Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-400 (未加控制的资源消耗(资源穷尽)) — Vulnerability Class 1385

1385 vulnerabilities classified as CWE-400 (未加控制的资源消耗(资源穷尽)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-49716 Windows Netlogon Denial of Service Vulnerability — Windows Server 2008 R2 Service Pack 1 7.5 High2025-07-08
CVE-2025-6712 MongoDB Server may be susceptible to DoS due to Accumulated Memory Allocation — MongoDB Server 6.5 Medium2025-07-07
CVE-2025-53481 Denial of service vector on ipinfo/v0/norevision — Mediawiki - IPInfo Extension 7.5 -2025-07-04
CVE-2025-49595 n8n Vulnerable to Denial of Service via Malformed Binary Data Requests — n8n 4.9 Medium2025-07-03
CVE-2025-6817 HDF5 H5Centry.c H5C__load_entry resource consumption — HDF5 3.3 Low2025-06-28
CVE-2025-52887 cpp-httplib has unlimited number of http header fields, which causes memory leak — cpp-httplib 7.5 High2025-06-26
CVE-2025-6365 HobbesOSR Kitten pgtable.h set_pte_at resource consumption — Kitten 5.7 Medium2025-06-20
CVE-2025-6274 WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption — wabt 3.3 Low2025-06-19
CVE-2025-49763 Apache Traffic Server: Remote DoS via memory exhaustion in ESI Plugin — Apache Traffic Server 7.5AIHighAI2025-06-19
CVE-2025-6140 spdlog pattern_formatter-inl.h scoped_padder resource consumption — spdlog 3.3 Low2025-06-16
CVE-2025-3526 Liferay Portal和Liferay DXP 资源管理错误漏洞 — Portal 7.5AIHighAI2025-06-16
CVE-2025-3602 Liferay Portal和Liferay DXP 资源管理错误漏洞 — Portal 7.5AIHighAI2025-06-16
CVE-2025-33068 Windows Standards-Based Storage Management Service Denial of Service Vulnerability — Windows Server 2012 R2 7.5 High2025-06-10
CVE-2025-32724 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability — Windows 10 Version 1507 7.5 High2025-06-10
CVE-2025-3112 Schneider Electric Modicon Controllers 资源管理错误漏洞 — Modicon Controllers M241/M251 6.5 Medium2025-06-10
CVE-2025-48053 Discourse vulnerable to DoS via large URL payload in PM to a bot — discourse 4.3AIMediumAI2025-06-09
CVE-2025-25208 Rhcl: authorino denial of service through authpolicy with sharedsecretref severity 5.7 Medium2025-06-09
CVE-2025-41361 Uncontrolled resource consumption vulnerability in IDF and ZLF — IDF and ZLF 7.5AIHighAI2025-06-06
CVE-2025-41360 Uncontrolled resource consumption vulnerability in IDF and ZLF — IDF and ZLF 7.5AIHighAI2025-06-06
CVE-2025-49000 InvenTree has uncontrolled memory allocation via built-in label-sheet plugin — InvenTree 3.5 Low2025-06-03
CVE-2025-5024 Gnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdus — Red Hat Enterprise Linux 10 7.4 High2025-05-22
CVE-2025-5031 Ackites KillWxapkg wxapkg File Decompression resource consumption — KillWxapkg 3.1 Low2025-05-21
CVE-2025-41227 Denial-of-Service Vulnerability — ESXi 5.5 Medium2025-05-20
CVE-2025-41226 Guest Operations Denial-of-Service Vulnerability — ESXi 6.8 Medium2025-05-20
CVE-2025-26481 Dell PowerScale OneFS 资源管理错误漏洞 — PowerScale OneFS 7.5 High2025-05-15
CVE-2025-30476 Dell PowerScale InsightIQ 资源管理错误漏洞 — PowerScale InsightIQ 5.3 Medium2025-05-15
CVE-2025-29957 Windows Deployment Services Denial of Service Vulnerability — Windows 10 Version 1507 6.2 Medium2025-05-13
CVE-2025-29954 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability — Windows 10 Version 1507 5.9 Medium2025-05-13
CVE-2025-26677 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability — Windows Server 2016 7.5 High2025-05-13
CVE-2025-47270 nimiq-network-libp2p Uncontrolled Resource Consumption vulnerability — core-rs-albatross 7.5 High2025-05-12

Vulnerabilities classified as CWE-400 (未加控制的资源消耗(资源穷尽)) represent 1385 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.