Fallos del tipo CWE-404

748 resultados

Liberação ou encerramento inadequado de recursos

Quando o software não libera corretamente recursos (conexões de banco, arquivo aberto, memória alocada, socket de rede) após o uso. O programa continua consumindo esses recursos até ficar sem espaço ou conexões disponíveis, causando falhas, lentidão ou negação de serviço.

Ejemplo

Um servidor web abre uma conexão com banco de dados para cada requisição, mas esquece de fechar a conexão quando termina. Após centenas de requisições, todas as conexões disponíveis estão esgotadas e novas requisições falham.

Cómo mitigar

Use padrões como try-with-resources (Java), context managers (Python), ou equivalentes na sua linguagem para garantir liberação automática. Implemente timeouts e monitore uso de recursos em produção para detectar vazamentos cedo.

CVE-2026-84425MEDIUMzhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of serviceEPSS 0.5%CVE-2026-8269MEDIUMOpen5GS SMF smf_nsmf_handle_create_sm_context denial of serviceEPSS 0.5%CVE-2026-14626MEDIUMNousResearch hermes-agent HTTP API run_agent.py AIAgent.run_conversation denial of serviceEPSS 0.5%CVE-2026-19745MEDIUMCalix GigaSpire Web Management utilities_configurationsave.cgi denial of serviceEPSS 0.5%CVE-2026-84885MEDIUMsimular-ai Agent-S CodeAgent code_agent.py denial of serviceEPSS 0.5%CVE-2026-94094MEDIUMOpenClaw Canvas Host Route server.ts createCanvasHostHandler denial of serviceEPSS 0.5%CVE-2026-84427MEDIUMzhayujie CowAgent Bash Tool bash.py denial of serviceEPSS 0.5%CVE-2026-84288MEDIUMNousResearch hermes-agent ACP Prompt Workflow session.py HermesACPAgent.prompt denial of serviceEPSS 0.5%CVE-2026-19746MEDIUMCalix GigaSpire traceroute.cmd denial of serviceEPSS 0.5%CVE-2026-85407MEDIUMEleveo Quality Management Conversation events denial of serviceEPSS 0.5%CVE-2025-11635MEDIUMTomofun Furbo 360 File Upload resource consumptionEPSS 0.5%CVE-2024-12659MEDIUMIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E004 null pointer dereferenceEPSS 0.5%CVE-2024-12660MEDIUMIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E018 null pointer dereferenceEPSS 0.5%CVE-2026-7734MEDIUMosrg GoBGP SRv6 L3 Service prefix_sid.go SRv6L3ServiceAttribute.DecodeFromBytes denial of serviceEPSS 0.5%CVE-2025-7462MEDIUMArtifex GhostPDL New Output File Open Error gdevpdf.c pdf_ferror null pointer dereferenceEPSS 0.5%CVE-2024-12658MEDIUMIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E01C null pointer dereferenceEPSS 0.5%CVE-2024-12655MEDIUMFabulaTech USB over Network IOCT ftusbbus2.sys 0x220420 null pointer dereferenceEPSS 0.5%CVE-2022-46314HIGHThe IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability.EPSS 0.5%CVE-2026-8266MEDIUMOpen5GS SMF gsm-build.c gsm_build_pdu_session_establishment_accept denial of serviceEPSS 0.5%CVE-2026-8251MEDIUMOpen5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of serviceEPSS 0.5%