CWE-755 对异常条件的处理不恰当 类弱点 173 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-755属于异常处理不当漏洞，指软件未能正确应对或忽略异常状况。攻击者常通过触发特定异常（如空指针或资源耗尽）导致程序崩溃、拒绝服务或执行非预期逻辑，从而获取权限或破坏系统稳定性。开发者应避免捕获过于宽泛的异常，需实施细粒度的错误处理机制，确保在异常发生时能安全恢复状态或提供明确反馈，防止内部信息泄露及服务中断。
protected void doPost (HttpServletRequest req, HttpServletResponse res) throws IOException { String ip = req.getRemoteAddr(); InetAddress addr = InetAddress.getByName(ip); ... out.println("hello " + addr.getHostName()); }foo=malloc(sizeof(char)); //the next line checks to see if malloc failed if (foo==NULL) { //We do nothing so we just ignore the error. }foo=malloc(sizeof(char)); //the next line checks to see if malloc failed if (foo==NULL) { printf("Malloc failed to allocate memory resources"); return -1; }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-5090 | Linux kernel 安全漏洞 — Red Hat Enterprise Linux 8 | 6.0 | Medium | 2023-11-06 |
| CVE-2023-5824 | Squid 安全漏洞 — Red Hat Enterprise Linux 8 | 7.5 | High | 2023-11-03 |
| CVE-2023-45820 | Directus 安全漏洞 — directus | 5.9 | Medium | 2023-10-19 |
| CVE-2023-44186 | Juniper Networks Junos OS 和 Junos OS Evolved 安全漏洞 — Junos OS | 7.5 | High | 2023-10-11 |
| CVE-2023-41085 | F5 BIG-IP 安全漏洞 — BIG-IP | 7.5 | High | 2023-10-10 |
| CVE-2023-41332 | Cilium 安全漏洞 — cilium | 3.5 | Low | 2023-09-26 |
| CVE-2023-3280 | Palo Alto Networks Cortex XDR 安全漏洞 — Cortex XDR Agent | 5.5 | Medium | 2023-09-13 |
| CVE-2023-41317 | Apollo Router 安全漏洞 — router | 7.5 | High | 2023-09-05 |
| CVE-2023-4540 | HTTP library for Lua 安全漏洞 — lua-http | 7.5 | - | 2023-09-05 |
| CVE-2023-40184 | xrdp 安全漏洞 — xrdp | 2.6 | Low | 2023-08-30 |
| CVE-2023-28768 | Zyxel XGS2220-30 安全漏洞 — XGS2220-30 firmware | 6.5 | Medium | 2023-08-14 |
| CVE-2023-38419 | F5 BIG-IP iControl SOAP 安全漏洞 — BIG-IP | 4.3 | Medium | 2023-08-02 |
| CVE-2023-36832 | Juniper Networks Junos OS MX 安全漏洞 — Junos OS | 7.5 | High | 2023-07-14 |
| CVE-2023-1695 | Huawei HarmonyOS 安全漏洞 — HarmonyOS | 7.5 | - | 2023-07-06 |
| CVE-2023-24510 | Arista EOS 安全漏洞 — Arista EOS | 7.5 | High | 2023-06-05 |
| CVE-2023-28631 | comrak 安全漏洞 — comrak | 5.3 | Medium | 2023-03-28 |
| CVE-2022-23121 | Netatalk 安全漏洞 — Netatalk | 9.8 | - | 2023-03-28 |
| CVE-2023-27595 | Cilium 安全漏洞 — cilium | 6.5 | Medium | 2023-03-17 |
| CVE-2022-45155 | openSUSE 安全漏洞 — openSUSE Factory | 5.5 | Medium | 2023-03-15 |
| CVE-2023-26479 | XWiki Platform 安全漏洞 — xwiki-platform | 6.5 | Medium | 2023-03-02 |
| CVE-2021-4105 | BG-TEK COSLAT Firewall 安全漏洞 — COSLAT Firewall | 9.8 | Critical | 2023-02-24 |
| CVE-2023-25561 | DataHub 安全漏洞 — datahub | 5.7 | Medium | 2023-02-10 |
| CVE-2022-39380 | Wire 安全漏洞 — wire-webapp | 5.3 | Medium | 2023-01-27 |
| CVE-2023-22391 | Juniper Networks Junos OS 安全漏洞 — Junos OS | 7.5 | High | 2023-01-12 |
| CVE-2022-23495 | go-merkledag 安全漏洞 — go-merkledag | 7.5 | High | 2022-12-08 |
| CVE-2022-23496 | Yauaa 安全漏洞 — yauaa | 7.5 | High | 2022-12-08 |
| CVE-2022-20920 | Cisco IOS和Cisco IOS XE Software 安全漏洞 — Cisco IOS | 7.7 | High | 2022-10-10 |
| CVE-2022-35295 | SAP BusinessObjects Business Intelligence Platform 信息泄露漏洞 — SAP Host Agent (SAPOSCOL) | 7.2 | - | 2022-09-13 |
| CVE-2022-36031 | Directus 安全漏洞 — directus | 6.5 | Medium | 2022-08-19 |
| CVE-2022-22202 | Juniper Networks Junos OS PTX 安全漏洞 — Junos OS | 6.5 | Medium | 2022-07-20 |
CWE-755（对异常条件的处理不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 173 条 CVE 漏洞。