← Back
CWE-770

2,664 CVEs • Abstraction: Base • Likelihood of Exploit: High

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

JSON object

Loading...

CVEs (2,664)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-1700
1Interwoven
1Worksite Web
Apr 23, 2026
Apr 8, 2008
N/A· v4
N/A· v3
7.1 HIGH· v2
The Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to cause a denial of service (memory consumption) via a large number of SendNrlLink directives, which...Show more
The Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to cause a denial of service (memory consumption) via a large number of SendNrlLink directives, which opens a separate window for each directive.Show less
CVE-2005-4650
1Joomla
1Joomla
Apr 16, 2026
Dec 31, 2005
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Joomla! 1.03 does not restrict the number of "Search" Mambots, which allows remote attackers to cause a denial of service (resource consumption) via a large number of Search Mambots.
CVE-2005-2970
4Apache
CanonicalFedoraproject+1 more
6Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+3 more
Apr 16, 2026
Oct 25, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transa...Show more
Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transaction pool from being reused for other connections.Show less
CVE-2001-1388
1Netfilter
1Iptables
Apr 16, 2026
Nov 5, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator.