Advisories · Weakness
Denial of service.
Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 6.5 Medium
ColdFusion | Uncontrolled Resource Consumption (CWE-400)
- Adobe ColdFusion 2025
- Adobe ColdFusion 2023
- Denial of service
- CVSS 8.7 High
Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing
- Denial of service
>=4.2.0.Final, <4.2.17.Final || <4.1.137.Final · fixed in 4.2.17.Final, 4.1.137.Final
GHSA-fccg-mwvh-qqg4 · CVE-2026-75596 - CVSS 7.5 High
LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process
- Denial of service
<10.27.2 · fixed in 10.27.2
GHSA-4r6h-5v86-94p3 · CVE-2026-69222 - CVSS 5.5 Medium
Resource allocation without limits in Google Android
- Google Android
- Denial of service
- CVSS 5.5 Medium
Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
- CVSS 5.5 Medium
Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
- CVSS 7.8 High
Windows Biometric Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
- Memory corruption
- CVSS 7.5 High
ASP.NET Core Denial of Service Vulnerability
- Microsoft AspNetCore.OData
- Denial of service
- CVSS 4.7 Medium
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
- CVSS 6.5 Medium
Windows DHCP Client Denial of Service Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Denial of service
- CVSS 7.5 High
Windows Active Directory Domain Services Denial of Service Vulnerability
- Microsoft Windows 11 version 23H2
- Microsoft Windows 11 Version 24H2
- Denial of service
- CVSS 6.5 Medium
Windows DHCP Server Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
- CVSS 5.7 Medium
Windows DHCP Server Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
- CVSS 6.5 Medium
Windows SMB Server Denial of Service Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Denial of service
- CVSS 7.5 High
Windows DHCP Server Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
- CVSS 5.9 Medium
Active Directory Federation Services (AD FS) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
- CVSS 7.5 High
Microsoft Exchange Server Denial of Service Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 14
- Denial of service
- CVSS 7.5 High
Windows TCP/IP Denial of Service Vulnerability
- Microsoft Windows 11 version 23H2
- Microsoft Windows 11 Version 24H2
- Denial of service
- CVSS 8.7 High
NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses
- Denial of service
<3.10.3 · fixed in 3.10.3
GHSA-97qj-x29f-37w7 · CVE-2026-78681 - CVSS 8.7 High
Uncontrolled Resource Consumption in MongoDB Sharded Cluster Router Allows Unauthenticated Denial of Service
- MongoDB Server
- Denial of service
- CVSS 7.1 High
Persistent Fatal Assertion Crash in MongoDB Server via Crafted Retryable Write Commands Leads to Denial of Service
- MongoDB Server
- Denial of service
- CVSS 7.1 High
Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata
- MongoDB Server
- Denial of service
- CVSS 8.7 High
Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Members
- MongoDB Server
- Denial of service
- CVSS 6.0 Medium
Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of Service
- MongoDB Server
- Denial of service
- CVSS 7.1 High
Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Service
- MongoDB Server
- Denial of service
- CVSS 7.1 High
$regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 chars
- MongoDB Server
- Denial of service
- CVSS 7.5 High
Excessive iteration in NVIDIA Triton Inference Server
- NVIDIA Triton Inference Server
- Denial of service
- CVSS 7.1 High
Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Field
- grokability snipe-it
- Denial of service
- CVSS 7.0 High
Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service
- WatchGuard Dimension
- Cross-site request forgery (CSRF)
- Denial of service
- CVSS 7.1 High
XenForo < 2.3.13 Uncontrolled Recursion DoS via BBCode Parser
- XenForo
- Denial of service
- CVSS 8.7 High
Uncontrolled resource consumption in Eclipse Foundation Eclipse Jetty
- Eclipse Foundation Eclipse Jetty
- Denial of service
