Fallos del tipo CWE-404

695 resultados

Liberação ou encerramento inadequado de recursos

Quando o software não libera corretamente recursos (conexões de banco, arquivo aberto, memória alocada, socket de rede) após o uso. O programa continua consumindo esses recursos até ficar sem espaço ou conexões disponíveis, causando falhas, lentidão ou negação de serviço.

Ejemplo

Um servidor web abre uma conexão com banco de dados para cada requisição, mas esquece de fechar a conexão quando termina. Após centenas de requisições, todas as conexões disponíveis estão esgotadas e novas requisições falham.

Cómo mitigar

Use padrões como try-with-resources (Java), context managers (Python), ou equivalentes na sua linguagem para garantir liberação automática. Implemente timeouts e monitore uso de recursos em produção para detectar vazamentos cedo.

CVE-2026-92413MEDIUMArtifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereferenceEPSS 0.4%CVE-2026-10650MEDIUMwarmcat libwebsockets SSH Protocol sshd.c lws_ssh_parse_plaintext resource consumptionEPSS 0.4%CVE-2026-82669MEDIUMklaussilveira GitList XML Parsing CommandLine.php SimpleXMLElement denial of serviceEPSS 0.4%CVE-2025-5031LOWAckites KillWxapkg wxapkg File Decompression resource consumptionEPSS 0.4%CVE-2026-9540MEDIUMvllm-project vllm OpenAI-compatible Serving Path denial of serviceEPSS 0.4%CVE-2026-4531MEDIUMFree5GC AMF handler.go HandleRegistrationComplete denial of serviceEPSS 0.4%CVE-2026-1875HIGHDenial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series EtherNet/IP moduleEPSS 0.4%CVE-2026-1876HIGHDenial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series Ethernet moduleEPSS 0.4%CVE-2026-17501MEDIUMggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursionEPSS 0.4%CVE-2026-91855MEDIUMOpen5GS PFCP Message handler.c denial of serviceEPSS 0.4%CVE-2026-17500MEDIUMggml-org llama.cpp json-schema-to-grammar.cpp _visit_pattern null pointer dereferenceEPSS 0.4%CVE-2024-1191LOWHyper CdCatalog HCF File denial of serviceEPSS 0.4%CVE-2026-5661MEDIUMFree5GC NGSetupRequest denial of serviceEPSS 0.4%CVE-2026-90784MEDIUMDvidelabs flatcc semantics.c fb_clear_parser memory leakEPSS 0.4%CVE-2023-51332MEDIUMA lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Meeting Room Booking System v1.0 allows attackers to send an excessivEPSS 0.4%CVE-2025-41399HIGHSCTP VulnerabilityEPSS 0.4%CVE-2024-47213HIGHAn issue was discovered affecting Enrich 5.1.0 and below. It involves sending a maliciously crafted Snowplow event to the pipeline. Upon recEPSS 0.4%CVE-2023-5255MEDIUMDenial of Service for Revocation of Auto Renewed CertificatesEPSS 0.4%CVE-2025-22846HIGHBIG-IP SIP VulnerabilityEPSS 0.4%CVE-2026-7707MEDIUMOpen5GS UDR nudr-handler.c udr_nudr_dr_handle_subscription_context denial of serviceEPSS 0.4%