97 vulnerabilities classified as CWE-840 (业务逻辑错误). AI Chinese analysis included.
This page aggregates vulnerability data specifically for the weakness type CWE-840, known as Improper Handling of Exceptional Conditions, across various vendors and products. The collection encompasses a comprehensive history of security flaws where software fails to manage unexpected events correctly, spanning reports from the inception of the Common Weakness Enumeration database to the most recent disclosures. Visitors can utilize this resource to track specific vendor advisories regarding exception handling failures, understand the broader implications and patterns of this weakness class within modern software architectures, or look up the complete vulnerability history for a particular product affected by improper exception management. By centralizing these entries, the page provides a clear view of how exceptional conditions have historically led to system crashes, data corruption, or security breaches in diverse applications. Users seeking to analyze trends in exception handling or to audit their own systems for similar risks will find detailed metadata, affected component lists, and mitigation strategies relevant to CWE-840 without the distraction of unrelated vulnerability types. This focused aggregation supports security professionals, developers, and auditors in making informed decisions about risk management and code quality improvements related to robust error handling practices.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2021-22922 | Arch Linux 代码问题漏洞 — https://github.com/curl/curl | 6.5 | - | 2021-08-05 |
| CVE-2021-22897 | Haxx libcurl 加密问题漏洞 — https://github.com/curl/curl | 5.3 | - | 2021-06-11 |
| CVE-2020-8228 | Nextcloud Preferred Providers app 安全漏洞 — Nextcloud Preferred Provider | 5.3 | - | 2020-10-05 |
| CVE-2020-8181 | Nextcloud Contacts 代码问题漏洞 — Nextcloud Contact | 4.3 | - | 2020-07-10 |
| CVE-2019-15608 | Yarn 竞争条件问题漏洞 — yarn | 5.9 | - | 2020-03-15 |
| CVE-2019-3787 | UAA defaults email address to an insecure domain — UAA Release (OSS) | 9.8 | - | 2019-06-19 |
| CVE-2019-3789 | Gorouter allows space developer to hijack route services hosted outside the platform — CF Routing | 8.1 | - | 2019-04-24 |
Vulnerabilities classified as CWE-840 (业务逻辑错误) represent 97 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.