The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10, when request body decompression is enabled, allows remote attackers to cause a denial of service (resource consumption) via …

CVE-2014-0212HIGHCVSS 7.5EG 7.5

2019-12-13

qpid-cpp: ACL policies only loaded if the acl-file option specified enabling DoS by consuming all available file descriptors

CVE-2014-10064HIGHCVSS 7.5EG 7.5

2018-05-31

The qs module before 1.0.0 does not have an option or default for specifying object depth and when parsing a string representing a deeply nested object will block the event loop for long periods of time. An attacker could leverage this to …

CVE-2014-1500NONECVSS 0.0EG 0.0

2014-03-19

Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (resource consumption and application hang) via onbeforeunload events that trigger background JavaScript execution.

CVE-2014-2342NONECVSS 0.0EG 0.0

2014-05-30

Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service (excessive data processing) via a crafted DNP3 packet.

CVE-2014-2343NONECVSS 0.0EG 0.0

2014-05-30

Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service (excessive data processing) via a crafted DNP request over a serial line.

CVE-2014-2885HIGHCVSS 7.1EG 7.1

2018-03-19

Multiple integer overflows in TrueCrypt 7.1a allow local users to (1) obtain sensitive information via vectors involving a crafted item->OriginalLength value in the MainThreadProc function in EncryptedIoQueue.c or (2) cause a denial of ser…

CVE-2014-3122NONECVSS 0.0EG 0.0

2014-05-11

The try_to_unmap_cluster function in mm/rmap.c in the Linux kernel before 3.14.3 does not properly consider which pages must be locked, which allows local users to cause a denial of service (system crash) by triggering a memory-usage patte…

CVE-2014-3211HIGHCVSS 7.5EG 7.5

2020-01-09

Publify before 8.0.1 is vulnerable to a Denial of Service attack

CVE-2014-3328NONECVSS 0.0EG 0.0

2014-07-26

The Intercluster Sync Agent Service in Cisco Unified Presence Server allows remote attackers to cause a denial of service via a TCP SYN flood, aka Bug ID CSCun34125.

CVE-2014-3407NONECVSS 0.0EG 0.0

2014-11-28

The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(.2) and earlier does not properly allocate memory blocks during HTTP packet handling, which allows remote attackers to cause a denial of service (memory con…

CVE-2014-3447HIGHCVSS 7.5EG 7.5

2020-01-09

BSS Continuity CMS 4.2.22640.0 has a Remote Denial Of Service vulnerability

CVE-2014-3648HIGHCVSS 7.5EG 7.5

2022-07-01

The simplepush server iterates through the application installations and pushes a notification to the server provided by deviceToken. But this is user controlled. If a bogus applications is registered with bad deviceTokens, one can generat…

CVE-2014-3687HIGHCVSS 7.5EG 7.5

2014-11-10

The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorr…

CVE-2014-3690MEDIUMCVSS 5.5EG 5.5

2014-11-10

arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a VM entry, which allows host OS users to kill arbitrary proces…

CVE-2014-5418NONECVSS 0.0EG 0.0

2015-01-17

GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service (resource consumpt…

CVE-2014-7255HIGHCVSS 7.5EG 7.5

2014-12-05

Internet Initiative Japan Inc. SEIL Series routers SEIL/X1 2.50 through 4.62, SEIL/X2 2.50 through 4.62, SEIL/B1 2.50 through 4.62, and SEIL/x86 Fuji 1.70 through 3.22 allow remote attackers to cause a denial of service (CPU and traffic co…

CVE-2014-7970MEDIUMCVSS 5.5EG 5.5

2014-10-13

The pivot_root implementation in fs/namespace.c in the Linux kernel through 3.17 does not properly interact with certain locations of a chroot directory, which allows local users to cause a denial of service (mount-tree loop) via . (dot) v…

CVE-2014-8124NONECVSS 0.0EG 0.0

2014-12-12

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number …

CVE-2014-8559MEDIUMCVSS 5.5EG 5.5

2014-11-10

The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local users to cause a denial of service (deadlock and system hang) via a crafted application.

CVE-2014-8937HIGHCVSS 7.5EG 7.5

2020-06-01

Lexiglot through 2014-11-20 allows denial of service because api/update.php launches svn update operations that use a great deal of resources.

CVE-2015-1916HIGHCVSS 7.5EG 0.0

2015-07-02

Unspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a denial of service via unknown vectors related to SSL/TLS and the Secure Socket Extension provider.

CVE-2015-4411HIGHCVSS 7.5EG 7.5

2020-02-20

The Moped::BSON::ObjecId.legal? method in mongodb/bson-ruby before 3.0.4 as used in rubygem-moped allows remote attackers to cause a denial of service (worker resource consumption) via a crafted string. NOTE: This issue is due to an incomp…

CVE-2015-4412CRITICALCVSS 9.8EG 9.8

2018-02-05

BSON injection vulnerability in the legal? function in BSON (bson-ruby) gem before 3.0.4 for Ruby allows remote attackers to cause a denial of service (resource consumption) or inject arbitrary data via a crafted string.

CVE-2015-5333HIGHCVSS 7.5EG 7.5

2020-01-23

Memory leak in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (memory consumption) via a large number of ASN.1 object identifiers in X.509 certificates.

