Skip to content

CWE-410 · weakness in Denial of Service

Insufficient Resource Pool

22 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

likely to be exploited
2

Every one of the 22 is a mark on the map. Named now: 1 to 22, most at risk first.

  1. A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP message header can lead t…CVE-2022-40224Moxa · CVSS 5.3 · 65% likely

    Moxa

  2. Denial of Service through Batched Queries in GraphQL in mlflow/mlflowCVE-2025-0453mlflow · CVSS 5.9 · 11% likely

    MLflow

  3. In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active conne…CVE-2022-2048The Eclipse Foundation · CVSS 7.5 · 2.6% likely

    Eclipse Foundation

  4. Kerberos Key Distribution Proxy Service Denial of Service VulnerabilityCVE-2025-27479Microsoft · CVSS 7.5 · 2.3% likely

    Microsoft

  5. A vulnerability has been identified in SIMATIC S7-1200 (All versions), SIMATIC S7-1500 (All Versions < V2.6). An attacker could exhaust the available connection pool of an affecte…CVE-2018-13815Siemens AG · 1.8% likely

    Siemens

  6. A vulnerability has been identified in SIMATIC WinAC RTX (F) 2010 (All versions < SP3 Update 1). Affected versions of the software contain a vulnerability that could allow an unau…CVE-2019-13921Siemens AG · 1.4% likely

    Siemens

  7. Cisco Embedded Wireless Controller Software for Catalyst Access Points Denial of Service VulnerabilityCVE-2021-1615Cisco · CVSS 8.6 · 1.3% likely

    Cisco

  8. Junos OS: MX Series: An MPC10 Denial of Service (DoS) due to OSPF states transitioning to Down, causes traffic to stop forwarding through the device.CVE-2019-0056Juniper Networks · CVSS 7.5 · 1.3% likely

    Juniper Networks

  9. A vulnerability in a feature that monitors RADIUS requests on Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to negatively affect th…CVE-2022-20937Cisco · CVSS 5.3 · 1.0% likely

    Cisco

  10. Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L series CPU module, MELSEC iQ-R Ethernet…CVE-2023-7033Mitsubishi Electric Corporation · CVSS 5.3 · 0.8% likely

    Mitsubishi Electric

  11. DietPi-Dashboard Insufficient TLS Handshake PoolCVE-2023-38505ravenclaw900 · CVSS 7.5 · 0.8% likely
  12. Dell PowerScale OneFS 8.2.x, 9.0.0.x - 9.4.0.x, contain an insufficient resource pool vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability…CVE-2022-46679Dell · CVSS 6.5 · 0.8% likely

    Dell

  13. Samba: dns signing dos via tkey name cache exhaustionCVE-2026-58218Red Hat · CVSS 5.3 · 0.8% likely

    Red Hat

  14. Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet SwitchesCVE-2025-41653Weidmueller · CVSS 7.5 · 0.6% likely

    Weidmueller

  15. ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service VulnerabilityCVE-2024-7392ChargePoint · CVSS 4.3 · 0.6% likely

    ChargePoint

  16. Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insufficient Resource Pool vulnerability. An unauthenticated attacker with remote access could potentially explo…CVE-2025-27694Dell · CVSS 5.3 · 0.4% likely

    Dell

  17. Junos OS: EX4300: PFE Denial of Service (DoS) upon receipt of a flood of specific ARP trafficCVE-2022-22191Juniper Networks · CVSS 6.5 · 0.4% likely

    Juniper Networks

  18. BIG-IP BFD vulnerabilityCVE-2026-34019F5 · CVSS 5.3 · 0.3% likely

    F5

  19. IBM Jazz Reporting Service Denial of ServiceCVE-2025-2134IBM · CVSS 3.5 · 0.2% likely

    IBM

  20. Insufficient Resource Pool in hMailServerCVE-2026-114472Progressive Robot Ltd · CVSS 3.7 · 0.2% likely

    Progressive Robot Ltd

  21. Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P DevicesCVE-2025-12986silabs.com · CVSS 6 · 0.2% likely

    Silicon Labs

  22. Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.CVE-2025-20103Intel(R) Processors · CVSS 6.5 · 0.2% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in