Fallos del tipo CWE-404

748 resultados

Liberação ou encerramento inadequado de recursos

Quando o software não libera corretamente recursos (conexões de banco, arquivo aberto, memória alocada, socket de rede) após o uso. O programa continua consumindo esses recursos até ficar sem espaço ou conexões disponíveis, causando falhas, lentidão ou negação de serviço.

Ejemplo

Um servidor web abre uma conexão com banco de dados para cada requisição, mas esquece de fechar a conexão quando termina. Após centenas de requisições, todas as conexões disponíveis estão esgotadas e novas requisições falham.

Cómo mitigar

Use padrões como try-with-resources (Java), context managers (Python), ou equivalentes na sua linguagem para garantir liberação automática. Implemente timeouts e monitore uso de recursos em produção para detectar vazamentos cedo.

CVE-2026-92365MEDIUMvllm-project vllm thinking_budget_state.py algorithmic complexityEPSS 0.5%CVE-2026-82552MEDIUMLinux Foundation Magma gNB Termination ngap_amf.c denial of serviceEPSS 0.5%CVE-2026-84287MEDIUMNousResearch hermes-agent Session Chat api_server.py denial of serviceEPSS 0.5%CVE-2024-20905LOWVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versEPSS 0.5%CVE-2026-92356MEDIUMa2ui-project a2ui Update Components basic_functions.ts updateComponents resource consumptionEPSS 0.5%CVE-2026-84833MEDIUMntegrals openbrowser Browser Agent Message Construction agent.ts resource consumptionEPSS 0.5%CVE-2026-8224MEDIUMOpen5GS PCF context.c pcf_sess_set_ipv6prefix denial of serviceEPSS 0.5%CVE-2024-9399HIGHA website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service conEPSS 0.5%CVE-2025-6401MEDIUMTOTOLINK N300RH HTTP POST Message formFilter denial of serviceEPSS 0.5%CVE-2026-8225MEDIUMOpen5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_handle_delete denial of serviceEPSS 0.5%CVE-2026-8226MEDIUMOpen5GS types.c ogs_pcc_rule_install_flow_from_media denial of serviceEPSS 0.5%CVE-2026-1875HIGHDenial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series EtherNet/IP moduleEPSS 0.5%CVE-2025-3535MEDIUMshuanx BurpAPIFinder BurpApiFinder.db denial of serviceEPSS 0.5%CVE-2026-1876HIGHDenial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series Ethernet moduleEPSS 0.5%CVE-2022-35272HIGHBIG-IP HTTP MRF vulnerability CVE-2022-35272EPSS 0.5%CVE-2026-8223MEDIUMOpen5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send denial of serviceEPSS 0.5%CVE-2023-5255MEDIUMDenial of Service for Revocation of Auto Renewed CertificatesEPSS 0.5%CVE-2025-4444MEDIUMTor Onion Service Descriptor resource consumptionEPSS 0.5%CVE-2024-23248MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.4. Processing a file may lead to a denial-of-sEPSS 0.5%CVE-2026-8248MEDIUMOpen5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of serviceEPSS 0.5%