Vulnerabilities > Uncontrolled Resource Consumption ('Resource Exhaustion')

DATE CVE VULNERABILITY TITLE RISK
2023-10-26 CVE-2023-31418 Resource Exhaustion vulnerability in Elastic Elasticsearch
An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer.
network
low complexity
elastic CWE-400
7.5
2023-10-25 CVE-2023-39219 Resource Exhaustion vulnerability in Pingidentity Pingfederate
PingFederate Administrative Console dependency contains a weakness where console becomes unresponsive with crafted Java class loading enumeration requests
network
low complexity
pingidentity CWE-400
7.5
2023-10-25 CVE-2023-42031 Resource Exhaustion vulnerability in IBM Cics TX and Txseries for Multiplatforms
IBM TXSeries for Multiplatforms, 8.1, 8.2, and 9.1, CICS TX Standard CICS TX Advanced 10.1 and 11.1 could allow a privileged user to cause a denial of service due to uncontrolled resource consumption.
network
low complexity
ibm CWE-400
4.9
2023-10-25 CVE-2023-46118 Resource Exhaustion vulnerability in VMWare Rabbitmq
RabbitMQ is a multi-protocol messaging and streaming broker.
network
low complexity
vmware CWE-400
4.9
2023-10-25 CVE-2023-46120 Resource Exhaustion vulnerability in VMWare Rabbitmq Java Client
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.
network
low complexity
vmware CWE-400
7.5
2023-10-17 CVE-2023-45810 Resource Exhaustion vulnerability in Openfga
OpenFGA is a flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
network
low complexity
openfga CWE-400
7.5
2023-10-17 CVE-2022-43893 Resource Exhaustion vulnerability in IBM Security Verify Privilege On-Premises
IBM Security Verify Privilege On-Premises 11.5 could allow a privileged user to cause by using a malicious payload.
local
low complexity
ibm CWE-400
4.4
2023-10-14 CVE-2022-43740 Resource Exhaustion vulnerability in IBM Security Verify Access Oidc Provider
IBM Security Verify Access OIDC Provider could allow a remote user to cause a denial of service due to uncontrolled resource consumption.
network
low complexity
ibm CWE-400
7.5
2023-10-12 CVE-2023-36841 Resource Exhaustion vulnerability in Juniper Junos
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows a unauthenticated network-based attacker to cause an infinite loop, resulting in a Denial of Service (DoS). An attacker who sends malformed TCP traffic via an interface configured with PPPoE, causes an infinite loop on the respective PFE.
network
low complexity
juniper CWE-400
7.5
2023-10-06 CVE-2023-21253 Resource Exhaustion vulnerability in Google Android
In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion.
local
low complexity
google CWE-400
5.5