Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-400 (未加控制的资源消耗(资源穷尽)) — Vulnerability Class 1385

1385 vulnerabilities classified as CWE-400 (未加控制的资源消耗(资源穷尽)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2022-27508 Unauthenticated denial of service — Citrix Application Delivery Controller (Citrix ADC) and Citrix Gateway 7.5 -2023-01-24
CVE-2023-22484 Inefficient Quadratic complexity bug in handle_pointy_brace may lead to a denial of service — cmark-gfm 3.5 Low2023-01-23
CVE-2023-22483 cmark-gfm Quadratic complexity bugs may lead to a denial of service — cmark-gfm 3.5 Low2023-01-23
CVE-2022-4816 Lenovo Safecenter 安全漏洞 — Safecenter 6.2 Medium2023-01-23
CVE-2023-20047 Cisco Webex 安全漏洞 — Cisco Webex Room Phone 6.5 Medium2023-01-19
CVE-2022-41861 SUSE Linux Enterprise Server 输入验证错误漏洞 — freeradius 6.5 -2023-01-17
CVE-2023-22470 Nextcloud Deck vulnerable to uncontrolled resource consumption — security-advisories 3.5 Low2023-01-14
CVE-2023-22396 Junos OS: Receipt of crafted TCP packets destined to the device results in MBUF leak leading to a Denial of Service (DoS) — Junos OS 7.5 High2023-01-12
CVE-2023-22400 Junos OS Evolved: A specific SNMP GET operation and a specific CLI commands cause resources to leak and eventually the evo-pfemand process will crash — Junos OS Evolved 7.5 High2023-01-12
CVE-2022-34335 IBM Sterling Partner Engagement Manager denial of service — Sterling Partner Engagement Manager 6.5 Medium2023-01-11
CVE-2023-21728 Windows Netlogon Denial of Service Vulnerability — Windows 10 Version 1809 7.5 High2023-01-10
CVE-2023-21543 Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability — Windows 10 Version 1809 8.1 High2023-01-10
CVE-2021-32821 Regular expression Denial of Service in MooTools — mootools-core 6.2 Medium2023-01-03
CVE-2022-4767 Denial of Service in usememos/memos — usememos/memos 7.5 -2022-12-27
CVE-2020-26302 is.js 资源管理错误漏洞 — is.js 7.5 High2022-12-23
CVE-2022-39164 IBM AIX denial of service — AIX 6.2 Medium2022-12-23
CVE-2022-39165 IBM AIX denial of service — AIX 6.2 Medium2022-12-23
CVE-2020-36620 Brondahl EnumStringValues EnumExtensions.cs GetStringValuesWithPreferences_Uncache resource consumption — EnumStringValues 3.5 Low2022-12-21
CVE-2022-23524 Helm vulnerable to Denial of service through string value parsing — helm 5.3 Medium2022-12-15
CVE-2022-45044 Siemens SIPROTEC 5 资源管理错误漏洞 — SIPROTEC 5 6MD84 (CP300) 5.3 Medium2022-12-13
CVE-2022-46351 Siemens SCALANCE Series 资源管理错误漏洞 — SCALANCE X204RNA (HSR) 7.5 -2022-12-13
CVE-2022-46352 Siemens SCALANCE Series 资源管理错误漏洞 — SCALANCE X204RNA (HSR) 7.5 -2022-12-13
CVE-2022-23492 go-libp2p denial of service vulnerability from lack of resource management — go-libp2p 7.5 High2022-12-08
CVE-2022-23471 containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak — containerd 5.7 Medium2022-12-07
CVE-2022-23487 libp2p denial of service vulnerability from lack of resource management — js-libp2p 7.5 High2022-12-07
CVE-2022-23486 libp2p-rust denial of service vulnerability from lack of resource management — rust-libp2p 7.5 High2022-12-07
CVE-2022-20691 Cisco ATA 190 资源管理错误漏洞 — Cisco Analog Telephone Adaptor (ATA) Software 5.3 Medium2022-12-07
CVE-2022-30122 RubyGem Rack 资源管理错误漏洞 — https://github.com/rack/rack 7.5 -2022-12-05
CVE-2022-41969 Nextcloud Server has no password length limit when creating a user as an administrator — security-advisories 2.4 Low2022-12-01
CVE-2022-41968 Nextcloud Server's calendar name length not validated before writing to database — security-advisories 3.5 Low2022-12-01

Vulnerabilities classified as CWE-400 (未加控制的资源消耗(资源穷尽)) represent 1385 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.