#cwe-400

共收录 1360 条相关情报。

← 返回所有主题
漏洞预警2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130)

CVE-2026-94400

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130)

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

CVE-2026-94399

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

CVE-2026-94398

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

CVE-2026-94397

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

CVE-2026-94396

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).

CVE-2026-82300

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAP

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).

CVE-2026-82294

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAP

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-26 发布INFO

Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled resource consumption vulnerability in the QPACK encoder-strea...

CVE-2026-100662

Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled reso

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-26 发布INFO

Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.0.Final through 4.2.17.Final contain a denial-of-service vulnerability in the QPACK prefixed-integer decoder (Qpac...

CVE-2026-100661

Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.0.Final through 4.2.17.Final contain a denial-of-service

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-26 发布INFO

vLLM before 0.29.0 fails to enforce decoder prompt-length validation on the disaggregated serving endpoint /inference/v1/generate. When the request contains a 'features' (multim...

CVE-2026-100651

vLLM before 0.29.0 fails to enforce decoder prompt-length validation on the disaggregated serving endpoint /inference/v1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-26 发布INFO

vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls (the VLLM_MAX_AUDIO_CLIP_FILESIZE_MB compressed-audio si...

CVE-2026-100650

vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-26 发布INFO

vllm before 0.29.0 fails to enforce VLLM_MAX_AUDIO_CLIP_FILESIZE_MB limit in multimodal chat audio decoding, allowing unauthenticated clients to bypass file size restrictions. A...

CVE-2026-100648

vllm before 0.29.0 fails to enforce VLLM_MAX_AUDIO_CLIP_FILESIZE_MB limit in multimodal chat audio decoding, allowing un

历史摘要 · 未重新核验 · NVD

安全公告2026-09-26 发布INFO

Netty HTTP/3 QPACK encoder-stream unbounded memory exhaustion DoS

CVE-2026-100662

Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled reso

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-26 发布INFO

Netty HTTP/3 QPACK Prefixed Integer DoS via Unbounded Accumulation

CVE-2026-100661

Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.0.Final through 4.2.17.Final contain a denial-of-service

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-26 发布INFO

vllm before 0.29.0 Denial of Service via Decoder Prompt Length Bypass

CVE-2026-100651

vLLM before 0.29.0 fails to enforce decoder prompt-length validation on the disaggregated serving endpoint /inference/v1

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-26 发布INFO

vLLM before 0.29.0 Resource Exhaustion via Unbounded Media Materialization

CVE-2026-100650

vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-26 发布INFO

vllm before 0.29.0 Uncontrolled Resource Consumption via Audio Decoding

CVE-2026-100648

vllm before 0.29.0 fails to enforce VLLM_MAX_AUDIO_CLIP_FILESIZE_MB limit in multimodal chat audio decoding, allowing un

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-25 发布INFO

Containerd has image-pull DoS via crafted OCI index graph amplification

CVE-2026-53493

### Impact A vulnerability exists in containerd's image pull handlers where a crafted OCI image index containing deeply

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-25 发布INFO

Uncontrolled Resource Consumption (CWE-400 / CWE-1333) in regex search query predicates (such as...

CVE-2026-87722

Uncontrolled Resource Consumption (CWE-400 / CWE-1333) in regex search query predicates (such as RegexProjectPredicate,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-25 发布INFO

Uncontrolled Resource Consumption (CWE-400 / CWE-407) in the ANTLR 3 search query parser ...

CVE-2026-87721

Uncontrolled Resource Consumption (CWE-400 / CWE-407) in the ANTLR 3 search query parser (QueryParser / Query.g) in Gerr

历史摘要 · 未重新核验 · GitHub Advisory