VYPR

CWE-400

Uncontrolled Resource Consumption

ClassDraftLikelihood: High

Description

The product does not properly control the allocation and maintenance of a limited resource.

Hierarchy (View 1000)

Related attack patterns (CAPEC)

CAPEC-147 · CAPEC-227 · CAPEC-492

CVEs mapped to this weakness (3,811)

page 23 of 191
  • CVE-2025-54604HigOct 28, 2025
    risk 0.49cvss 7.5epss 0.00

    Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 1 of 2).

  • CVE-2025-60349HigOct 28, 2025
    risk 0.49cvss 7.5epss 0.00

    An issue was discovered in Prevx v3.0.5.220 allowing attackers to cause a denial of service via sending IOCTL code 0x22E044 to the pxscan.sys driver. Any processes listed under registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pxscan\Files will be terminated.

  • CVE-2025-53050HigOct 21, 2025
    risk 0.49cvss 7.5epss 0.00

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Performance Monitor). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2025-61301HigOct 20, 2025
    risk 0.49cvss 7.5epss 0.00

    Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 (commit 52e4b43, on 2025-05-17) allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger…

  • CVE-2025-26782HigOct 20, 2025
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 9110, W920, W930, Modem 5123, and Modem 5300. Incorrect handling of RLC AM PDUs leads to a Denial of Service.

  • CVE-2024-55568HigOct 20, 2025
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The absence of a NULL check leads to a Denial of Service when an…

  • CVE-2025-60536HigOct 14, 2025
    risk 0.49cvss 7.5epss 0.01

    An issue in the Configure New Cluster interface of kafka-ui v0.6.0 to v0.7.2 allows attackers to cause a Denial of Service (DoS) via uploading a crafted configuration file.

  • CVE-2025-59502HigOct 14, 2025
    risk 0.49cvss 7.5epss 0.01

    Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.

  • CVE-2025-59975HigOct 9, 2025
    risk 0.49cvss 7.5epss 0.00

    An Uncontrolled Resource Consumption vulnerability in the HTTP daemon (httpd) of Juniper Networks Junos Space allows an unauthenticated network-based attacker flooding the device with inbound API calls to consume all resources on the system, leading to a Denial of Service (DoS).…

  • CVE-2025-55972HigOct 3, 2025
    risk 0.49cvss 7.5epss 0.01

    A TCL Smart TV running a vulnerable UPnP/DLNA MediaRenderer implementation is affected by a remote, unauthenticated Denial of Service (DoS) condition. By sending a flood of malformed or oversized SetAVTransportURI SOAP requests to the UPnP control endpoint, an attacker can cause…

  • CVE-2025-61600HigOct 2, 2025
    risk 0.49cvss 7.5epss 0.01

    Stalwart is a mail and collaboration server. Versions 0.13.3 and below contain an unbounded memory allocation vulnerability in the IMAP protocol parser which allows remote attackers to exhaust server memory, potentially triggering the system's out-of-memory (OOM) killer and…

  • CVE-2025-56572HigSep 30, 2025
    risk 0.49cvss 7.5epss 0.01

    An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero() parameter.

  • CVE-2025-56571HigSep 30, 2025
    risk 0.49cvss 7.5epss 0.00

    Finance.js v4.1.0 contains a Denial of Service (DoS) vulnerability via the IRR function’s depth parameter. Improper handling of the recursion/iteration limit can lead to excessive CPU usage, causing application stalls or crashes.

  • CVE-2025-56234HigSep 29, 2025
    risk 0.49cvss 7.5epss 0.00

    AT_NA2000 from Nanda Automation Technology vendor has a denial-of-service vulnerability. For the processing of TCP RST packets, PLC AT_NA2000 has a wide acceptable range of sequence numbers. It does not require the sequence number to exactly match the next expected sequence…

  • CVE-2025-56233HigSep 29, 2025
    risk 0.49cvss 7.5epss 0.00

    Openindiana, kernel SunOS 5.11 has a denial of service vulnerability. For the processing of TCP packets with RST or SYN flag set, Openindiana has a wide acceptable range of sequence numbers. It does not require the sequence number to exactly match the next expected sequence…

  • CVE-2024-57412HigSep 29, 2025
    risk 0.49cvss 7.5epss 0.00

    An issue in SunOS Omnios v5.11 allows attackers to cause a Denial of Service (DoS) via repeatedly sending crafted TCP packets.

  • CVE-2025-57446HigSep 25, 2025
    risk 0.49cvss 7.5epss 0.00

    An issue in O-RAN Near Realtime RIC ric-plt-submgr in the J-Release environment, allows remote attackers to cause a denial of service (DoS) via a crafted request to the Subscription Manager API component.

  • CVE-2025-55560HigSep 25, 2025
    risk 0.49cvss 7.5epss 0.00

    An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.

  • CVE-2025-55559HigSep 25, 2025
    risk 0.49cvss 7.5epss 0.00

    An issue was discovered TensorFlow v2.18.0. A Denial of Service (DoS) occurs when padding is set to 'valid' in tf.keras.layers.Conv2D.

  • CVE-2025-55558HigSep 25, 2025
    risk 0.49cvss 7.5epss 0.00

    A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by Inductor, leading to a Denial of Service (DoS).