CWE-755 对异常条件的处理不恰当 类弱点 173 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-755属于异常处理不当漏洞，指软件未能正确应对或忽略异常状况。攻击者常通过触发特定异常（如空指针或资源耗尽）导致程序崩溃、拒绝服务或执行非预期逻辑，从而获取权限或破坏系统稳定性。开发者应避免捕获过于宽泛的异常，需实施细粒度的错误处理机制，确保在异常发生时能安全恢复状态或提供明确反馈，防止内部信息泄露及服务中断。
protected void doPost (HttpServletRequest req, HttpServletResponse res) throws IOException { String ip = req.getRemoteAddr(); InetAddress addr = InetAddress.getByName(ip); ... out.println("hello " + addr.getHostName()); }foo=malloc(sizeof(char)); //the next line checks to see if malloc failed if (foo==NULL) { //We do nothing so we just ignore the error. }foo=malloc(sizeof(char)); //the next line checks to see if malloc failed if (foo==NULL) { printf("Malloc failed to allocate memory resources"); return -1; }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-1965 | CODESYS 安全漏洞 — Runtime Toolkit | 8.1 | High | 2022-06-24 |
| CVE-2022-29617 | Contributor License Agreement assistant 安全漏洞 — CLA Assistant | 6.5 | - | 2022-06-06 |
| CVE-2021-40402 | Gerbv 缓冲区错误漏洞 — Gerbv | 7.5 | - | 2022-04-14 |
| CVE-2022-0023 | Palo Alto Networks PAN-OS 安全漏洞 — PAN-OS | 5.9 | Medium | 2022-04-13 |
| CVE-2022-23161 | Dell Technologies Dell PowerScale OneFS 安全漏洞 — PowerScale OneFS | 7.5 | High | 2022-04-12 |
| CVE-2020-25691 | darkhttpd 安全漏洞 — darkhttpd | 7.5 | - | 2022-04-01 |
| CVE-2022-23625 | Wire-ios 安全漏洞 — wire-ios | 6.5 | Medium | 2022-03-11 |
| CVE-2021-22285 | ABB SPIET800 安全漏洞 — SPIET800 | 7.5 | High | 2022-02-04 |
| CVE-2022-0264 | Linux kernel 信息泄露漏洞 — kernel | 3.3 | - | 2022-02-04 |
| CVE-2022-23018 | F5 BIG-IP AFM 安全漏洞 — BIG-IP AFM | 7.5 | - | 2022-01-25 |
| CVE-2022-22174 | Juniper Networks Junos OS 安全漏洞 — Junos OS | 7.5 | High | 2022-01-19 |
| CVE-2022-21667 | soketi 安全漏洞 — soketi | 7.5 | High | 2022-01-07 |
| CVE-2021-43827 | Discourse 安全漏洞 — discourse-footnote | 4.3 | Medium | 2021-12-14 |
| CVE-2021-3063 | GlobalProtect 安全漏洞 — PAN-OS | 7.5 | High | 2021-11-10 |
| CVE-2021-43173 | NLnet Labs Routinator 资源管理错误漏洞 — Routinator | 7.5 | - | 2021-11-09 |
| CVE-2021-34593 | CODESYS 安全漏洞 — CODESYS V2 | 7.5 | High | 2021-10-26 |
| CVE-2021-31353 | Juniper Networks Junos OS安全漏洞 — Junos OS | 7.5 | High | 2021-10-19 |
| CVE-2021-0299 | Juniper Networks Junos OS 安全漏洞 — Junos OS | 7.5 | High | 2021-10-19 |
| CVE-2021-0297 | Juniper Networks Junos OS 授权问题漏洞 — Junos OS Evolved | 6.5 | Medium | 2021-10-19 |
| CVE-2021-25474 | Samsung SMR 安全漏洞 — Samsung Mobile Devices | 4.4 | Medium | 2021-10-06 |
| CVE-2021-25473 | Samsung SMR 安全漏洞 — Samsung Mobile Devices | 4.4 | Medium | 2021-10-06 |
| CVE-2021-32999 | SuiteLink server 代码问题漏洞 — AVEVA System Platform 2020 | 7.5 | High | 2021-09-23 |
| CVE-2021-3053 | Palo Alto Networks PAN-OS 权限许可和访问控制问题漏洞 — PAN-OS | 7.5 | High | 2021-09-08 |
| CVE-2021-39157 | detect-character-encoding 安全漏洞 — detect-character-encoding | 7.5 | High | 2021-08-24 |
| CVE-2021-21592 | DELL EMC PowerScale 安全漏洞 — PowerScale OneFS | 3.1 | Low | 2021-08-16 |
| CVE-2021-0290 | Juniper Networks Junos OS 安全漏洞 — Junos OS | 6.5 | Medium | 2021-07-15 |
| CVE-2021-29617 | Google TensorFlow 安全漏洞 — tensorflow | 2.5 | Low | 2021-05-14 |
| CVE-2021-29618 | Google TensorFlow 安全漏洞 — tensorflow | 2.5 | Low | 2021-05-14 |
| CVE-2021-29619 | Google TensorFlow 安全漏洞 — tensorflow | 2.5 | Low | 2021-05-14 |
| CVE-2021-25662 | Siemens SIMATIC WinCC 安全漏洞 — SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) | 7.5 | - | 2021-05-12 |
CWE-755（对异常条件的处理不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 173 条 CVE 漏洞。