Weaknesses of type CWE-755

274 results

Tratamento inadequado de condições excepcionais

Ocorre quando o código falha em capturar, validar ou responder adequadamente a erros e situações anormais. O programa continua executando com estado inválido, ignorando sinais de falha do sistema ou bibliotecas, permitindo que bugs se propaguem e criem vulnerabilidades de segurança.

Example

Uma aplicação tenta abrir um arquivo sem verificar se a operação falhou; se o arquivo não existe, a variável fica nula, e acessá-la depois causa crash ou comportamento impredizível. Ou um banco de dados retorna erro, mas o código ignora e usa dados vazios como válidos.

How to mitigate

Sempre capture exceções e erros explicitamente — use try/catch, verifique códigos de retorno e valores nulos antes de usar. Registre falhas em logs, falhe de forma segura (recuse a operação) e nunca assuma que uma chamada de função funcionou sem comprovação.

CVE-2024-47489MEDIUMJunos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly processed by the REEPSS 0.7%CVE-2026-59162MEDIUMExcelize: Negative shared-string index causes panic in GetCellValue and GetRowsEPSS 0.7%CVE-2021-38363HIGHAn issue was discovered in ONOS 2.5.1. In IntentManager, the install-requested intent (which causes an exception) remains in pendingMap (in EPSS 0.7%CVE-2023-44186HIGHJunos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighborEPSS 0.6%CVE-2023-36832HIGHJunos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interfaceEPSS 0.6%CVE-2022-39380MEDIUMwire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown RenderingEPSS 0.6%CVE-2024-6594HIGHWatchGuard Firebox Single Sign-On Client Denial-of-ServiceEPSS 0.6%CVE-2023-22391HIGHJunos OS: ACX2K Series: Receipt of a high rate of specific traffic will lead to a Denial of Service (DoS)EPSS 0.6%CVE-2026-112332HIGHMotor.NET < 0.19.0 Denial of Service via JsonNet DeserializationEPSS 0.6%CVE-2024-21585MEDIUMJunos OS and Junos OS Evolved: BGP session flaps on NSR-enabled devices can cause rpd crashEPSS 0.6%CVE-2023-41085HIGHBIG-IP IPSEC vulnerabilityEPSS 0.6%CVE-2024-47609MEDIUMRemotely exploitable DoS in Tonic `<=v0.12.2`EPSS 0.6%CVE-2024-41886MEDIUMImproper Input ValidationEPSS 0.6%CVE-2024-7521CRITICALIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14,EPSS 0.6%CVE-2023-24510HIGHOn the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.EPSS 0.6%CVE-2023-4537HIGHProtocol Downgrade in Comarch ERP XLEPSS 0.6%CVE-2026-52856HIGHWings: Maliciously crafted packet during SFTP connection handshake causes denial of serviceEPSS 0.6%CVE-2026-81515HIGHSteeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)EPSS 0.6%CVE-2026-81516HIGHSteeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)EPSS 0.6%CVE-2026-54775MEDIUMCoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.EPSS 0.6%