Weaknesses of type CWE-404

748 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2026-92365MEDIUMvllm-project vllm thinking_budget_state.py algorithmic complexityEPSS 0.5%CVE-2026-82552MEDIUMLinux Foundation Magma gNB Termination ngap_amf.c denial of serviceEPSS 0.5%CVE-2026-84287MEDIUMNousResearch hermes-agent Session Chat api_server.py denial of serviceEPSS 0.5%CVE-2024-20905LOWVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versEPSS 0.5%CVE-2026-92356MEDIUMa2ui-project a2ui Update Components basic_functions.ts updateComponents resource consumptionEPSS 0.5%CVE-2026-84833MEDIUMntegrals openbrowser Browser Agent Message Construction agent.ts resource consumptionEPSS 0.5%CVE-2026-8224MEDIUMOpen5GS PCF context.c pcf_sess_set_ipv6prefix denial of serviceEPSS 0.5%CVE-2024-9399HIGHA website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service conEPSS 0.5%CVE-2025-6401MEDIUMTOTOLINK N300RH HTTP POST Message formFilter denial of serviceEPSS 0.5%CVE-2026-8225MEDIUMOpen5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_handle_delete denial of serviceEPSS 0.5%CVE-2026-8226MEDIUMOpen5GS types.c ogs_pcc_rule_install_flow_from_media denial of serviceEPSS 0.5%CVE-2026-1875HIGHDenial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series EtherNet/IP moduleEPSS 0.5%CVE-2025-3535MEDIUMshuanx BurpAPIFinder BurpApiFinder.db denial of serviceEPSS 0.5%CVE-2026-1876HIGHDenial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series Ethernet moduleEPSS 0.5%CVE-2022-35272HIGHBIG-IP HTTP MRF vulnerability CVE-2022-35272EPSS 0.5%CVE-2026-8223MEDIUMOpen5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send denial of serviceEPSS 0.5%CVE-2023-5255MEDIUMDenial of Service for Revocation of Auto Renewed CertificatesEPSS 0.5%CVE-2025-4444MEDIUMTor Onion Service Descriptor resource consumptionEPSS 0.5%CVE-2024-23248MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.4. Processing a file may lead to a denial-of-sEPSS 0.5%CVE-2026-8248MEDIUMOpen5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of serviceEPSS 0.5%