Fallos del tipo CWE-755

274 resultados

Tratamento inadequado de condições excepcionais

O código falha em capturar, validar ou responder corretamente a situações de erro ou exceção. Isso deixa o programa em estado inconsistente, pode expor informações sensíveis em mensagens de erro, ou permite que um atacante contorne controles de segurança explorando caminhos de exceção não previstos.

Ejemplo

Um sistema de login que lança uma exceção genérica quando o banco de dados falha, mas não a trata adequadamente — a stack trace é exibida na resposta HTTP, revelando arquitetura interna e caminhos do servidor. Ou um processamento de arquivo que não verifica se a leitura falhou antes de usar o conteúdo, causando comportamento indefinido.

Cómo mitigar

Sempre capture exceções esperadas com try-catch (ou equivalente na linguagem) e implemente tratamento específico para cada cenário de erro. Nunca expor stack traces ou detalhes técnicos ao usuário final; registre internamente e retorne mensagens genéricas. Valide o estado do programa após qualquer operação que possa falhar antes de prosseguir.

CVE-2021-0259HIGHJunos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenarioEPSS 0.4%CVE-2021-0290MEDIUMJunos OS: MX Series, EX9200 Series, SRX4600: Ethernet interface vulnerable to specially crafted framesEPSS 0.4%CVE-2026-34065HIGHnimiq-primitives: Node crash due to missing interlink validation in election macro block proposalsEPSS 0.4%CVE-2026-40074MEDIUMSvelteKit's invalidated redirect in handle hook causes Denial-of-ServiceEPSS 0.4%CVE-2025-4649MEDIUMACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.EPSS 0.4%CVE-2026-49235HIGHRoutinator crashes on specifically crafted RRDP XML filesEPSS 0.4%CVE-2024-39526HIGHJunos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packetsEPSS 0.4%CVE-2025-9437HIGHRockwell Automation ArmorStart® AOP Denial-of-Service VulnerabilityEPSS 0.4%CVE-2026-9516HIGHCpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throwsEPSS 0.4%CVE-2026-72757MEDIUMRoutinator HTTP server becomes unavailable with many unclosed connectionsEPSS 0.4%CVE-2022-44652HIGHAn improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker EPSS 0.4%CVE-2020-1643MEDIUMJunos OS: EX Series: RPD crash when executing specific "show ospf interface" commands from the CLI with OSPF authentication configuredEPSS 0.4%CVE-2026-96277HIGHApache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exceptionEPSS 0.3%CVE-2026-49232HIGHRoutinator exits when accepting an incoming HTTP or RTR connection failsEPSS 0.3%CVE-2026-94639HIGHApache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget)EPSS 0.3%CVE-2026-30798HIGHRustDesk Client Accepts Unauthenticated stop-service Command via Strategy PayloadEPSS 0.3%CVE-2025-69255MEDIUMRustFS gRPC GetMetrics deserialization panic enables remote DoSEPSS 0.3%CVE-2026-67080MEDIUMHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-41222MEDIUMA vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All versions), RUGGEDCOEPSS 0.3%CVE-2024-39541HIGHJunos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crashEPSS 0.3%