Fallos del tipo CWE-404

748 resultados

Liberação ou encerramento inadequado de recursos

Quando o software não libera corretamente recursos (conexões de banco, arquivo aberto, memória alocada, socket de rede) após o uso. O programa continua consumindo esses recursos até ficar sem espaço ou conexões disponíveis, causando falhas, lentidão ou negação de serviço.

Ejemplo

Um servidor web abre uma conexão com banco de dados para cada requisição, mas esquece de fechar a conexão quando termina. Após centenas de requisições, todas as conexões disponíveis estão esgotadas e novas requisições falham.

Cómo mitigar

Use padrões como try-with-resources (Java), context managers (Python), ou equivalentes na sua linguagem para garantir liberação automática. Implemente timeouts e monitore uso de recursos em produção para detectar vazamentos cedo.

CVE-2024-28252HIGHCoreWCF NetFraming based services can leave connections open when they should be closedEPSS 0.6%CVE-2025-1149LOWGNU Binutils ld xmalloc.c xstrdup memory leakEPSS 0.6%CVE-2026-4988MEDIUMOpen5GS CCA Message smf_s6b denial of serviceEPSS 0.6%CVE-2026-2525MEDIUMFree5GC PFCP UDP Endpoint denial of serviceEPSS 0.6%CVE-2026-2984MEDIUMSourceCodester Student Result Management System drop_user.php denial of serviceEPSS 0.6%CVE-2026-4240MEDIUMOpen5GS CCA smf_s6b_sta_cb denial of serviceEPSS 0.6%CVE-2024-31611CRITICALSeaCMS 12.9 has a file deletion vulnerability via admin_template.php.EPSS 0.6%CVE-2026-84887MEDIUMsimular-ai Agent-S Model-generated GUI Action Execution Workflow grounding.py denial of serviceEPSS 0.6%CVE-2026-78250MEDIUMbytebot-ai bytebot Agent Execution Workflow infinite loopEPSS 0.6%CVE-2026-6985MEDIUMCesanta Mongoose TCP Option net_builtin.c handle_opt infinite loopEPSS 0.6%CVE-2024-23930MEDIUMPioneer DMH-WT7600NEX Media Service Improper Handling of Exceptional ConditionsEPSS 0.6%CVE-2025-4998HIGHH3C Magic R200G HTTP POST Request aspForm EditWlanMacList denial of serviceEPSS 0.6%CVE-2025-4997HIGHH3C R2+ProG HTTP POST Request aspForm SetAPInfoById denial of serviceEPSS 0.6%CVE-2025-67635HIGHJenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corEPSS 0.6%CVE-2024-57618HIGHAn issue in the bind_col_exp component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL stateEPSS 0.6%CVE-2026-90712MEDIUMGitlawb openclaude xAI OAuth Callback xaiOAuthCallback.ts waitForCallback denial of serviceEPSS 0.6%CVE-2022-44552HIGHThe lock screen module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availabEPSS 0.6%CVE-2026-8769MEDIUMvercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumptionEPSS 0.6%CVE-2026-3408MEDIUMOpen Babel CDXML File atom.cpp GetExplicitValence null pointer dereferenceEPSS 0.6%CVE-2026-117504MEDIUMa2aproject a2a-go Distributed Manager distributed_manager.go Cancel denial of serviceEPSS 0.6%