CWE-248 未捕获的异常 类弱点 230 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-248 属于未捕获异常漏洞，指函数抛出异常但未被代码正确捕获处理。攻击者通常通过构造特定输入触发异常，导致程序崩溃引发拒绝服务，或泄露堆栈跟踪等敏感信息。开发者应通过完善异常处理机制，使用 try-catch 块包裹潜在风险代码，并记录详细日志而非直接暴露内部细节，从而提升系统稳定性与安全性。
protected void doPost (HttpServletRequest req, HttpServletResponse res) throws IOException { String ip = req.getRemoteAddr(); InetAddress addr = InetAddress.getByName(ip); ... out.println("hello " + addr.getHostName()); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-0648 | M-Files Server 安全漏洞 — M-Files Server | 4.9 | - | 2025-01-23 |
| CVE-2024-54106 | Huawei HarmonyOS 代码问题漏洞 — HarmonyOS | 7.1 | High | 2024-12-12 |
| CVE-2024-11738 | Rustls 安全漏洞 | 5.3 | Medium | 2024-12-06 |
| CVE-2024-20137 | MediaTek Chipsets 安全漏洞 — MT6890, MT7622, MT7915, MT7916, MT7981, MT7986 | 7.5 | - | 2024-12-02 |
| CVE-2024-51750 | Element 安全漏洞 — element-web | 5.0 | Medium | 2024-11-12 |
| CVE-2024-51518 | Huawei HarmonyOS 安全漏洞 — HarmonyOS | 5.3 | Medium | 2024-11-05 |
| CVE-2024-43367 | Boa 安全漏洞 — boa | 7.5 | High | 2024-08-15 |
| CVE-2024-43357 | ECMAScript 安全漏洞 — ecma262 | 8.6 | High | 2024-08-15 |
| CVE-2024-42037 | Huawei EMUI和Huawei HarmonyOS 安全漏洞 — HarmonyOS | 9.3 | Critical | 2024-08-08 |
| CVE-2024-31217 | Strapi 安全漏洞 — strapi | 5.3 | Medium | 2024-06-12 |
| CVE-2024-34363 | Envoy 安全漏洞 — envoy | 7.5 | High | 2024-06-04 |
| CVE-2024-31904 | IBM App Connect Enterprise 安全漏洞 — App Connect Enterprise | 6.5 | Medium | 2024-05-22 |
| CVE-2024-32995 | Huawei HarmonyOS 安全漏洞 — HarmonyOS | 6.2 | Medium | 2024-05-11 |
| CVE-2024-3052 | SiLabs Z-Wave over IP Gateway 安全漏洞 — Z/IP Gateway SDK | 7.5 | High | 2024-04-26 |
| CVE-2024-3051 | SiLabs Z-Wave over IP Gateway 安全漏洞 — Z/IP Gateway SDK | 7.5 | High | 2024-04-26 |
| CVE-2024-23449 | Elasticsearch 安全漏洞 — Elasticsearch | 4.3 | Medium | 2024-03-29 |
| CVE-2024-20276 | Cisco Catalyst 安全漏洞 — IOS | 7.4 | High | 2024-03-27 |
| CVE-2024-28835 | GnuTLS 安全漏洞 | 5.0 | Medium | 2024-03-21 |
| CVE-2023-3966 | Open vSwitch 安全漏洞 — openvswitch | 7.5 | High | 2024-02-22 |
| CVE-2023-6640 | Silicon Labs PC Controller 安全漏洞 — PC Controller | 6.5 | Medium | 2024-02-21 |
| CVE-2023-6533 | Silicon Labs PC Controller 安全漏洞 — PC Controller | 6.5 | Medium | 2024-02-21 |
| CVE-2024-21983 | NetApp StorageGRID和Web 安全漏洞 — StorageGRID | 6.5 | Medium | 2024-02-16 |
| CVE-2023-27318 | NetApp StorageGRID 安全漏洞 — StorageGRID (formerly StorageGRID Webscale) | 6.5 | Medium | 2024-02-05 |
| CVE-2023-5310 | Z-Wave 安全漏洞 — Gecko SDK | 5.7 | Medium | 2023-12-15 |
| CVE-2023-20086 | Cisco Firepower Threat Defense和Cisco ASA 安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software | 8.6 | High | 2023-11-01 |
| CVE-2023-46239 | quic-go 安全漏洞 — quic-go | 7.5 | High | 2023-10-31 |
| CVE-2023-46135 | rs-stellar-strkey 安全漏洞 — rs-stellar-strkey | 5.3 | Medium | 2023-10-25 |
| CVE-2023-25526 | NVIDIA Cumulus Linux 安全漏洞 — Cumulus Linux | 6.5 | Medium | 2023-09-20 |
| CVE-2023-42447 | blurhash-rs 安全漏洞 — blurhash-rs | 8.6 | High | 2023-09-19 |
| CVE-2023-42444 | phonenumber 安全漏洞 — rust-phonenumber | 8.6 | High | 2023-09-19 |
CWE-248（未捕获的异常） 是常见的弱点类别，本平台收录该类弱点关联的 230 条 CVE 漏洞。