Weaknesses of type CWE-755

274 results

Tratamento inadequado de condições excepcionais

Ocorre quando o código falha em capturar, validar ou responder adequadamente a erros e situações anormais. O programa continua executando com estado inválido, ignorando sinais de falha do sistema ou bibliotecas, permitindo que bugs se propaguem e criem vulnerabilidades de segurança.

Example

Uma aplicação tenta abrir um arquivo sem verificar se a operação falhou; se o arquivo não existe, a variável fica nula, e acessá-la depois causa crash ou comportamento impredizível. Ou um banco de dados retorna erro, mas o código ignora e usa dados vazios como válidos.

How to mitigate

Sempre capture exceções e erros explicitamente — use try/catch, verifique códigos de retorno e valores nulos antes de usar. Registre falhas em logs, falhe de forma segura (recuse a operação) e nunca assuma que uma chamada de função funcionou sem comprovação.

CVE-2025-34193HIGHVasion Print (formerly PrinterLogic) Insecure Windows Components Lack Modern Memory Protections and Use Outdated RuntimesEPSS 0.8%CVE-2026-89025HIGHHirschmann HiOS Switch Platform DoS via Malformed HTTP RequestEPSS 0.8%CVE-2026-53459CRITICALBambuddy's authentication fails open on database errors, allowing unauthenticated access to all endpointsEPSS 0.8%CVE-2024-23325HIGHEnvoy crashes when using an address type that isn’t supported by the OSEPSS 0.8%CVE-2024-8376HIGHMemory leakEPSS 0.7%CVE-2024-20699MEDIUMWindows Hyper-V Denial of Service VulnerabilityEPSS 0.7%CVE-2023-27595MEDIUMCilium eBPF filters may be temporarily removed during agent restartEPSS 0.7%CVE-2021-0297MEDIUMJunos OS Evolved: BGP and LDP sessions with TCP MD5 authentication established with peers not configured for authenticationEPSS 0.7%CVE-2022-0023MEDIUMPAN-OS: Denial-of-Service (DoS) Vulnerability in DNS ProxyEPSS 0.7%CVE-2023-6267HIGHQuarkus: json payload getting processed prior to security checks when rest resources are used with annotations.EPSS 0.7%CVE-2026-54632HIGHSIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS)EPSS 0.7%CVE-2024-30382HIGHJunos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configuredEPSS 0.7%CVE-2025-27465MEDIUMx86: Incorrect stubs exception handling for flags recoveryEPSS 0.7%CVE-2023-25644MEDIUMDenial of Service Vulnerability in Some ZTE Mobile Internet ProductsEPSS 0.7%CVE-2022-44030HIGHRedmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks. DependiEPSS 0.7%CVE-2026-112330HIGHMotor.NET < 0.19.0 RabbitMQ Denial of Service via CloudEvents HeadersEPSS 0.7%CVE-2026-112331HIGHMotor.NET < 0.19.0 Kafka Denial of Service via Structured CloudEvent MappingEPSS 0.7%CVE-2025-8008HIGHRockwell Automation 1756-ENT2R, EN4TR, EN4TRXT VulnerabilityEPSS 0.7%CVE-2023-48232LOWFloating point Exception in adjust_plines_for_skipcol() in vimEPSS 0.7%CVE-2025-58047HIGHVolto affected by possible DoS by invoking specific URL by anonymous userEPSS 0.7%