Fallos del tipo CWE-703

174 resultados

Tratamento inadequado de condições excepcionais

É quando o código não verifica ou não lida corretamente com situações de erro, exceção ou estado anômalo. O programa segue adiante como se nada tivesse acontecido, ignorando sinais de falha que deveriam interromper ou redirecionar a execução. Isso pode levar a comportamento imprevisto, vazamento de dados ou falha de segurança.

Ejemplo

Um servidor que recebe uma requisição HTTP não valida; se o parser não verifica o status da leitura e passa dados corrompidos para a próxima camada, a aplicação pode processar lixo como dado legítimo, causando injeção ou bypass de validação.

Cómo mitigar

Sempre verifique o resultado de operações críticas (leitura, alocação, conversão) e implemente blocos catch/finally específicos. Use assertions e logging para detectar estados anômalos cedo, e falhe seguramente (fail-safe) quando algo estiver fora do esperado.

CVE-2025-61601HIGHBigBlueButton vulnerable to DoS via PollSubmitVote GraphQL mutationEPSS 0.5%CVE-2023-0397CRITICALDoS: Invalid Initialization in le_read_buffer_size_completeEPSS 0.5%CVE-2026-20187HIGHCisco RoomOS Security Hardening Release - Exceptional Conditions Handling VulnerabilitiesEPSS 0.5%CVE-2025-24371HIGHMalicious peer can make node stuck in blocksync in github.com/cometbft/cometbftEPSS 0.5%CVE-2026-13753HIGHCertain HP DeskJet All in One – Potential Information DisclosureEPSS 0.5%CVE-2024-39945MEDIUMA vulnerability has been found in Dahua products.  After obtaining the administrator's username and password, the attacker can send a carefuEPSS 0.5%CVE-2026-21895LOWrsa crate has potential panic on a prime being equal to 1EPSS 0.4%CVE-2023-5563HIGHThe SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECOEPSS 0.4%CVE-2026-71640CRITICALAn issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via EPSS 0.4%CVE-2024-38435MEDIUMUnitronics Vision PLC - CWE-703: Improper Check or Handling of Exceptional ConditionsEPSS 0.4%CVE-2026-20329CRITICALCisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Exceptional Conditions Handling VulnerabilitiesEPSS 0.4%CVE-2025-13016HIGHIncorrect boundary conditions in the JavaScript: WebAssembly componentEPSS 0.4%CVE-2026-71645HIGHAn issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial EPSS 0.4%CVE-2024-50954HIGHThe XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a vulnerability in handling Modbus messages. When a TCEPSS 0.4%CVE-2018-5463—A structured exception handler overflow vulnerability in Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA 4.1.0.33EPSS 0.4%CVE-2023-5038HIGHUnauthenticated DoSEPSS 0.4%CVE-2025-54134HIGHHAX CMS NodeJs's Improper Error Handling Leads to Denial of ServiceEPSS 0.4%CVE-2024-37992MEDIUMA vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6EPSS 0.4%CVE-2024-47215HIGHAn issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side. It involves attaching an invalid GTM SS previewEPSS 0.4%CVE-2019-10928—A vulnerability has been identified in SCALANCE SC-600 (V2.0). An authenticated attacker with access to port 22/tcp as well as physical acceEPSS 0.4%