Weaknesses of type CWE-184

245 results

Lista incompleta de entradas bloqueadas

Ocorre quando um aplicativo tenta bloquear entradas maliciosas usando uma lista de padrões ou valores proibidos, mas a lista é incompleta ou pode ser contornada. Um atacante descobre variações não contempladas (encoding diferente, casos alternativos, caracteres especiais) e consegue passar por uma validação que se supõe segura.

Example

Um formulário bloqueia SQL injection filtrando a palavra 'DROP', mas não 'dr0p', não '/*DROP*/' ou variações com espaços. Um atacante usa uma dessas formas para executar comandos SQL maliciosos que a lista de bloqueio não previu.

How to mitigate

Em vez de listar o que é proibido (blocklist), defina explicitamente o que é permitido (allowlist/whitelist) com validação rígida de formato. Use bibliotecas consolidadas de sanitização e escape específicas para cada contexto (SQL, HTML, JavaScript) — nunca confie em listas de palavras-chave.

CVE-2024-51745LOWWasmtime doesn't fully sandbox all the Windows device filenamesEPSS 0.8%CVE-2025-71320CRITICALpicklescan - Remote Code Execution via Incomplete Disallowed InputsEPSS 0.8%CVE-2022-23536MEDIUMAlertmanager can expose local files content via specially crafted configEPSS 0.8%CVE-2020-3384HIGHCisco Data Center Network Manager Command Injection VulnerabilityEPSS 0.8%CVE-2026-17630HIGHLangflow is affected by security vulnerabilities in Model Context Protocol featuresEPSS 0.8%CVE-2026-96196HIGHMicrosoft Edge (Chromium-based) Security Feature Bypass VulnerabilityEPSS 0.8%CVE-2026-79696CRITICALRemote Code Execution in Google ADK for Python via Incomplete Standard Library DenylistEPSS 0.7%CVE-2026-69624MEDIUMActive Directory Certificate Services (AD CS) Tampering VulnerabilityEPSS 0.7%CVE-2026-105791HIGHMicrosoft UFO: Arbitrary code execution in `run_shell` via `explorer.exe` argument injectionEPSS 0.7%CVE-2026-57138CRITICALPraisonAI codeMode sandbox escape via Function constructorEPSS 0.7%CVE-2026-77124HIGHNexus Repository 3 - Script Execution Disable Setting Not EnforcedEPSS 0.7%CVE-2026-105789MEDIUMMicrosoft UFO: Arbitrary file write in the Linux MCP `execute_command` toolEPSS 0.7%CVE-2023-3374CRITICALPrivilege Escalation in BookreenEPSS 0.7%CVE-2026-74886CRITICALopenssl_encrypt before 1.4.0 Plugin Import Guard BypassEPSS 0.7%CVE-2021-1255MEDIUMCisco Data Center Network Manager REST API VulnerabilitiesEPSS 0.7%CVE-2026-101882HIGHOpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.setEPSS 0.7%CVE-2026-13448HIGHLangflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpointsEPSS 0.7%CVE-2026-69263HIGHFlowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)EPSS 0.7%CVE-2026-113605HIGHStirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-databaseEPSS 0.7%CVE-2026-108976HIGHGNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list EPSS 0.6%