Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 9,060

Export CSV
CVE-2025-29954

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.

CVSS 3.1 · 5.9 Medium EPSS 1.5% KEV · Not listed
Vendors
Microsoft
Products
Windows 10 1507 Windows 10 1607 Windows 10 1809 and 18 more
CVE-2025-69229

AIOHTTP vulnerable to DoS through chunked messages

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, handling of chunked messages can result in excessive blocking CPU usage when receiving a large number of chunks. If an application makes use of the request.read() method in an endpoint, it may be possible for an attacker to cause the server to spend a moderate amount of blocking CPU time (e.g. 1 second) while processing the request. This could potentially lead to DoS as the server would be unable to handle other requests during that time. This issue is fixed in version 3.13.3.

CVSS 4.0 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Aio-libs Aio-libs Project Aiohttp
Products
Aiohttp Session Aiohttp Aio-libs and 1 more
CVE-2025-50172

DirectX Graphics Kernel Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows DirectX allows an authorized attacker to deny service over a network.

CVSS 3.1 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Microsoft
Products
Server Windows Windows 10 and 19 more
CVE-2025-37162

Authenticated Command Injection Vulnerability Leading to Arbitrary Remote Command Execution

A vulnerability in the command line interface of affected devices could allow an authenticated remote attacker to conduct a command injection attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Arubanetworks Hpe
Products
Arubaos Aruba Networking 100 Series Cellular Bridge
CVE-2025-8099

Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.8 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions, could have allowed an unauthenticated user to cause denial of service by sending repeated GraphQL queries.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Gitlab
Products
Gitlab
CVE-2025-59471

next: NextJS Denial of Service in Image Optimizer

A denial of service vulnerability exists in self-hosted Next.js applications that have `remotePatterns` configured for the Image Optimizer. The image optimization endpoint (`/_next/image`) loads external images entirely into memory without enforcing a maximum size limit, allowing an attacker to cause out-of-memory conditions by requesting optimization of arbitrarily large images. This vulnerability requires that `remotePatterns` is configured to allow image optimization from external domains and that the attacker can serve or control a large image on an allowed domain. Strongly consider upgrading to 15.5.10 or 16.1.5 to reduce risk and prevent availability issues in Next applications.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Vercel
Products
Next.js
CVE-2025-54155

File Station 5

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 and later

CVSS 4.0 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
File Station File Station 5
CVE-2025-54161

File Station 5

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5068 and later

CVSS 4.0 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
File Station File Station 5
CVE-2025-1823

IBM Jazz Reporting Service Denial of Service

IBM Jazz Reporting Service could allow an authenticated user on the host network to cause a denial of service using specially crafted SQL query that consumes excess memory resources.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Ibm
Products
Jazz Reporting Service
CVE-2025-64090

Authenticated Remote Code Execution in device hostname

This vulnerability allows authenticated attackers to execute commands via the hostname of the device.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Zenitel
Products
Tcis-3 Tcis-3+ Tcis-3 Firmware
CVE-2025-67221

orjson: orjson: Denial of Service due to unbounded recursion with deeply nested JSON documents

The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Ijl
Products
Orjson
CVE-2025-57708

Qsync Central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
Qsync Central Qsync Central
CVE-2025-57710

Qsync Central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

CVSS 4.0 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
Qsync Central Qsync Central
CVE-2025-57711

Qsync Central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

CVSS 4.0 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
Qsync Central Qsync Central
CVE-2025-58471

Qsync Central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: Qsync Central 5.2.0.1 ( 2025/12/21 ) and later

CVSS 4.0 · 1.2 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
Qsync Central Qsync Central
CVE-2025-54149

Qsync Central

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

CVSS 4.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
Qsync Central Qsync Central
CVE-2025-54150

Qsync Central

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

CVSS 4.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
Qsync Central Qsync Central
CVE-2025-54151

Qsync Central

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

CVSS 4.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
Qsync Central Qsync Central