Weaknesses of type CWE-755

274 results

Tratamento inadequado de condições excepcionais

Ocorre quando o código falha em capturar, validar ou responder adequadamente a erros e situações anormais. O programa continua executando com estado inválido, ignorando sinais de falha do sistema ou bibliotecas, permitindo que bugs se propaguem e criem vulnerabilidades de segurança.

Example

Uma aplicação tenta abrir um arquivo sem verificar se a operação falhou; se o arquivo não existe, a variável fica nula, e acessá-la depois causa crash ou comportamento impredizível. Ou um banco de dados retorna erro, mas o código ignora e usa dados vazios como válidos.

How to mitigate

Sempre capture exceções e erros explicitamente — use try/catch, verifique códigos de retorno e valores nulos antes de usar. Registre falhas em logs, falhe de forma segura (recuse a operação) e nunca assuma que uma chamada de função funcionou sem comprovação.

CVE-2024-47491HIGHJunos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crashEPSS 0.6%CVE-2024-45038HIGHDevice crash via malformed MQTT packet when downlink is enabled in Meshtastic device firmwareEPSS 0.6%CVE-2024-39552HIGHJunos OS and Junos OS Evolved: Malformed BGP UPDATE causes RPD crashEPSS 0.6%CVE-2024-51744LOWBad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwtEPSS 0.6%CVE-2024-32001LOWSpiceDB: LookupSubjects may return partial results if a specific kind of relation is usedEPSS 0.6%CVE-2026-102274MEDIUMPyJWT: Malformed RSA JWK aborts parsing of an entire JWK SetEPSS 0.5%CVE-2023-38419MEDIUMBIG-IP and BIG-IQ iControl SOAP vulnerabilityEPSS 0.5%CVE-2025-68274HIGHSIPGO library has response DoS vulnerability via nil pointer dereferenceEPSS 0.5%CVE-2024-11864HIGHSCP-Firmware VulnerabilityEPSS 0.5%CVE-2026-21906HIGHJunos OS: SRX Series: With GRE performance acceleration enabled, receipt of a specific ICMP packet causes the PFE to crashEPSS 0.5%CVE-2022-22202MEDIUMJunos OS: PTX Series: FPCs may restart unexpectedly upon receipt of specific MPLS packets with certain multi-unit interface configurationsEPSS 0.5%CVE-2026-59927MEDIUMMistune directives/include: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown filesEPSS 0.5%CVE-2026-103936HIGHlibp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct Node.js listenersEPSS 0.5%CVE-2024-52529MEDIUMLayer 7 policy enforcement may not occur in policies with wildcarded port ranges in CiliumEPSS 0.5%CVE-2024-36730HIGHImproper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting negative values iEPSS 0.5%CVE-2023-52075HIGHReVanced API vulnerable to Denial of Service due to lack of error cachingEPSS 0.5%CVE-2023-50212MEDIUMD-Link G416 httpd Improper Handling of Exceptional Conditions Information Disclosure VulnerabilityEPSS 0.5%CVE-2023-41332LOWDenial of service via Kubernetes annotations in specific Cilium configurationsEPSS 0.5%CVE-2026-48036HIGHHulumi: Drift classifier fails open on adapter errors and over-promotes Mixed verdictsEPSS 0.5%CVE-2020-1681MEDIUMJunos OS Evolved: Receipt of a specifically malformed NDP packet could lead to Denial of ServiceEPSS 0.5%