Vulnerabilities (CVE)

Filtered by CWE-400
Total 1942 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-28882 1 Trustwave 1 Modsecurity 2025-01-30 N/A 7.5 HIGH
Trustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service (worker crash and unresponsiveness) because some inputs cause a segfault in the Transaction class for some configurations.
CVE-2023-26595 1 Cybozu 1 Garoon 2025-01-28 N/A 6.5 MEDIUM
Denial-of-service (DoS) vulnerability in Message of Cybozu Garoon 4.10.0 to 5.9.2 allows a remote authenticated attacker to cause a denial of service condition.
CVE-2023-33297 1 Bitcoin 1 Bitcoin Core 2025-01-28 N/A 7.5 HIGH
Bitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of service (e.g., CPU consumption) because draining the inventory-to-send queue is inefficient, as exploited in the wild in May 2023.
CVE-2022-4008 1 Octopus 1 Octopus Server 2025-01-28 N/A 5.5 MEDIUM
In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service
CVE-2025-21270 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2025-01-27 N/A 7.5 HIGH
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-21231 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2025-01-27 N/A 7.5 HIGH
IP Helper Denial of Service Vulnerability
CVE-2025-21230 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2025-01-27 N/A 7.5 HIGH
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-21218 1 Microsoft 6 Windows Server 2012, Windows Server 2016, Windows Server 2019 and 3 more 2025-01-27 N/A 7.5 HIGH
Windows Kerberos Denial of Service Vulnerability
CVE-2025-21207 1 Microsoft 10 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 7 more 2025-01-27 N/A 7.5 HIGH
Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability
CVE-2023-28356 1 Rocket.chat 1 Rocket.chat 2025-01-27 N/A 7.5 HIGH
A vulnerability has been identified where a maliciously crafted message containing a specific chain of characters can cause the chat to enter a hot loop on one of the processes, consuming ~120% CPU and rendering the service unresponsive.
CVE-2024-12345 2025-01-27 4.3 MEDIUM 4.4 MEDIUM
A vulnerability classified as problematic was found in INW Krbyyyzo 25.2002. Affected by this vulnerability is an unknown functionality of the file /gbo.aspx of the component Daily Huddle Site. The manipulation of the argument s leads to resource consumption. It is possible to launch the attack on the local host. Other endpoints might be affected as well.
CVE-2025-21251 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2025-01-24 N/A 7.5 HIGH
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-21300 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2025-01-24 N/A 7.5 HIGH
Windows upnphost.dll Denial of Service Vulnerability
CVE-2025-21290 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2025-01-24 N/A 7.5 HIGH
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-21289 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2025-01-24 N/A 7.5 HIGH
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-0704 2025-01-24 5.0 MEDIUM 5.3 MEDIUM
A vulnerability, which was classified as problematic, was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. Affected is the function qrCode of the file src/main/java/io/github/controller/QrCodeController.java. The manipulation of the argument w/h leads to resource consumption. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
CVE-2023-21110 1 Google 1 Android 2025-01-24 N/A 7.8 HIGH
In several functions of SnoozeHelper.java, there is a possible way to grant notifications access due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-258422365
CVE-2023-20930 1 Google 1 Android 2025-01-24 N/A 5.5 MEDIUM
In pushDynamicShortcut of ShortcutPackage.java, there is a possible way to get the device into a boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-250576066
CVE-2024-25978 2 Fedoraproject, Moodle 2 Fedora, Moodle 2025-01-23 N/A 7.5 HIGH
Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality.
CVE-2025-21330 1 Microsoft 10 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 7 more 2025-01-21 N/A 7.5 HIGH
Windows Remote Desktop Services Denial of Service Vulnerability