VulnSea

CWE-770

CVEs classified under CWE-770, newest first.

588 CVEsRSS

CVE-2026-0897High· 7.5PoC
8mo ago

Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a c…

Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a c…

▾ Midnightkeras · kerasEPSS 0.34%via NVD
CVE-2026-22773Medium· 6.5
8mo ago

vLLM is an inference and serving engine for large language models (LLMs)

vLLM is an inference and serving engine for large language models (LLMs). In versions from 0.6.4 to before 0.12.0, users can crash the vLLM engine serving multimodal models that use the Idefics3 vision model implementation by sending a s…

▾ Sunlitvllm · vllmEPSS 0.45%via NVD
CVE-2025-50334High· 7.5
8mo ago

An issue in Technitium DNS Server v.13.5 allows a remote attacker to cause a denial of service via the rate-limiting component

An issue in Technitium DNS Server v.13.5 allows a remote attacker to cause a denial of service via the rate-limiting component

▾ Twilighttechnitium · dnsserverEPSS 1.1%via NVD
CVE-2025-69228Medium· 6.8
8mo ago

aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request (CVE-2025-69228)

A flaw was found in aiohttp. A remote attacker can craft a malicious request that, when processed by an aiohttp server using the `Request.post()` method, causes the server's memory to fill uncontrollably. This can lead to a Denial of Servi…

▾ SunlitRed Hat · Red Hat OpenShift AI (RHOAI)EPSS 0.40%via CSAF
CVE-2025-69223High· 7.5
8mo ago

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that …

▾ Twilightaiohttp · aiohttpEPSS 0.57%via NVD
CVE-2025-66473High· 7.5
9mo ago

XWiki is an open-source wiki software platform

XWiki is an open-source wiki software platform. Versions 16.10.10 and below, 17.0.0-rc-1 through 17.4.3 and 17.5.0-rc-1 through 17.6.0 contain a REST API which doesn't enforce any limits for the number of items that can be requested in a…

▾ Twilightxwiki · xwikiEPSS 0.40%via NVD
CVE-2025-66418High· 7.5
9mo ago

urllib3 is a user-friendly HTTP client library for Python

urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of co…

▾ Twilightpython · urllib3EPSS 0.68%via NVD
CVE-2025-12385None
9mo ago

Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. T…

Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. T…

▾ SunlitEPSS 0.32%via NVD
CVE-2025-63402Medium· 5.5
9mo ago

An issue in HCL Technologies Limited HCLTech GRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via APIs do not enforcing limits on the number or size of requests

An issue in HCL Technologies Limited HCLTech GRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via APIs do not enforcing limits on the number or size of requests

▾ Sunlithcltech · dragonEPSS 0.33%via NVD
CVE-2025-62426Medium· 6.5
10mo ago

vllm: vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs` (CVE-2025-624…

A vulnerability in vLLM allows an authenticated user to trigger unintended tokenization during chat template processing by supplying crafted chat_template_kwargs to the /v1/chat/completions or /tokenize endpoints. By forcing the server to …

▾ SunlitRed Hat · Red Hat Enterprise Linux AI (RHEL AI)EPSS 0.37%via CSAF
CVE-2025-59089Medium· 5.9
10mo ago

If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g

If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g. through server-side request forgery), they can exploit the fact that kdcproxy does not enforce bounds on TCP response length to conduct a denial-of-serv…

▾ SunlitEPSS 0.52%via NVD
CVE-2025-12748Medium· 5.5PoC
10mo ago

A flaw was discovered in libvirt in the XML file processing

A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a…

▾ TwilightEPSS 0.21%via NVD
CVE-2025-11374Medium· 6.5
11mo ago

github.com/hashicorp/consul: Consul's KV endpoint is vulnerable to denial of service (CVE-2025-11374)

A denial of service flaw has been discovered in Hashicorp Consul. The key/value endpoint is vulnerable to denial of service (DoS) due to incorrect Content Length header validation.

