Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-770 (不加限制或调节的资源分配) — Vulnerability Class 795

795 vulnerabilities classified as CWE-770 (不加限制或调节的资源分配). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-64508 Bugsink vulnerable to unauthenticated remote DoS via crafted Brotli input — bugsink 7.5 High2025-11-10
CVE-2025-36008 IBM Db2 denial of service — Db2 6.5 Medium2025-11-07
CVE-2025-36136 IBM denial of service — Db2 5.1 Medium2025-11-07
CVE-2025-53409 File Station 5 — File Station 5 5.0 -2025-11-07
CVE-2025-53410 File Station 5 — File Station 5 5.0 -2025-11-07
CVE-2025-53411 File Station 5 — File Station 5 6.8 -2025-11-07
CVE-2025-53413 File Station 5 — File Station 5 5.0 -2025-11-07
CVE-2025-46556 MantisBT is Vulnerable to Denial-of-Service (DoS) attack via Excessive Note Length — mantisbt 6.5 Medium2025-11-04
CVE-2025-11374 Consul's KV endpoint is vulnerable to denial of service — Consul 6.5 Medium2025-10-28
CVE-2025-11375 Consul's event endpoint is vulnerable to denial of service — Consul 6.5 Medium2025-10-28
CVE-2025-59459 Denial-of-service (DoS) via resource consumption — TLOC100-100 5.5 Medium2025-10-27
CVE-2025-10497 Allocation of Resources Without Limits or Throttling in GitLab — GitLab 7.5 High2025-10-27
CVE-2025-11974 Allocation of Resources Without Limits or Throttling in GitLab — GitLab 6.5 Medium2025-10-27
CVE-2025-11447 Allocation of Resources Without Limits or Throttling in GitLab — GitLab 7.5 High2025-10-27
CVE-2025-12044 Vault Vulnerable to Denial of Service Due to Rate Limit Regression — Vault 7.5 High2025-10-23
CVE-2025-62672 rplay 安全漏洞 — rplay 5.3 Medium2025-10-19
CVE-2025-62666 DoS vector through the cirrusbuilddoc query API — Mediawiki - CirrusSearch Extension 7.5AIHighAI2025-10-18
CVE-2025-11832 APIs Lack Rate Limiting — BLU-IC2 7.5AIHighAI2025-10-15
CVE-2025-59778 VELOS partition container network vulnerability — F5OS - Chassis 7.5 High2025-10-15
CVE-2025-55670 BIG-IP Next (CNF, SPK, and Kubernetes) vulnerability — BIG-IP Next SPK 6.5 Medium2025-10-15
CVE-2025-41430 BIG-IP SSL Orchestrator vulnerability — BIG-IP 7.5 High2025-10-15
CVE-2025-46706 BIG-IP iRules vulnerability — BIG-IP 7.5 High2025-10-15
CVE-2025-58474 BIG-IP Advanced WAF and ASM and NGINX App Protect DNS lookup vulnerability — BIG-IP 5.3 Medium2025-10-15
CVE-2025-55079 Missing check for thread priority — ThreadX 7.5AIHighAI2025-10-15
CVE-2025-9177 Rockwell Automation 1715 EtherNet/IP Comms Module Denial-Of-Service Vulnerability — 1715-AENTR EtherNet/IP Adapter 7.5AIHighAI2025-10-14
CVE-2025-41704 Phoenix Contact: Unauthenticated Modbus Service DoS via Crafted Function Code — QUINT4-UPS/24DC/24DC/5/EIP 5.3 Medium2025-10-14
CVE-2025-36171 IBM Aspera Faspex denial of service — Aspera Faspex 4.9 Medium2025-10-09
CVE-2025-10004 Allocation of Resources Without Limits or Throttling in GitLab — GitLab 7.5 High2025-10-09
CVE-2025-2934 Allocation of Resources Without Limits or Throttling in GitLab — GitLab 4.3 Medium2025-10-09
CVE-2025-11362 pdfmake 安全漏洞 — pdfmake 7.5 High2025-10-07

Vulnerabilities classified as CWE-770 (不加限制或调节的资源分配) represent 795 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.