Fallos del tipo CWE-248

291 resultados

Exceção Não Capturada

Quando o código não trata adequadamente exceções ou erros gerados durante a execução, permitindo que eles se propaguem sem controle. Isso causa interrupção inesperada do programa, possível revelação de informações sensíveis em mensagens de erro e deixa a aplicação em estado indefinido ou vulnerável.

Ejemplo

Um endpoint web tenta acessar um arquivo ou banco de dados sem try-catch; se o recurso não existir, a exceção não tratada expõe stack traces contendo caminhos internos, credenciais ou detalhes da infraestrutura para o cliente atacante.

Cómo mitigar

Implemente blocos try-catch específicos para cada operação que possa falhar (I/O, banco de dados, rede). Defina um mecanismo centralizado de tratamento de erros que logue internamente sem expor detalhes ao usuário final, e sempre finalize recursos (conexões, arquivos) em blocos finally ou use try-with-resources.

CVE-2026-46689HIGHKanidm: Unauthenticated process abort via SCIM filter stack exhaustionEPSS 0.3%CVE-2024-51518MEDIUMVulnerability of message types not being verified in the advanced messaging modul Impact: Successful exploitation of this vulnerability may EPSS 0.3%CVE-2026-55517MEDIUMDeno: Denial of service via non-ASCII bytes in WebSocket response headersEPSS 0.3%CVE-2026-53530HIGHratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)EPSS 0.3%CVE-2025-12423CRITICALDenial of Service - Protocol ManipulationEPSS 0.3%CVE-2026-89090HIGHDenial of service in the event stream header decoder in AWS SDK for Go v2EPSS 0.3%CVE-2025-53620CRITICALCrashing any Qwik ServerEPSS 0.3%CVE-2025-71391HIGHSurrealDB before 2.2.2 Denial of Service via /sql endpointEPSS 0.3%CVE-2026-46411MEDIUMFlashMQ: Client can trigger uncaught exception on FlashMQ 1.26.1 and olderEPSS 0.3%CVE-2026-23938LOWServer DoS via JavaScript preprocessing or script itemsEPSS 0.3%CVE-2026-72644MEDIUMUncaught Exception in Kibana Leading to Denial of ServiceEPSS 0.3%CVE-2026-1507HIGHUncaught Exception vulnerability in AVEVA PI Data ArchiveEPSS 0.3%CVE-2024-54106HIGHNull pointer dereference vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availaEPSS 0.3%CVE-2026-77078HIGHmulter vulnerable to Denial of Service via crafted multipart field namesEPSS 0.3%CVE-2024-20276HIGHA vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an EPSS 0.3%CVE-2025-59014MEDIUMDenial of Service in TYPO3 Bookmark ToolbarEPSS 0.3%CVE-2026-82058HIGHUnhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of ServiceEPSS 0.3%CVE-2026-88411HIGHImproper error handling in the GRAPH.EFFECT component (/effects/effects_apply.c) of FalkorDB (Redis module) v4.20.1 leads to a Denial of SerEPSS 0.3%CVE-2026-25577HIGHEmmett has an Unhandled CookieError Exception Causing Denial of ServiceEPSS 0.3%CVE-2026-54541LOWNimiq: Panic in TrieProof::verify via child_index unwrap on equal-length keysEPSS 0.3%