Falhas do tipo CWE-755

273 resultados

Tratamento inadequado de condições excepcionais

É quando o código não trata, trata de forma insuficiente ou de forma errada situações de erro e exceções. Isso pode deixar o software em estado inconsistente, ignorar falhas críticas ou executar código perigoso quando algo dá errado, compromentendo segurança, integridade ou disponibilidade.

Exemplo

Um servidor Web recebe uma requisição mal formada e falha ao parsear JSON; em vez de retornar erro 400, simplesmente pula a validação e processa dados vazios, ou uma conexão de banco de dados cai e a aplicação continua operando com dados em cache desatualizado sem avisar o usuário.

Como mitigar

Sempre trate exceções explicitamente: capture erros conhecidos e faça rollback/limpeza apropriada, log de falhas para auditoria, e retorne respostas claras ao usuário. Use type hints e validação de entrada antes de processar, e considere parar o sistema de forma segura se a exceção for crítica.

CVE-2021-0259HIGHJunos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenarioEPSS 0.4%CVE-2021-0290MEDIUMJunos OS: MX Series, EX9200 Series, SRX4600: Ethernet interface vulnerable to specially crafted framesEPSS 0.4%CVE-2026-34065HIGHnimiq-primitives: Node crash due to missing interlink validation in election macro block proposalsEPSS 0.4%CVE-2025-4649MEDIUMACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.EPSS 0.4%CVE-2026-49235HIGHRoutinator crashes on specifically crafted RRDP XML filesEPSS 0.4%CVE-2024-39526HIGHJunos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packetsEPSS 0.4%CVE-2025-9437HIGHRockwell Automation ArmorStart® AOP Denial-of-Service VulnerabilityEPSS 0.4%CVE-2026-40074MEDIUMSvelteKit's invalidated redirect in handle hook causes Denial-of-ServiceEPSS 0.4%CVE-2026-9516HIGHCpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throwsEPSS 0.4%CVE-2026-72757MEDIUMRoutinator HTTP server becomes unavailable with many unclosed connectionsEPSS 0.4%CVE-2022-44652HIGHAn improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker EPSS 0.4%CVE-2020-1643MEDIUMJunos OS: EX Series: RPD crash when executing specific "show ospf interface" commands from the CLI with OSPF authentication configuredEPSS 0.4%CVE-2026-94639HIGHApache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget)EPSS 0.3%CVE-2026-49232HIGHRoutinator exits when accepting an incoming HTTP or RTR connection failsEPSS 0.3%CVE-2026-96277HIGHApache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exceptionEPSS 0.3%CVE-2025-69255MEDIUMRustFS gRPC GetMetrics deserialization panic enables remote DoSEPSS 0.3%CVE-2026-30798HIGHRustDesk Client Accepts Unauthenticated stop-service Command via Strategy PayloadEPSS 0.3%CVE-2026-67080MEDIUMHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-41222MEDIUMA vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All versions), RUGGEDCOEPSS 0.3%CVE-2024-39541HIGHJunos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crashEPSS 0.3%