Fallos del tipo CWE-404

695 resultados

Liberação ou encerramento inadequado de recursos

Quando o software não libera corretamente recursos (conexões de banco, arquivo aberto, memória alocada, socket de rede) após o uso. O programa continua consumindo esses recursos até ficar sem espaço ou conexões disponíveis, causando falhas, lentidão ou negação de serviço.

Ejemplo

Um servidor web abre uma conexão com banco de dados para cada requisição, mas esquece de fechar a conexão quando termina. Após centenas de requisições, todas as conexões disponíveis estão esgotadas e novas requisições falham.

Cómo mitigar

Use padrões como try-with-resources (Java), context managers (Python), ou equivalentes na sua linguagem para garantir liberação automática. Implemente timeouts e monitore uso de recursos em produção para detectar vazamentos cedo.

CVE-2026-92361MEDIUMag-ui-protocol ag-ui SSE Client client.go resource consumptionEPSS 0.5%CVE-2026-2984MEDIUMSourceCodester Student Result Management System drop_user.php denial of serviceEPSS 0.5%CVE-2022-44552HIGHThe lock screen module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availabEPSS 0.5%CVE-2026-92362MEDIUMag-ui-protocol ag-ui SSE Frame sse.rs resource consumptionEPSS 0.5%CVE-2026-8224MEDIUMOpen5GS PCF context.c pcf_sess_set_ipv6prefix denial of serviceEPSS 0.5%CVE-2024-9399HIGHA website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service conEPSS 0.5%CVE-2026-3408MEDIUMOpen Babel CDXML File atom.cpp GetExplicitValence null pointer dereferenceEPSS 0.5%CVE-2026-8226MEDIUMOpen5GS types.c ogs_pcc_rule_install_flow_from_media denial of serviceEPSS 0.5%CVE-2026-8225MEDIUMOpen5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_handle_delete denial of serviceEPSS 0.5%CVE-2026-8223MEDIUMOpen5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send denial of serviceEPSS 0.5%CVE-2026-8222MEDIUMOpen5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_management_handle_register denial of serviceEPSS 0.5%CVE-2025-4444MEDIUMTor Onion Service Descriptor resource consumptionEPSS 0.5%CVE-2025-3535MEDIUMshuanx BurpAPIFinder BurpApiFinder.db denial of serviceEPSS 0.5%CVE-2024-23248MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.4. Processing a file may lead to a denial-of-sEPSS 0.5%CVE-2026-8248MEDIUMOpen5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of serviceEPSS 0.5%CVE-2026-8269MEDIUMOpen5GS SMF smf_nsmf_handle_create_sm_context denial of serviceEPSS 0.5%CVE-2026-14626MEDIUMNousResearch hermes-agent HTTP API run_agent.py AIAgent.run_conversation denial of serviceEPSS 0.5%CVE-2024-12660MEDIUMIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E018 null pointer dereferenceEPSS 0.5%CVE-2026-7734MEDIUMosrg GoBGP SRv6 L3 Service prefix_sid.go SRv6L3ServiceAttribute.DecodeFromBytes denial of serviceEPSS 0.5%CVE-2024-12655MEDIUMFabulaTech USB over Network IOCT ftusbbus2.sys 0x220420 null pointer dereferenceEPSS 0.5%