Weaknesses of type CWE-755

274 results

Tratamento inadequado de condições excepcionais

Ocorre quando o código falha em capturar, validar ou responder adequadamente a erros e situações anormais. O programa continua executando com estado inválido, ignorando sinais de falha do sistema ou bibliotecas, permitindo que bugs se propaguem e criem vulnerabilidades de segurança.

Example

Uma aplicação tenta abrir um arquivo sem verificar se a operação falhou; se o arquivo não existe, a variável fica nula, e acessá-la depois causa crash ou comportamento impredizível. Ou um banco de dados retorna erro, mas o código ignora e usa dados vazios como válidos.

How to mitigate

Sempre capture exceções e erros explicitamente — use try/catch, verifique códigos de retorno e valores nulos antes de usar. Registre falhas em logs, falhe de forma segura (recuse a operação) e nunca assuma que uma chamada de função funcionou sem comprovação.

CVE-2024-50202MEDIUMnilfs2: propagate directory read errors from nilfs_find_entry()EPSS 0.2%CVE-2021-29618LOWCrash in `tf.transpose` with complex inputsEPSS 0.2%CVE-2025-53702HIGHDoS vulnerability in Vilar VS-IPC1002 IP camerasEPSS 0.2%CVE-2021-29617LOWCrash in `tf.strings.substr` due to `CHECK`-failEPSS 0.2%CVE-2023-24308HIGHA potential memory vulnerability due to insufficient input validation in PDFXEditCore.x64.dll in PDF-XChange Editor version 9.3 by Tracker SEPSS 0.2%CVE-2024-0108HIGHNVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping aEPSS 0.2%CVE-2026-55577MEDIUMImageMagick: Heap Buffer Overflow in ImageMagick MVG decoderEPSS 0.2%CVE-2021-23886MEDIUMLocal Denial of Service in McAfee DLP Endpoint for WindowsEPSS 0.2%CVE-2024-50176MEDIUMremoteproc: k3-r5: Fix error handling when power-up failedEPSS 0.2%CVE-2022-48619MEDIUMAn issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause a denial of service (panic) becauEPSS 0.2%CVE-2022-45155MEDIUMobs-service-go_modules: arbitrary directory deleteEPSS 0.2%CVE-2026-23762MEDIUMVB-Audio Voicemeeter & Matrix Drivers DoS via MmMapLockedPagesSpecifyCacheEPSS 0.2%CVE-2021-29619LOWSegfault in `tf.raw_ops.SparseCountSparseOutput`EPSS 0.2%CVE-2023-28114MEDIUM`cilium-cli` disables etcd authorization for clustermesh clustersEPSS 0.2%CVE-2022-25917MEDIUMUncaught exception in the firmware for some Intel(R) Server Board M50CYP Family before version R01.01.0005 may allow a privileged user to poEPSS 0.2%CVE-2026-72755LOWRoutinator stores TA certificate in cache without validationEPSS 0.2%CVE-2025-46733HIGHREE userspace code can panic TAs, leading to fTPM PCR reset and data disclosureEPSS 0.2%CVE-2025-30652MEDIUMJunos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crashEPSS 0.2%CVE-2024-51766MEDIUMHPE NonStop DISK UTIL, Local Denial of Service vulnerabilityEPSS 0.2%CVE-2024-37284MEDIUMElastic Defend Improper Handling of Alternate Encoding Leads to CrashEPSS 0.2%