Falhas do tipo CWE-404

695 resultados

Liberação inadequada de recursos

Ocorre quando o software não libera corretamente recursos como conexões de banco de dados, arquivos abertos, memória ou sockets de rede. Isso leva a esgotamento de recursos (resource leak), causando travamentos, negação de serviço ou comportamento imprevisível da aplicação ao longo do tempo.

Exemplo

Um servidor web que abre uma conexão com banco de dados para cada requisição, mas não a fecha adequadamente em caso de erro — após milhares de requisições, todas as conexões disponíveis se esgotam e novas requisições falham ou travam.

Como mitigar

Use padrões como try-finally ou try-with-resources (em Java) para garantir que recursos sejam liberados mesmo em exceções. Implemente timeouts e monitoramento de recursos abertos; realize testes de carga para detectar leaks antes da produção.

CVE-2026-82552MEDIUMLinux Foundation Magma gNB Termination ngap_amf.c denial of serviceEPSS 0.5%CVE-2026-92365MEDIUMvllm-project vllm thinking_budget_state.py algorithmic complexityEPSS 0.5%CVE-2026-7535MEDIUMOpen5GS transfer-update denial of serviceEPSS 0.5%CVE-2024-20905LOWVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versEPSS 0.5%CVE-2026-84287MEDIUMNousResearch hermes-agent Session Chat api_server.py denial of serviceEPSS 0.5%CVE-2026-2517MEDIUMOpen5GS SMF types.c ogs_gtp2_parse_tft denial of serviceEPSS 0.5%CVE-2026-1974MEDIUMFree5GC SMF datapath.go ResolveNodeIdToIp denial of serviceEPSS 0.5%CVE-2026-2525MEDIUMFree5GC PFCP UDP Endpoint denial of serviceEPSS 0.5%CVE-2025-29357HIGHTenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the startIp and endIp parameters at /goform/SetPptpServEPSS 0.5%CVE-2026-84833MEDIUMntegrals openbrowser Browser Agent Message Construction agent.ts resource consumptionEPSS 0.5%CVE-2026-7701MEDIUMTelegram Desktop Bot API url_auth_box.cpp RequestButton null pointer dereferenceEPSS 0.5%CVE-2022-44552HIGHThe lock screen module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availabEPSS 0.5%CVE-2024-9399HIGHA website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service conEPSS 0.5%CVE-2026-5313MEDIUMNothings stb GIF Decoder stb_image.h stbi__gif_load_next denial of serviceEPSS 0.5%CVE-2025-4444MEDIUMTor Onion Service Descriptor resource consumptionEPSS 0.5%CVE-2025-3535MEDIUMshuanx BurpAPIFinder BurpApiFinder.db denial of serviceEPSS 0.5%CVE-2024-23248MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.4. Processing a file may lead to a denial-of-sEPSS 0.5%CVE-2026-7780MEDIUMOpen5GS smf-registrations Endpoint udm-sm.c udm_state_operational denial of serviceEPSS 0.5%CVE-2026-6601MEDIUMLagom WHMCS Template Datatables resource consumptionEPSS 0.5%CVE-2026-84425MEDIUMzhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of serviceEPSS 0.5%