Browse all indexed records — page 152

18529 metadata records. Search and filter

1. Path Equivalence: 'fakedir/../realdir/filename'
   cwe.xml · Weakness · Year unknown
2. Expression is Always False
   cwe.xml · Weakness · Year unknown
3. Expression is Always True
   cwe.xml · Weakness · Year unknown
4. Call to Thread run() instead of start()
   cwe.xml · Weakness · Year unknown
5. Improper Following of Specification by Caller
   cwe.xml · Weakness · Year unknown
6. EJB Bad Practices: Use of Synchronization Primitives
   cwe.xml · Weakness · Year unknown
7. EJB Bad Practices: Use of AWT Swing
   cwe.xml · Weakness · Year unknown
8. EJB Bad Practices: Use of Java I/O
   cwe.xml · Weakness · Year unknown
9. EJB Bad Practices: Use of Sockets
   cwe.xml · Weakness · Year unknown
10. EJB Bad Practices: Use of Class Loader
    cwe.xml · Weakness · Year unknown
11. J2EE Bad Practices: Non-serializable Object Stored in Session
    cwe.xml · Weakness · Year unknown
12. Path Equivalence: Windows 8.3 Filename
    cwe.xml · Weakness · Year unknown
13. clone() Method Without super.clone()
    cwe.xml · Weakness · Year unknown
14. Object Model Violation: Just One of Equals and Hashcode Defined
    cwe.xml · Weakness · Year unknown
15. Array Declared Public, Final, and Static
    cwe.xml · Weakness · Year unknown
16. finalize() Method Declared Public
    cwe.xml · Weakness · Year unknown
17. Return Inside Finally Block
    cwe.xml · Weakness · Year unknown
18. Empty Synchronized Block
    cwe.xml · Weakness · Year unknown
19. Explicit Call to Finalize()
    cwe.xml · Weakness · Year unknown
20. Assignment of a Fixed Address to a Pointer
    cwe.xml · Weakness · Year unknown
21. Attempt to Access Child of a Non-structure Pointer
    cwe.xml · Weakness · Year unknown
22. Call to Non-ubiquitous API
    cwe.xml · Weakness · Year unknown
23. Improper Link Resolution Before File Access ('Link Following')
    cwe.xml · Weakness · Year unknown
24. Free of Memory not on the Heap
    cwe.xml · Weakness · Year unknown
25. Sensitive Data Storage in Improperly Locked Memory
    cwe.xml · Weakness · Year unknown
26. DEPRECATED: Authentication Bypass Issues
    cwe.xml · Weakness · Year unknown
27. Authentication Bypass: OpenSSL CTX Object Modified after SSL Objects are Created
    cwe.xml · Weakness · Year unknown
28. J2EE Framework: Saving Unserializable Objects to Disk
    cwe.xml · Weakness · Year unknown
29. Comparison of Object References Instead of Object Contents
    cwe.xml · Weakness · Year unknown
30. DEPRECATED: Incorrect Semantic Object Comparison
    cwe.xml · Weakness · Year unknown
31. Use of Wrong Operator in String Comparison
    cwe.xml · Weakness · Year unknown
32. Use of HTTP Request With Sensitive Query String
    cwe.xml · Weakness · Year unknown
33. Missing Validation of OpenSSL Certificate
    cwe.xml · Weakness · Year unknown
34. J2EE Misconfiguration: Insufficient Session-ID Length
    cwe.xml · Weakness · Year unknown
35. Uncaught Exception in Servlet
    cwe.xml · Weakness · Year unknown
36. URL Redirection to Untrusted Site ('Open Redirect')
    cwe.xml · Weakness · Year unknown
37. Client-Side Enforcement of Server-Side Security
    cwe.xml · Weakness · Year unknown
38. Use of Client-Side Authentication
    cwe.xml · Weakness · Year unknown
39. Multiple Binds to the Same Port
    cwe.xml · Weakness · Year unknown
40. Unchecked Input for Loop Condition
    cwe.xml · Weakness · Year unknown
41. Public Static Final Field References Mutable Object
    cwe.xml · Weakness · Year unknown
42. Struts: Non-private Field in ActionForm Class
    cwe.xml · Weakness · Year unknown
43. Double-Checked Locking
    cwe.xml · Weakness · Year unknown
44. UNIX Symbolic Link (Symlink) Following
    cwe.xml · Weakness · Year unknown
45. Externally Controlled Reference to a Resource in Another Sphere
    cwe.xml · Weakness · Year unknown
46. Improper Restriction of XML External Entity Reference
    cwe.xml · Weakness · Year unknown
47. Improper Authorization of Index Containing Sensitive Information
    cwe.xml · Weakness · Year unknown
48. Insufficient Session Expiration
    cwe.xml · Weakness · Year unknown
49. Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
    cwe.xml · Weakness · Year unknown
50. Inclusion of Sensitive Information in Source Code Comments
    cwe.xml · Weakness · Year unknown
51. Incomplete Identification of Uploaded File Variables (PHP)
    cwe.xml · Weakness · Year unknown
52. Reachable Assertion
    cwe.xml · Weakness · Year unknown
53. Exposed Unsafe ActiveX Method
    cwe.xml · Weakness · Year unknown
54. Dangling Database Cursor ('Cursor Injection')
    cwe.xml · Weakness · Year unknown
55. UNIX Hard Link
