Weaknesses of type CWE-755

243 results

Tratamento inadequado de condições excepcionais

Ocorre quando o código falha em capturar, validar ou responder adequadamente a erros e situações anormais. O programa continua executando com estado inválido, ignorando sinais de falha do sistema ou bibliotecas, permitindo que bugs se propaguem e criem vulnerabilidades de segurança.

Example

Uma aplicação tenta abrir um arquivo sem verificar se a operação falhou; se o arquivo não existe, a variável fica nula, e acessá-la depois causa crash ou comportamento impredizível. Ou um banco de dados retorna erro, mas o código ignora e usa dados vazios como válidos.

How to mitigate

Sempre capture exceções e erros explicitamente — use try/catch, verifique códigos de retorno e valores nulos antes de usar. Registre falhas em logs, falhe de forma segura (recuse a operação) e nunca assuma que uma chamada de função funcionou sem comprovação.

CVE-2026-45819MEDIUMbaseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigEPSS 0.4%CVE-2026-27195MEDIUMWasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` futureEPSS 0.4%CVE-2026-49235HIGHRoutinator crashes on specifically crafted RRDP XML filesEPSS 0.4%CVE-2024-39526HIGHJunos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packetsEPSS 0.4%CVE-2026-40074MEDIUMSvelteKit's invalidated redirect in handle hook causes Denial-of-ServiceEPSS 0.4%CVE-2025-9437HIGHRockwell Automation ArmorStart® AOP Denial-of-Service VulnerabilityEPSS 0.4%CVE-2026-55577MEDIUMImageMagick: Heap Buffer Overflow in ImageMagick MVG decoderEPSS 0.4%CVE-2026-9516HIGHCpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throwsEPSS 0.4%CVE-2026-48524LOWPyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)EPSS 0.4%CVE-2025-4649MEDIUMACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.EPSS 0.4%CVE-2022-44652HIGHAn improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker EPSS 0.4%CVE-2026-49232HIGHRoutinator exits when accepting an incoming HTTP or RTR connection failsEPSS 0.3%CVE-2026-81515HIGHSteeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)EPSS 0.3%CVE-2026-81516HIGHSteeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)EPSS 0.3%CVE-2020-1643MEDIUMJunos OS: EX Series: RPD crash when executing specific "show ospf interface" commands from the CLI with OSPF authentication configuredEPSS 0.3%CVE-2026-52856HIGHWings: Maliciously crafted packet during SFTP connection handshake causes denial of serviceEPSS 0.3%CVE-2024-39541HIGHJunos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crashEPSS 0.3%CVE-2025-69255MEDIUMRustFS gRPC GetMetrics deserialization panic enables remote DoSEPSS 0.3%CVE-2026-8162HIGHmultiparty vulnerable to Denial of Service via Uncaught Exception in filename* parameter parsingEPSS 0.3%CVE-2023-3280MEDIUMCortex XDR Agent: Local Windows User Can Disable the AgentEPSS 0.3%