Weaknesses of type CWE-755

243 results

Tratamento inadequado de condições excepcionais

Ocorre quando o código falha em capturar, validar ou responder adequadamente a erros e situações anormais. O programa continua executando com estado inválido, ignorando sinais de falha do sistema ou bibliotecas, permitindo que bugs se propaguem e criem vulnerabilidades de segurança.

Example

Uma aplicação tenta abrir um arquivo sem verificar se a operação falhou; se o arquivo não existe, a variável fica nula, e acessá-la depois causa crash ou comportamento impredizível. Ou um banco de dados retorna erro, mas o código ignora e usa dados vazios como válidos.

How to mitigate

Sempre capture exceções e erros explicitamente — use try/catch, verifique códigos de retorno e valores nulos antes de usar. Registre falhas em logs, falhe de forma segura (recuse a operação) e nunca assuma que uma chamada de função funcionou sem comprovação.

CVE-2020-15223HIGHIgnored storage errors on token revokation in ORY FositeEPSS 1.6%CVE-2025-10156CRITICALPickleScan Security Bypass via Bad CRC in ZIP ArchiveEPSS 1.5%CVE-2021-43173—Hanging RRDP requestEPSS 1.5%CVE-2020-7926MEDIUMSpecific query can cause a DoS against MongoDB ServerEPSS 1.4%CVE-2019-0060HIGHJunos OS: SRX Series: flowd process crash due to processing of specific transit IP packetsEPSS 1.3%CVE-2019-8462—In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management crashes with a unique coEPSS 1.3%CVE-2026-23666HIGH.NET Framework Denial of Service VulnerabilityEPSS 1.3%CVE-2021-40402CRITICALAn out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv 2.7.0 and dev (cEPSS 1.3%CVE-2020-25691—A flaw was found in darkhttpd. Invalid error handling allows remote attackers to cause denial-of-service by accessing a file with a large moEPSS 1.3%CVE-2022-23495HIGHProtoNode may be modified such that common method calls may panic in ipfs/go-merkledagEPSS 1.3%CVE-2020-7923MEDIUMSpecific GeoQuery can cause DoS against MongoDB ServerEPSS 1.3%CVE-2023-28631MEDIUMAttacker controlled data in AST nodes is not validated in comrakEPSS 1.3%CVE-2022-23625MEDIUMDoS vulnerability: Malformed Resource IdentifiersEPSS 1.2%CVE-2021-42141HIGHAn issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. One incorrect handshake could complete with different epoch numbers in thEPSS 1.2%CVE-2021-31353HIGHJunos OS and Junos OS Evolved: RPD core upon receipt of specific BGP updateEPSS 1.2%CVE-2020-1744MEDIUMA flaw was found in keycloak before version 9.0.1. When configuring an Conditional OTP Authentication Flow as a post login flow of an IDP, tEPSS 1.1%CVE-2023-4540HIGHDoS in lua-http libraryEPSS 1.1%CVE-2023-26479MEDIUMorg.xwiki.platform:xwiki-platform-rendering-parser vulnerable to Improper Handling of Exceptional ConditionsEPSS 1.1%CVE-2019-0051MEDIUMSRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature.EPSS 1.1%CVE-2020-1632HIGHJunos OS and Junos OS Evolved: Invalid BGP UPDATE sent to peer device may cause BGP session to terminate.EPSS 1.1%