- CVSS 7.1 High
Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml)
- qt
- Denial of service
- CVSS 8.7 High
Resource allocation without limits in Siemens Reyrolle 7SR5
- Siemens Reyrolle 7SR5
- Denial of service
- CVSS 7.5 High
WordPress WooCommerce plugin < 11.1.0 - Denial of Service Attack vulnerability
- Automattic WooCommerce
- Denial of service
- CVSS 5.3 Medium
vgmstream txtp txtp_parser.c add_entry resource consumption
- vgmstream
- Denial of service
- CVSS 6.9 Medium
java-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resources
- java-json-tools jackson-coreutils
- Denial of service
- CVSS 5.7 Medium
Resource allocation without limits in ASUS Armoury Crate
- ASUS Armoury Crate
- Denial of service
- CVSS 6.9 Medium
java-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString resource consumption
- java-json-tools jackson-coreutils
- Denial of service
- CVSS 2.2 Low
Denial of Service vulnerability in SAP Process Integration (SOAP Adapter)
- SAP_SE SAP Process Integration (SOAP Adapter)
- Denial of service
- CVSS 6.5 Medium
A buffer overflow in the SBC_DecodeFrames() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier and fixed in v.5.0 allows attackers to cause a Denial of Service (DoS…
- Denial of service
- CVSS 7.5 High
An issue in the btm_acl_handle() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP…
- Denial of service
- CVSS 8.2 High
Unauthenticated authorize requests create unbounded, never-expiring CIMD client rows and cache entries in ash_authentication_oauth2_server
- Denial of service
>=0.3.0, <0.3.1 · fixed in 0.3.1
GHSA-9pv3-wxjm-f846 · CVE-2026-82753 - CVSS 7.5 High
Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream table
- Denial of service
- CVSS 6.9 Medium
java-json-tools json-patch Patch Operation JsonPatch.java JsonPatch.apply resource consumption
- java-json-tools json-patch
- Denial of service
- CVSS 6.9 Medium
ggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertion
- ggml-org llama.cpp
- Denial of service
- CVSS 8.7 High
MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding
- MISP
- Denial of service
- CVSS 8.7 High
commonmark 1.5.0 before 2.8.4 Denial of Service via Footnote
- thephpleague commonmark
- Denial of service
- CVSS 8.7 High
commonmark 1.5.0 before 2.8.4 Denial of Service via Attributes
- thephpleague commonmark
- Denial of service
- CVSS 6.3 Medium
ImageMagick before 7.1.2-30 Memory Leak via MSL decoder
- ImageMagick
- Denial of service
- CVSS 6.3 Medium
ImageMagick before 7.1.2-30 Denial of Service Memory Budget
- ImageMagick
- Denial of service
- CVSS 3.5 Low
HCL MyXalytics is affected by multiple security vulnerabilities.
- HCL Software MyXalytics
- Denial of service
- CVSS 8.7 High
Resource allocation without limits in Eclipse Foundation Eclipse Jetty
- Eclipse Foundation Eclipse Jetty
- Denial of service
- CVSS 6.8 Medium
Eclipse Foundation Eclipse Ankaios: In Eclipse Ankaios versions 0.1.0 through 1.0.1…
- Eclipse Foundation Eclipse Ankaios
- Denial of service
- CWE-1284
- CVSS 7.1 High
MISP Missing Authorization on Template File Upload Allows Authenticated Disk Exhaustion
- MISP
- Denial of service
- Broken access control
- CVSS 5.3 Medium
Reachable assertion in MediaTek, Inc. MediaTek chipset
- MediaTek, Inc. MediaTek chipset
- Denial of service
- CVSS 5.3 Medium
Reachable assertion in MediaTek, Inc. MediaTek chipset
- MediaTek, Inc. MediaTek chipset
- Denial of service
- CVSS 7.5 High
Duplicate Advisory: H3: Unbounded Chunked Cookie Count in Session Cleanup Loop may Lead to Denial of Service
- Denial of service
>=2.0.0-beta.4 · no fixed version yet
GHSA-fg72-q65g-wm5w - CVSS 6.9 Medium
PocketMine-MP before 4.12.3 Denial of Service via Unauthenticated Sessions
- pmmp PocketMine-MP
- Denial of service
- CVSS 4.3 Medium
rpcapd memory leak in libpcap before 1.10.7
- The Tcpdump Group libpcap
- Denial of service
- CVSS 7.5 High
infinte loop in libpcap before 1.10.7
- The Tcpdump Group libpcap
- Denial of service