Weaknesses of type CWE-404

695 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2022-3684HIGHSDM600 endpoint vulnerability EPSS 0.6%CVE-2025-31237HIGHThis issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. MountinEPSS 0.6%CVE-2025-24811HIGHA vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211EPSS 0.6%CVE-2024-9787MEDIUMContemporary Control System BASrouter BACnet BASRT-B UDP Packet denial of serviceEPSS 0.6%CVE-2025-1150LOWGNU Binutils ld libbfd.c bfd_malloc memory leakEPSS 0.6%CVE-2023-4882HIGHMultiple vulnerabilities in Open5GSEPSS 0.6%CVE-2025-1151LOWGNU Binutils ld xmemdup.c xmemdup memory leakEPSS 0.6%CVE-2025-3122LOWWebAssembly wabt binary-reader-interp.cc BeginFunctionBody null pointer dereferenceEPSS 0.6%CVE-2022-39368HIGHCalifornium Failing DTLS handshakes causes Data Loss due to throttling blocking processing of recordsEPSS 0.6%CVE-2022-3647LOWRedis Crash Report debug.c sigsegvHandler denial of serviceEPSS 0.6%CVE-2024-2995MEDIUMNUUO Camera deletefile.php denial of serviceEPSS 0.6%CVE-2025-8800MEDIUMOpen5GS AMF esm-handler.c esm_handle_pdn_connectivity_request denial of serviceEPSS 0.6%CVE-2025-8803MEDIUMOpen5GS AMF gmm-sm.c gmm_state_exception denial of serviceEPSS 0.6%CVE-2024-3764LOWTuya SDK MQTT Packet denial of serviceEPSS 0.6%CVE-2024-28252HIGHCoreWCF NetFraming based services can leave connections open when they should be closedEPSS 0.6%CVE-2025-1149LOWGNU Binutils ld xmalloc.c xstrdup memory leakEPSS 0.6%CVE-2022-3619LOWLinux Kernel Bluetooth l2cap_core.c l2cap_recv_acldata memory leakEPSS 0.6%CVE-2026-1171MEDIUMbirkir prime GraphQL Field graphql denial of serviceEPSS 0.6%CVE-2026-1172MEDIUMbirkir prime GraphQL Directive graphql denial of serviceEPSS 0.6%CVE-2024-31611CRITICALSeaCMS 12.9 has a file deletion vulnerability via admin_template.php.EPSS 0.6%