▾ SunlitRed Hat · Red Hat OpenShift Dev SpacesEPSS 0.40%via CSAF
CVE-2025-56223High· 7.5PoC
11mo ago

A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS) via uploading an excessive number of files.

A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS) via uploading an excessive number of files.

▾ Midnightascertia · signinghubEPSS 0.46%via NVD
CVE-2025-61920High· 7.5
11mo ago

Authlib is vulnerable to Denial of Service via Oversized JOSE Segments

Authlib is vulnerable to Denial of Service via Oversized JOSE Segments

▾ Twilightauthlib · authlibEPSS 0.64%via OSV
CVE-2025-11362High· 7.5
11mo ago

Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding

Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to cra…

▾ Twilightpdfmake · pdfmakeEPSS 0.43%via NVD
CVE-2025-48041None
1y ago

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue aff…

▾ SunlitEPSS 0.39%via NVD
CVE-2025-48040None
1y ago

Uncontrolled Resource Consumption vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding

Uncontrolled Resource Consumption vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue affects OTP from OTP 1…

▾ SunlitEPSS 0.43%via NVD
CVE-2025-48039None
1y ago

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Resource Leak Exposure

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. …

▾ SunlitEPSS 0.39%via NVD
CVE-2025-48038None
1y ago

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Resource Leak Exposure

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. …

▾ SunlitEPSS 0.39%via NVD
CVE-2025-9784High· 7.5PoC
1y ago

A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters

A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive serv…

▾ Midnightredhat · build_of_apache_camel_for_spring_bootEPSS 2.3%via NVD
CVE-2025-58058Medium· 5.3
1y ago

xz is a pure golang package for reading and writing xz-compressed files

xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead …

▾ SunlitEPSS 0.41%via NVD
CVE-2025-6203High· 7.5
1y ago

A malicious user may submit a specially-crafted complex payload that otherwise meets the default request size limit which results in excessive memory and CPU consumption of Vault

A malicious user may submit a specially-crafted complex payload that otherwise meets the default request size limit which results in excessive memory and CPU consumption of Vault. This may lead to a timeout in Vault’s auditing subroutine…

▾ Twilighthashicorp · vaultEPSS 0.70%via NVD
CVE-2025-4437Medium· 5.7
1y ago

There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent user, CRI-O attempts to create the user, reading the container's entire /etc/passwd file into memo…

There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent user, CRI-O attempts to create the user, reading the container's entire /etc/passwd file into memo…

▾ SunlitEPSS 0.25%via NVD
CVE-2025-5683Medium· 5.5
1y ago

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash.  This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash.  This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.

▾ Sunlitqt · qtEPSS 0.24%via NVD
CVE-2025-4432Medium· 5.3
1y ago

A flaw was found in Rust's Ring package

A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to induce this panic by sending a specially crafted packet. It will likely occur unin…

▾ SunlitEPSS 0.99%via NVD
CVE-2025-32049High· 7.5
1y ago

A flaw was found in libsoup

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service (DoS).

▾ TwilightEPSS 0.86%via NVD
CVE-2025-2559Medium· 4.9
1y ago

A flaw was found in Keycloak

A flaw was found in Keycloak. When the configuration uses JWT tokens for authentication, the tokens are cached until expiration. If a client uses JWT tokens with an excessively long expiration time, for example, 24 or 48 hours, the cache…

▾ SunlitRed Hat · keycloakEPSS 0.69%via NVD
CVE-2025-26466Medium· 5.9PoC
1y ago

A flaw was found in the OpenSSH package

A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A …

▾ Twilightopenbsd · opensshEPSS 40%via NVD
CVE-2024-12254High· 7.5
1y ago

Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark"

Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of t…

▾ TwilightEPSS 1.9%via NVD
CWE-770 vulnerabilities (CVEs) — page 19 · VulnSea