Weaknesses of type CWE-404

748 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2024-28252HIGHCoreWCF NetFraming based services can leave connections open when they should be closedEPSS 0.6%CVE-2025-1149LOWGNU Binutils ld xmalloc.c xstrdup memory leakEPSS 0.6%CVE-2026-4988MEDIUMOpen5GS CCA Message smf_s6b denial of serviceEPSS 0.6%CVE-2026-2525MEDIUMFree5GC PFCP UDP Endpoint denial of serviceEPSS 0.6%CVE-2026-2984MEDIUMSourceCodester Student Result Management System drop_user.php denial of serviceEPSS 0.6%CVE-2026-4240MEDIUMOpen5GS CCA smf_s6b_sta_cb denial of serviceEPSS 0.6%CVE-2024-31611CRITICALSeaCMS 12.9 has a file deletion vulnerability via admin_template.php.EPSS 0.6%CVE-2026-84887MEDIUMsimular-ai Agent-S Model-generated GUI Action Execution Workflow grounding.py denial of serviceEPSS 0.6%CVE-2026-78250MEDIUMbytebot-ai bytebot Agent Execution Workflow infinite loopEPSS 0.6%CVE-2026-6985MEDIUMCesanta Mongoose TCP Option net_builtin.c handle_opt infinite loopEPSS 0.6%CVE-2024-23930MEDIUMPioneer DMH-WT7600NEX Media Service Improper Handling of Exceptional ConditionsEPSS 0.6%CVE-2025-4998HIGHH3C Magic R200G HTTP POST Request aspForm EditWlanMacList denial of serviceEPSS 0.6%CVE-2025-4997HIGHH3C R2+ProG HTTP POST Request aspForm SetAPInfoById denial of serviceEPSS 0.6%CVE-2025-67635HIGHJenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corEPSS 0.6%CVE-2024-57618HIGHAn issue in the bind_col_exp component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL stateEPSS 0.6%CVE-2026-90712MEDIUMGitlawb openclaude xAI OAuth Callback xaiOAuthCallback.ts waitForCallback denial of serviceEPSS 0.6%CVE-2022-44552HIGHThe lock screen module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availabEPSS 0.6%CVE-2026-8769MEDIUMvercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumptionEPSS 0.6%CVE-2026-3408MEDIUMOpen Babel CDXML File atom.cpp GetExplicitValence null pointer dereferenceEPSS 0.6%CVE-2026-117504MEDIUMa2aproject a2a-go Distributed Manager distributed_manager.go Cancel denial of serviceEPSS 0.6%