Weaknesses of type CWE-184

202 results

Lista incompleta de entradas bloqueadas

Ocorre quando um aplicativo tenta bloquear entradas maliciosas usando uma lista de padrões ou valores proibidos, mas a lista é incompleta ou pode ser contornada. Um atacante descobre variações não contempladas (encoding diferente, casos alternativos, caracteres especiais) e consegue passar por uma validação que se supõe segura.

Example

Um formulário bloqueia SQL injection filtrando a palavra 'DROP', mas não 'dr0p', não '/*DROP*/' ou variações com espaços. Um atacante usa uma dessas formas para executar comandos SQL maliciosos que a lista de bloqueio não previu.

How to mitigate

Em vez de listar o que é proibido (blocklist), defina explicitamente o que é permitido (allowlist/whitelist) com validação rígida de formato. Use bibliotecas consolidadas de sanitização e escape específicas para cada contexto (SQL, HTML, JavaScript) — nunca confie em listas de palavras-chave.

CVE-2026-76072HIGHContinue CLI through 1.5.47 Incomplete Destructive Command Denylist in Headless and Auto ModeEPSS 0.5%CVE-2024-20278MEDIUMA vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate privileges to root EPSS 0.5%CVE-2020-5253LOWPrivilege escalation in NetHackEPSS 0.5%CVE-2026-22607HIGHFickling Blocklist Bypass: cProfile.run()EPSS 0.5%CVE-2026-84370HIGHSVGO: removeScripts allows executable links through namespace and control-character bypassesEPSS 0.5%CVE-2026-62200HIGHOpenClaw < 2026.6.6 Authentication Bypass via Git ext transportEPSS 0.5%CVE-2026-62203HIGHOpenClaw < 2026.6.6 Environment Variable Injection via rustupEPSS 0.5%CVE-2026-62199HIGHOpenClaw < 2026.6.6 Authentication Bypass via Environment FilteringEPSS 0.5%CVE-2026-31993MEDIUMOpenClaw < 2026.2.22 - Allowlist Parsing Mismatch in system.run Shell ChainsEPSS 0.5%CVE-2026-82536HIGHRoo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe OperatorEPSS 0.5%CVE-2023-45133CRITICALBabel vulnerable to arbitrary code execution when compiling specifically crafted malicious codeEPSS 0.5%CVE-2026-32747MEDIUMSiYuan: Incomplete sensitive path blocklist in globalCopyFiles allows reading /proc and Docker secretsEPSS 0.5%CVE-2026-40893HIGHGotenberg: ExifTool Dangerous Tag Blocklist Bypass via Group-Prefixed Tag Names Allows Arbitrary File Rename and MoveEPSS 0.5%CVE-2026-43578CRITICALOpenClaw 2026.3.31 < 2026.4.10 - Privilege Escalation via Missed Async Exec Completion Events in Heartbeat Owner DowngradeEPSS 0.5%CVE-2016-7076MEDIUMsudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp() C libraEPSS 0.5%CVE-2026-22606HIGHFickling has a bypass via runpy.run_path() and runpy.run_module()EPSS 0.5%CVE-2026-34426MEDIUMOpenClaw - Approval Bypass via Environment Variable NormalizationEPSS 0.5%CVE-2024-52595HIGHHTML Cleaner allows crafted scripts in special contexts like svg or math to pass throughEPSS 0.5%CVE-2026-15625MEDIUMnextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklistEPSS 0.5%CVE-2026-63671HIGH@nuxtjs/mdc: the URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configurationEPSS 0.5%