Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CWE-840 (业务逻辑错误) — Vulnerability Class 97

97 vulnerabilities classified as CWE-840 (业务逻辑错误). AI Chinese analysis included.

This page aggregates vulnerability data specifically for the weakness type CWE-840, known as Improper Handling of Exceptional Conditions, across various vendors and products. The collection encompasses a comprehensive history of security flaws where software fails to manage unexpected events correctly, spanning reports from the inception of the Common Weakness Enumeration database to the most recent disclosures. Visitors can utilize this resource to track specific vendor advisories regarding exception handling failures, understand the broader implications and patterns of this weakness class within modern software architectures, or look up the complete vulnerability history for a particular product affected by improper exception management. By centralizing these entries, the page provides a clear view of how exceptional conditions have historically led to system crashes, data corruption, or security breaches in diverse applications. Users seeking to analyze trends in exception handling or to audit their own systems for similar risks will find detailed metadata, affected component lists, and mitigation strategies relevant to CWE-840 without the distraction of unrelated vulnerability types. This focused aggregation supports security professionals, developers, and auditors in making informed decisions about risk management and code quality improvements related to robust error handling practices.

CVE ID Title CVSS Severity Published
CVE-2021-22922 Arch Linux 代码问题漏洞 — https://github.com/curl/curl 6.5 - 2021-08-05
CVE-2021-22897 Haxx libcurl 加密问题漏洞 — https://github.com/curl/curl 5.3 - 2021-06-11
CVE-2020-8228 Nextcloud Preferred Providers app 安全漏洞 — Nextcloud Preferred Provider 5.3 - 2020-10-05
CVE-2020-8181 Nextcloud Contacts 代码问题漏洞 — Nextcloud Contact 4.3 - 2020-07-10
CVE-2019-15608 Yarn 竞争条件问题漏洞 — yarn 5.9 - 2020-03-15
CVE-2019-3787 UAA defaults email address to an insecure domain — UAA Release (OSS) 9.8 - 2019-06-19
CVE-2019-3789 Gorouter allows space developer to hijack route services hosted outside the platform — CF Routing 8.1 - 2019-04-24

Vulnerabilities classified as CWE-840 (业务逻辑错误) represent 97 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.