CVSS: 7.7EPSS: %CPEs: -EXPL: 0CVE-2025-47281
https://notcve.org/view.php?id=CVE-2025-47281
22 Jul 2025 — Kyverno's Improper JMESPath Variable Evaluation Lead to Denial of Service •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2025-54134 – HAX CMS NodeJs's Improper Error Handling Leads to Denial of Service
https://notcve.org/view.php?id=CVE-2025-54134
21 Jul 2025 — HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend. In versions 11.0.8 and below, the HAX CMS NodeJS application crashes when an authenticated attacker provides an API request lacking required URL parameters. This vulnerability affects the listFiles and saveFiles endpoints. This vulnerability exists because the application does not properly handle exceptions which occur as a result of changes to user-modifiable URL parameters. This is fixed in version 11.0.9. • https://github.com/haxtheweb/haxcms-nodejs/blob/main/src/routes/listFiles.js#L22 • CWE-20: Improper Input Validation CWE-248: Uncaught Exception CWE-703: Improper Check or Handling of Exceptional Conditions •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2025-54121 – Starlette has possible denial-of-service vector when parsing large files in multipart forms
https://notcve.org/view.php?id=CVE-2025-54121
21 Jul 2025 — Starlette is a lightweight ASGI (Asynchronous Server Gateway Interface) framework/toolkit, designed for building async web services in Python. In versions 0.47.1 and below, when parsing a multi-part form with large files (greater than the default max spool size) starlette will block the main thread to roll the file over to disk. This blocks the event thread which means the application can't accept new connections. The UploadFile code has a minor bug where instead of just checking for self._in_memory, the lo... • https://github.com/encode/starlette/blob/fa5355442753f794965ae1af0f87f9fec1b9a3de/starlette/datastructures.py#L436C5-L447C14 • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 5.3EPSS: 0%CPEs: 2EXPL: 0CVE-2025-41679 – Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service
https://notcve.org/view.php?id=CVE-2025-41679
21 Jul 2025 — An unauthenticated remote attacker could exploit a buffer overflow vulnerability in the device causing a denial of service that affects only the network initializing wizard (Conftool) service. • https://certvde.com/de/advisories/VDE-2025-058 • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: -EXPL: 0CVE-2025-44650
https://notcve.org/view.php?id=CVE-2025-44650
21 Jul 2025 — This can cause DoS attacks when unlimited users are connected. • https://gist.github.com/TPCchecker/d13d15dfa8965ba88a9437718f77f67d • CWE-400: Uncontrolled Resource Consumption •
CVSS: 7.8EPSS: 0%CPEs: -EXPL: 0CVE-2025-44651
https://notcve.org/view.php?id=CVE-2025-44651
21 Jul 2025 — This can cause DoS attacks when unlimited users are connected. • http://trendnet.com • CWE-400: Uncontrolled Resource Consumption •
CVSS: 7.8EPSS: 0%CPEs: -EXPL: 0CVE-2025-44652
https://notcve.org/view.php?id=CVE-2025-44652
21 Jul 2025 — This can cause DoS attacks when unlimited users are connected. • https://www.netgear.com/about/security • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 7.8EPSS: 0%CPEs: -EXPL: 0CVE-2025-44653
https://notcve.org/view.php?id=CVE-2025-44653
21 Jul 2025 — This can cause DoS attacks when unlimited users are connected. • http://h3c.com • CWE-400: Uncontrolled Resource Consumption •
CVSS: 6.4EPSS: 0%CPEs: 7EXPL: 0CVE-2025-48964 – SUSE Security Advisory - SUSE-SU-2025:02431-1
https://notcve.org/view.php?id=CVE-2025-48964
21 Jul 2025 — ping in iputils through 20240905 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. • https://bugzilla.suse.com/show_bug.cgi?id=1243772 • CWE-190: Integer Overflow or Wraparound •
CVSS: 4.0EPSS: 0%CPEs: 3EXPL: 0CVE-2025-53901 – Wasmtime has host panic with `fd_renumber` WASIp1 function
https://notcve.org/view.php?id=CVE-2025-53901
18 Jul 2025 — A panic in the host is considered a denial-of-service vector for WebAssembly embedders and is thus a security issue in Wasmtime. • https://docs.wasmtime.dev/security-what-is-considered-a-security-vulnerability.html • CWE-672: Operation on a Resource after Expiration or Release •