Weaknesses of type CWE-248

379 results

Exceção não capturada

Quando o código não trata adequadamente exceções lançadas durante a execução, permitindo que elas se propaguem sem controle. Isso pode expor informações sensíveis em mensagens de erro, causar parada inesperada do serviço ou deixar o sistema em estado inconsistente.

Example

Uma aplicação web que não captura exceções de banco de dados mostra ao usuário o stack trace completo com credenciais, caminho de arquivos ou consultas SQL. Ou um serviço de API que trava quando recebe um JSON malformado, sem retornar um erro controlado ao cliente.

How to mitigate

Implemente blocos try-catch em pontos críticos (I/O, banco de dados, operações sensíveis) e retorne erros genéricos ao usuário. Registre exceções em logs internos com contexto completo, sem expor detalhes técnicos na resposta pública. Use tratadores globais de exceções para garantir comportamento consistente e seguro.

CVE-2026-113872HIGHmulter vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardownEPSS 0.4%CVE-2026-34752HIGHHaraka affected by DoS via `__proto__` email headerEPSS 0.4%CVE-2026-95842HIGHMoquette uncaught MQTT command exceptions can terminate shared session event loopsEPSS 0.4%CVE-2026-115892MEDIUMWasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload typeEPSS 0.4%CVE-2024-38525HIGHdd-trace-cpp malformed unicode header values may cause crashEPSS 0.4%CVE-2018-11465—A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versEPSS 0.4%CVE-2026-53530HIGHratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)EPSS 0.4%CVE-2024-0754MEDIUMSome WASM source files could have caused a crash when loaded in devtools. This vulnerability affects Firefox < 122.EPSS 0.4%CVE-2025-43855HIGHtRPC 11 WebSocket DoS VulnerabilityEPSS 0.4%CVE-2026-72644MEDIUMUncaught Exception in Kibana Leading to Denial of ServiceEPSS 0.4%CVE-2026-101035MEDIUMaligungr UERANSIM nr-gnb encode.cpp DecodePlainMmMessage uncaught exceptionEPSS 0.4%CVE-2025-53365HIGHMCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of ServiceEPSS 0.4%CVE-2025-59229MEDIUMMicrosoft Office Denial of Service VulnerabilityEPSS 0.4%CVE-2023-5038HIGHUnauthenticated DoSEPSS 0.4%CVE-2026-82231HIGHApache bRPC: Malformed Thrift T_EXCEPTION reply causes process termination in Thrift clientEPSS 0.4%CVE-2025-66305MEDIUMGrav vulnerable to Denial of Service via Improper Input Handling in 'Supported' ParameterEPSS 0.4%CVE-2026-101918MEDIUMPyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)EPSS 0.4%CVE-2026-92081MEDIUMfastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responsesEPSS 0.4%CVE-2026-85024MEDIUMundici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompressionEPSS 0.4%CVE-2026-87123MEDIUMhbs vulnerable to Denial of Service via unhandled exception in async helper output escapingEPSS 0.4%