VYPR

CWE-400

Uncontrolled Resource Consumption

ClassDraftLikelihood: High

Description

The product does not properly control the allocation and maintenance of a limited resource.

Hierarchy (View 1000)

Related attack patterns (CAPEC)

CAPEC-147 · CAPEC-227 · CAPEC-492

CVEs mapped to this weakness (4,104)

page 32 of 206
  • CVE-2024-10110HigMar 20, 2025
    risk 0.49cvss 7.5epss 0.01

    In version 3.23.0 of aimhubio/aim, the ScheduledStatusReporter object can be instantiated to run on the main thread of the tracking server, leading to the main thread being blocked indefinitely. This results in a denial of service as the tracking server becomes unable to respond…

  • CVE-2025-0114HigMar 12, 2025
    risk 0.49cvss 7.5epss 0.00

    A Denial of Service (DoS) vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software enables an unauthenticated attacker to render the service unavailable by sending a large number of specially crafted packets over a period of time. This issue affects both…

  • CVE-2024-54546HigMar 10, 2025
    risk 0.49cvss 7.5epss 0.00

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An app may be able to cause unexpected system termination or corrupt kernel memory.

  • CVE-2024-44227HigMar 10, 2025
    risk 0.49cvss 7.5epss 0.00

    The issue was addressed with improved memory handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to cause unexpected system termination or corrupt kernel memory.

  • CVE-2024-53458HigMar 5, 2025
    risk 0.49cvss 7.5epss 0.01

    Sysax Multi Server 6.99 is vulnerable to a denial of service (DoS) condition when processing specially crafted SSH packets.

  • CVE-2025-27669HigMar 5, 2025
    risk 0.49cvss 7.5epss 0.01

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Network Scanning (XSPA)/DoS OVE-20230524-0013.

  • CVE-2023-51316HigFeb 20, 2025
    risk 0.49cvss 7.5epss 0.01

    A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1.1 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.

  • CVE-2023-51314HigFeb 20, 2025
    risk 0.49cvss 7.5epss 0.01

    A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Restaurant Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated…

  • CVE-2023-51301HigFeb 19, 2025
    risk 0.49cvss 7.5epss 0.01

    A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail…

  • CVE-2023-51293HigFeb 19, 2025
    risk 0.49cvss 7.5epss 0.01

    A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail…

  • CVE-2023-34397HigFeb 13, 2025
    risk 0.49cvss 7.5epss 0.01

    Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing you can trigger that the service will be crashed.

  • CVE-2024-56940HigFeb 12, 2025
    risk 0.49cvss 7.5epss 0.01

    An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a Denial of Service (DoS) via excessive file uploads.

  • CVE-2024-46923HigFeb 12, 2025
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. The absence of a null check leads to a Denial of Service at amdgpu_cs_ib_fill in the Xclipse Driver.

  • CVE-2025-21351HigFeb 11, 2025
    risk 0.49cvss 7.5epss 0.03

    Windows Active Directory Domain Services API Denial of Service Vulnerability

  • CVE-2025-21181HigFeb 11, 2025
    risk 0.49cvss 7.5epss 0.04

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  • CVE-2024-37358HigFeb 6, 2025
    risk 0.49cvss 8.6epss 0.01

    Similarly to CVE-2024-34055, Apache James is vulnerable to denial of service through the abuse of IMAP literals from both authenticated and unauthenticated users, which could be used to cause unbounded memory allocation and very long computations Version 3.7.6 and 3.8.2…

  • CVE-2024-57081HigFeb 5, 2025
    risk 0.49cvss 7.5epss 0.01

    A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.

  • CVE-2024-57076HigFeb 5, 2025
    risk 0.49cvss 7.5epss 0.01

    A prototype pollution in the lib.post function of ajax-request v1.2.3 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.

  • CVE-2024-57074HigFeb 5, 2025
    risk 0.49cvss 7.5epss 0.00

    A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.

  • CVE-2025-21087HigFeb 5, 2025
    risk 0.49cvss 7.5epss 0.00

    When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed traffic can cause an increase in memory and CPU resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are…