CWE-1050 · weakness in Denial of Service
Excessive Platform Resource Consumption within a Loop
15 CVEs
Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.
- A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKB…
- Kubernetes API Server denial of service vulnerability from malicious YAML payloads
- Memory Exhaustion in braces
- In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of…
- ModSecurity has possible DoS vulnerability in sanitiseArg action
- Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header
- Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters
- ModSecurity Has Possible DoS Vulnerability
- Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees
- Suricata http1: quadratic complexity in headers parsing over multiple packets
- Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding
- Suricata eve/alert: http1 xff handling can lead to denial of service
- A Denial of Service (DoS) vulnerability in evershop 2.1.0 and prior allows unauthenticated attackers to exhaust the application server's resources via the "GET /images" API. The a…
- Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly changing the active script. Compiled s…
- Denial of service via unsigned underflow in libXpm's write path
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.