CVE-2015-5600HIGHCVSS 8.1EG 0.0

2015-08-03

The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct bru…

CVE-2015-9239HIGHCVSS 7.5EG 7.5

2018-05-31

ansi2html is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in.

CVE-2015-9241HIGHCVSS 7.5EG 7.5

2018-05-29

Certain input passed into the If-Modified-Since or Last-Modified headers will cause an 'illegal access' exception to be raised. Instead of sending a HTTP 500 error back to the sender, hapi node module before 11.1.3 will continue to hold th…

CVE-2015-9242HIGHCVSS 7.5EG 7.5

2018-05-29

Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will cause v8 to raise an exception. This leads to a crash and denial of service in ecstatic when this input is passed into the server via…

CVE-2015-9253MEDIUMCVSS 6.5EG 6.5

2018-02-19

An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-fpm master process restarts a child process in an endless loop when using program execution functions (e.g., passthru, exec, shell_exec…

CVE-2015-9548HIGHCVSS 7.5EG 7.5

2020-06-19

An issue was discovered in Mattermost Server before 1.2.0. It allows attackers to cause a denial of service (memory consumption) via a small compressed file that has a large size when uncompressed.

CVE-2016-10520HIGHCVSS 7.5EG 7.5

2018-05-31

jadedown is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in.

CVE-2016-10521HIGHCVSS 7.5EG 7.5

2018-05-31

jshamcrest is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in to the emailAddress validator.

CVE-2016-10523HIGHCVSS 7.5EG 7.5

2018-05-31

MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible with very little bandwidth.

CVE-2016-10524HIGHCVSS 8.2EG 8.2

2018-05-31

i18n-node-angular is a module used to interact between i18n and angular without using additional resources. A REST API endpoint that is used for development in i18n-node-angular before 1.4.0 was not disabled in production environments a ma…

CVE-2016-10527HIGHCVSS 7.5EG 7.5

2018-05-31

The riot-compiler version version 2.3.21 has an issue in a regex (Catastrophic Backtracking) thats make it unusable under certain conditions.

CVE-2016-10539HIGHCVSS 7.5EG 7.5

2018-05-31

negotiator is an HTTP content negotiator for Node.js and is used by many modules and frameworks including Express and Koa. The header for "Accept-Language", when parsed by negotiator 0.6.0 and earlier is vulnerable to Regular Expression De…

CVE-2016-10540HIGHCVSS 7.5EG 7.5

2018-05-31

Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript `RegExp` objects. The primary function, `minimatch(path, pattern)` in Minimatch 3.0.1 and earlier is vulnerable to ReDoS in the `pattern` par…

CVE-2016-10542HIGHCVSS 7.5EG 7.5

2018-05-31

ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". By sending an overly long websocket payload to a `ws` server, it is possible to crash the node proce…

CVE-2016-10544MEDIUMCVSS 5.9EG 5.9

2018-05-31

uws is a WebSocket server library. By sending a 256mb websocket message to a uws server instance with permessage-deflate enabled, there is a possibility used compression will shrink said 256mb down to less than 16mb of websocket payload wh…

CVE-2016-10724HIGHCVSS 7.5EG 7.5

2018-07-05

Bitcoin Core before v0.13.0 allows denial of service (memory exhaustion) triggered by the remote network alert system (deprecated since Q1 2016) if an attacker can sign a message with a certain private key that had been known by unintended…

CVE-2016-1544LOWCVSS 3.3EG 3.3

2020-02-06

nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion).

CVE-2016-7068MEDIUMCVSS 5.3EG 7.5

2018-09-11

An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 3.7.4 and 4.0.4, allowing a remote, unauthenticated attacker to cause an abnormal CPU usage load on the PowerDNS server by sending crafted DNS querie…

CVE-2016-7072MEDIUMCVSS 5.3EG 7.5

2018-09-10

An issue has been found in PowerDNS Authoritative Server before 3.4.11 and 4.0.2 allowing a remote, unauthenticated attacker to cause a denial of service by opening a large number of TCP connections to the web server. If the web server run…

CVE-2016-8611MEDIUMCVSS 4.3EG 6.5

2018-07-31

A vulnerability was found in Openstack Glance. No limits are enforced within the Glance image service for both v1 and v2 `/images` API POST method for authenticated users, resulting in possible denial of service attacks through database ta…

CVE-2016-8627MEDIUMCVSS 4.3EG 6.5

2018-05-11

admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download server log files that allows logs to be available via GET requests making them vulnerable to cross-origin attacks. An attacker could trigger the…

CVE-2016-8858HIGHCVSS 7.5EG 7.5

2016-12-09

The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH ups…

CVE-2016-9040MEDIUMCVSS 5.5EG 5.5

2018-09-07

An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when used with a 32 bit model. An attacke…

CVE-2016-9367HIGHCVSS 7.5EG 7.5

2017-02-13

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPo…

CVE-2016-9589HIGHCVSS 7.5EG 7.5

2018-03-12

Undertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of service. Undertow keeps a cache of seen HTTP headers in persistent connections. It was found that this cache can easily…

CWE-400— Uncontrolled Resource Consumption (Denial of Service)

CVEs classified under CWE-400page 3 of 65

Map vulnerabilities like CWE-400 to your infrastructure