CWE-400


Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

We have discovered 787,358 live websites that are affected by CWE-400.

Contact us to get more info







CVEs

  • Count - 164



Website Distribution by Country

Number of websites using CWE-400
United States257,243 websites


France178,469 websites
Russia68,689 websites
Germany39,867 websites
GB18,136 websites
Netherlands16,828 websites
China16,119 websites
Italy15,498 websites
Poland13,166 websites
Japan12,800 websites

Website Distribution by TLD

Number of websites using CWE-400
.com282,359 websites
.ru117,113 websites
.fr73,807 websites
.org30,130 websites
.de23,245 websites
.net21,142 websites
.it14,293 websites
.nl13,039 websites
.co.uk11,672 websites
.be11,576 websites

Newest CVEs

List of the most recent CVEs that are part of CWE-400
DiscoveredCVEDescriptionWebsites
Aug, 2026CVE-2026-62326 Weblate Has Uncontrolled Resource Consumption via78
Aug, 2026CVE-2026-15310 zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits455
Aug, 2026CVE-2026-68763 Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset3,412
Aug, 2026CVE-2026-18464 WP Maps Pro < 6.1.3 - Unauthenticated Denial of Service1,722
Aug, 2026CVE-2026-16265 WP Maps < 4.9.7 - Subscriber+ Denial of Service15
Aug, 2026CVE-2026-48834 Apache Answer: Denial of service via crafted Accept-Language header parsing10
Aug, 2026CVE-2026-71314 Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering1
Aug, 2026CVE-2026-69152 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation12
Aug, 2026CVE-2026-69244 AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)297
Jul, 2026CVE-2026-9322 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities5

The most widespread CVEs

List of the most common CVEs that are part of CWE-400
DiscoveredCVEDescriptionWebsites
May, 2020CVE-2019-11048 Temporary files are not cleaned after OOM when parsing HTTP request data270,105
Jan, 2021CVE-2021-21252 Regular expression denial of service in jquery-validation144,378
Feb, 2023CVE-2023-0662 DoS vulnerability when parsing multipart request body118,397
Jul, 2022CVE-2022-31129 Inefficient Regular Expression Complexity in moment64,348
Oct, 2023CVE-2023-43622 Apache HTTP Server: DoS in HTTP/2 with initial windows size 035,550
Jun, 2026CVE-2026-44496 Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection31,529
Jul, 2019CVE-2019-1010266 lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: D...30,034
Jun, 2026CVE-2026-54268 Angular: Denial of Service (DoS) via OOM in Date Formatting (formatDate)19,397
Jun, 2026CVE-2026-50171 Angular: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)18,140
Dec, 2023CVE-2023-35909 WordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Denial of Service Attack17,614

Websites affected by CWE-400

Top websites that are affected by CWE-400. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.com United States***
****************.de Germany***
***.******.edu United States***
***.***.edu United States***
*.cn China*,***
****.*********.net GB*,***
****************.com United States*,***
***.org Italy*,***
************.com United States*,***
***.org United States*,***
See full domain list