CVEbaza.pl › CWE Dictionary › CWE-1049
Common Weakness Enumeration

CWE-1049

Excessive Data Query Operations in a Large Data Table

Category: BaseCVE: 3
Description

The product performs a data query with a large number of joins and sub-queries on a large data table.

CVE vulnerabilities with CWE-1049 (3)
7.5
CVSS
HIGH
CVE-2025-0190

In version 3.25.0 of aimhubio/aim, a denial of service vulnerability exists. By tracking a large number of `Text` objects and then querying them simultaneously through the web API, the Aim web server becomes unresponsive to other requests for an extended period while processing and returning these objects. This vulnerability can be exploited repeatedly, leading to a complete denial of service.

pub. 2025-03-20
7.5
CVSS
HIGH
CVE-2019-8460

OpenBSD kernel version <= 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcp_sack_option() for every incoming SACK packet which can lead to a denial of service.

pub. 2019-08-26
6.5
CVSS
MEDIUM
CVE-2023-5192

Excessive Data Query Operations in a Large Data Table in GitHub repository pimcore/demo prior to 10.3.0.

pub. 2023-09-27
Information
ID: CWE-1049
Type: Base
Vulnerabilities: 3
MITRE CWE ↗
← CWE Dictionary