low complexity
mattermost CWE-400
5.3
2023-11-06 CVE-2023-3246 Resource Exhaustion vulnerability in Gitlab
An issue has been discovered in GitLab EE/CE affecting all versions starting before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1 which allows an attackers to block Sidekiq job processor.
network
low complexity
gitlab CWE-400
4.3
2023-11-06 CVE-2023-3909 Resource Exhaustion vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.3 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1.
network
low complexity
gitlab CWE-400
6.5
2023-11-06 CVE-2023-5825 Resource Exhaustion vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.2 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1.
network
low complexity
gitlab CWE-400
6.5
2023-11-02 CVE-2023-29046 Resource Exhaustion vulnerability in Open-Xchange Appsuite
Connections to external data sources, like e-mail autoconfiguration, were not terminated in case they hit a timeout, instead those connections were logged.
network
low complexity
open-xchange CWE-400
4.3
2023-11-01 CVE-2023-20155 Resource Exhaustion vulnerability in Cisco Firepower Management Center
A vulnerability in a logging API in Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to cause the device to become unresponsive or trigger an unexpected reload.
network
low complexity
cisco CWE-400
6.5
2023-11-01 CVE-2023-46278 Resource Exhaustion vulnerability in Cybozu Remote Service
Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.1.0 to 4.1.1 allows a remote authenticated attacker to consume huge storage space or cause significantly delayed communication.
network
low complexity
cybozu CWE-400
6.5