Fallos del tipo CWE-703

181 resultados

Tratamento inadequado de condições excepcionais

É quando o código não verifica ou não lida corretamente com situações de erro, exceção ou estado anômalo. O programa segue adiante como se nada tivesse acontecido, ignorando sinais de falha que deveriam interromper ou redirecionar a execução. Isso pode levar a comportamento imprevisto, vazamento de dados ou falha de segurança.

Ejemplo

Um servidor que recebe uma requisição HTTP não valida; se o parser não verifica o status da leitura e passa dados corrompidos para a próxima camada, a aplicação pode processar lixo como dado legítimo, causando injeção ou bypass de validação.

Cómo mitigar

Sempre verifique o resultado de operações críticas (leitura, alocação, conversão) e implemente blocos catch/finally específicos. Use assertions e logging para detectar estados anômalos cedo, e falhe seguramente (fail-safe) quando algo estiver fora do esperado.

CVE-2021-0221MEDIUMJunos OS: QFX Series: Traffic loop Denial of Service (DoS) upon receipt of specific IP multicast trafficEPSS 0.5%CVE-2024-4611HIGHAppPresser <= 4.3.2 - Improper Missing Encryption Exception Handling to Authentication BypassEPSS 0.5%CVE-2023-21036MEDIUMIn BitmapExport.java, there is a possible failure to truncate images due to a logic error in the code.Product: AndroidVersions: Android kernEPSS 0.5%CVE-2026-20280HIGHCisco IOS XR Software Security Hardening Release: September 2026EPSS 0.5%CVE-2026-56338MEDIUMCapgo - Denial of Service in 2FA Email Verification via /auth/v1/otp EndpointEPSS 0.5%CVE-2025-59322HIGHCPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mountedEPSS 0.5%CVE-2024-6468HIGHVault Vulnerable to Denial of Service When Setting a Proxy Protocol BehaviorEPSS 0.5%CVE-2026-26446HIGHStomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose TCP connection was already closed by the peerEPSS 0.5%CVE-2024-55548MEDIUMDenial of ServiceEPSS 0.5%CVE-2023-0397CRITICALDoS: Invalid Initialization in le_read_buffer_size_completeEPSS 0.5%CVE-2026-56818MEDIUMNetty: RedisArrayAggregator max-elements failure leaves retained partial aggregate stateEPSS 0.5%CVE-2025-61601HIGHBigBlueButton vulnerable to DoS via PollSubmitVote GraphQL mutationEPSS 0.5%CVE-2025-54134HIGHHAX CMS NodeJs's Improper Error Handling Leads to Denial of ServiceEPSS 0.5%CVE-2026-20187HIGHCisco RoomOS Security Hardening Release - Exceptional Conditions Handling VulnerabilitiesEPSS 0.5%CVE-2025-24371HIGHMalicious peer can make node stuck in blocksync in github.com/cometbft/cometbftEPSS 0.5%CVE-2026-13753HIGHCertain HP DeskJet All in One – Potential Information DisclosureEPSS 0.5%CVE-2026-20329CRITICALCisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Exceptional Conditions Handling VulnerabilitiesEPSS 0.5%CVE-2024-39945MEDIUMA vulnerability has been found in Dahua products.  After obtaining the administrator's username and password, the attacker can send a carefuEPSS 0.5%CVE-2026-76481HIGHCisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions VulnerabilitiesEPSS 0.5%CVE-2025-11594MEDIUMywxbear PHP-Bookstore-Website-Example Quantity index.php improper validation of specified quantity in inputEPSS 0.5%