Fallos del tipo CWE-404

748 resultados

Liberação ou encerramento inadequado de recursos

Quando o software não libera corretamente recursos (conexões de banco, arquivo aberto, memória alocada, socket de rede) após o uso. O programa continua consumindo esses recursos até ficar sem espaço ou conexões disponíveis, causando falhas, lentidão ou negação de serviço.

Ejemplo

Um servidor web abre uma conexão com banco de dados para cada requisição, mas esquece de fechar a conexão quando termina. Após centenas de requisições, todas as conexões disponíveis estão esgotadas e novas requisições falham.

Cómo mitigar

Use padrões como try-with-resources (Java), context managers (Python), ou equivalentes na sua linguagem para garantir liberação automática. Implemente timeouts e monitore uso de recursos em produção para detectar vazamentos cedo.

CVE-2026-78148MEDIUMggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereferenceEPSS 0.7%CVE-2026-2062MEDIUMOpen5GS PGW S5U Address sgwc_sxa_handle_session_modification_response null pointer dereferenceEPSS 0.7%CVE-2026-41869CRITICALApache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)EPSS 0.7%CVE-2025-14747MEDIUMNingyuanda TC155 RTSP Service denial of serviceEPSS 0.7%CVE-2026-103241MEDIUMvllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of serviceEPSS 0.7%CVE-2026-117503MEDIUMa2aproject a2a-go REST SSE handler rest.go resource consumptionEPSS 0.7%CVE-2026-1683MEDIUMFree5GC SMF PFCP handler.go HandlePfcpSessionReportRequest denial of serviceEPSS 0.7%CVE-2026-0731MEDIUMTOTOLINK WA1200 HTTP Request cstecgi.cgi null pointer dereferenceEPSS 0.7%CVE-2025-6365MEDIUMHobbesOSR Kitten pgtable.h set_pte_at resource consumptionEPSS 0.7%CVE-2026-92220MEDIUMvllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release_message resource consumptionEPSS 0.7%CVE-2026-84856MEDIUMrowboatlabs rowboat Composio Webhook Endpoint route.ts req.json denial of serviceEPSS 0.7%CVE-2026-82803MEDIUMarmink struct2json JSON Deserialization s2jdef.h S2J_STRUCT_GET_string_ELEMENT null pointer dereferenceEPSS 0.7%CVE-2026-86511MEDIUMjava-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString resource consumptionEPSS 0.7%CVE-2026-90582MEDIUMevanchiu serverless-todo API Todo Endpoint index.js saveTodos resource consumptionEPSS 0.7%CVE-2026-86319MEDIUMjava-json-tools json-patch Patch Operation JsonPatch.java JsonPatch.apply resource consumptionEPSS 0.7%CVE-2024-1189MEDIUMAMPPS Encryption Passphrase denial of serviceEPSS 0.7%CVE-2025-8802MEDIUMOpen5GS SMF smf-sm.c smf_state_operational denial of serviceEPSS 0.7%CVE-2025-20127HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 3100 and 4200 Series TLS Cipher Denial of Service VulnerabilityEPSS 0.7%CVE-2024-1199MEDIUMCodeAstro Employee Task Management System attendance-info.php denial of serviceEPSS 0.7%CVE-2026-2524MEDIUMOpen5GS MME mme_s11_handle_create_session_response denial of serviceEPSS 0.7%