#cwe-770

共收录 1181 条相关情报。

← 返回所有主题
漏洞预警2026-09-01 发布INFO

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a...

CVE-2026-72652

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). A user with elevated privil...

CVE-2026-56143

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Exce

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user with low-lev...

CVE-2026-33465

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive A

历史摘要 · 未重新核验 · NVD

安全公告2026-09-01 发布INFO

Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`

CVE-2026-73228

## Summary While investigating Django REST Framework's request parsing behavior, I identified that DRF's high-level `re

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-01 发布INFO

Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM

CVE-2026-73089

## Vulnerability Details **File**: `index.js` **Location**: `cache` (browserslist()'s result cache, line ~402) and `par

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-01 发布INFO

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versi...

CVE-2026-83615

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmld

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

The inets application HTTP server httpd fails to enforce a configured body-size limit on chunked request. This issue affects OTP from OTP 17.0 before OTP 27.3.4.17, from OTP 28...

CVE-2026-74835

The inets application HTTP server httpd fails to enforce a configured body-size limit on chunked request. This issue af

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by opening and ...

CVE-2026-70399

Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP inets httpd allows an unauthenticated r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server. The max_header_size option defaults to nolimit, and httpc...

CVE-2026-55951

The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server.

历史摘要 · 未重新核验 · NVD

安全公告2026-09-01 发布INFO

xmldom: Quadratic-memory consumption

CVE-2026-83615

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmld

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-01 发布INFO

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of...

CVE-2024-10085

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

A denial-of-service security issue exists within ArmorStart® LT. The security issue stems from improper handling of a crafted HTTP PUT request sent to the embedded web server. T...

CVE-2026-19472

A denial-of-service security issue exists within ArmorStart® LT. The security issue stems from improper handling of a cr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_typescript allows an unauthenticated attacker to exhaust the BEAM atom table and abort the ...

CVE-2026-77856

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_typescript allows an unauthenticat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_typescript allows an unauthenticated attacker to exhaust the BEAM atom table and abort the ...

CVE-2026-74837

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_typescript allows an unauthenticat

历史摘要 · 未重新核验 · NVD

安全公告2026-09-01 发布INFO

Unbounded atom creation from client-supplied RPC field names in AshTypescript field formatter

CVE-2026-74837

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_typescript allows an unauthenticat

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-01 发布INFO

Unbounded atom creation from typed struct field names in AshTypescript field selector

CVE-2026-77856

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_typescript allows an unauthenticat

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-31 发布INFO

Apache Wicket enforces the upload limits configured on a form or upload field while parsing a multipart request with Apache Commons FileUpload. If the request body has already b...

CVE-2026-71257

Apache Wicket enforces the upload limits configured on a form or upload field while parsing a multipart request with Apa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a Repeatable element has ...

CVE-2026-19873

HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query strin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration l...

CVE-2026-81624

Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles Web

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_admin lets any client that can reach the admin LiveView exhaust the BEAM atom table and cra...

CVE-2026-82722

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_admin lets any client that can rea

历史摘要 · 未重新核验 · NVD