    cwe.xml · Weakness · Year unknown
56. Unverified Password Change
    cwe.xml · Weakness · Year unknown
57. Variable Extraction Error
    cwe.xml · Weakness · Year unknown
58. Improper Validation of Function Hook Arguments
    cwe.xml · Weakness · Year unknown
59. Unsafe ActiveX Control Marked Safe For Scripting
    cwe.xml · Weakness · Year unknown
60. Executable Regular Expression Error
    cwe.xml · Weakness · Year unknown
61. Permissive Regular Expression
    cwe.xml · Weakness · Year unknown
62. Null Byte Interaction Error (Poison Null Byte)
    cwe.xml · Weakness · Year unknown
63. Dynamic Variable Evaluation
    cwe.xml · Weakness · Year unknown
64. Function Call with Incorrectly Specified Arguments
    cwe.xml · Weakness · Year unknown
65. Not Failing Securely ('Failing Open')
    cwe.xml · Weakness · Year unknown
66. Unnecessary Complexity in Protection Mechanism (Not Using 'Economy of Mechanism')
    cwe.xml · Weakness · Year unknown
67. Not Using Complete Mediation
    cwe.xml · Weakness · Year unknown
68. Authorization Bypass Through User-Controlled Key
    cwe.xml · Weakness · Year unknown
69. Windows Shortcut Following (.LNK)
    cwe.xml · Weakness · Year unknown
70. Weak Password Recovery Mechanism for Forgotten Password
    cwe.xml · Weakness · Year unknown
71. Improper Restriction of Names for Files and Other Resources
    cwe.xml · Weakness · Year unknown
72. External Control of Critical State Data
    cwe.xml · Weakness · Year unknown
73. Improper Neutralization of Data within XPath Expressions ('XPath Injection')
    cwe.xml · Weakness · Year unknown
74. Improper Neutralization of HTTP Headers for Scripting Syntax
    cwe.xml · Weakness · Year unknown
75. Overly Restrictive Account Lockout Mechanism
    cwe.xml · Weakness · Year unknown
76. Reliance on File Name or Extension of Externally-Supplied File
    cwe.xml · Weakness · Year unknown
77. Use of Non-Canonical URL Paths for Authorization Decisions
    cwe.xml · Weakness · Year unknown
78. Incorrect Use of Privileged APIs
    cwe.xml · Weakness · Year unknown
79. Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking
    cwe.xml · Weakness · Year unknown
80. Windows Hard Link
    cwe.xml · Weakness · Year unknown
81. Trusting HTTP Permission Methods on the Server Side
    cwe.xml · Weakness · Year unknown
82. Exposure of WSDL File Containing Sensitive Information
    cwe.xml · Weakness · Year unknown
83. Improper Neutralization of Data within XQuery Expressions ('XQuery Injection')
    cwe.xml · Weakness · Year unknown
84. Improper Isolation or Compartmentalization
    cwe.xml · Weakness · Year unknown
85. Reliance on a Single Factor in a Security Decision
    cwe.xml · Weakness · Year unknown
86. Insufficient Psychological Acceptability
    cwe.xml · Weakness · Year unknown
87. Reliance on Security Through Obscurity
    cwe.xml · Weakness · Year unknown
88. Violation of Secure Design Principles
    cwe.xml · Weakness · Year unknown
89. Improper Handling of File Names that Identify Virtual Resources
    cwe.xml · Weakness · Year unknown
90. Improper Synchronization
    cwe.xml · Weakness · Year unknown
91. Use of a Non-reentrant Function in a Concurrent Context
    cwe.xml · Weakness · Year unknown
92. Improper Control of a Resource Through its Lifetime
    cwe.xml · Weakness · Year unknown
93. Improper Initialization
    cwe.xml · Weakness · Year unknown
94. Operation on Resource in Wrong Phase of Lifetime
    cwe.xml · Weakness · Year unknown
95. Improper Locking
    cwe.xml · Weakness · Year unknown
96. Exposure of Resource to Wrong Sphere
    cwe.xml · Weakness · Year unknown
97. Incorrect Resource Transfer Between Spheres
    cwe.xml · Weakness · Year unknown
98. Improper Handling of Windows Device Names
    cwe.xml · Weakness · Year unknown
99. Always-Incorrect Control Flow Implementation
    cwe.xml · Weakness · Year unknown
100. Lack of Administrator Control over Security
     cwe.xml · Weakness · Year unknown
101. Operation on a Resource after Expiration or Release
     cwe.xml · Weakness · Year unknown
102. External Influence of Sphere Definition
     cwe.xml · Weakness · Year unknown
103. Uncontrolled Recursion
     cwe.xml · Weakness · Year unknown
104. Multiple Operations on Resource in Single-Operation Context
     cwe.xml · Weakness · Year unknown
105. Use of Potentially Dangerous Function
     cwe.xml · Weakness · Year unknown
106. Integer Overflow to Buffer Overflow
     cwe.xml · Weakness · Year unknown
107. Incorrect Conversion between Numeric Types
     cwe.xml · Weakness · Year unknown
108. Incorrect Calculation
     cwe.xml · Weakness · Year unknown
109. Function Call With Incorrect Order of Arguments
     cwe.xml · Weakness · Year unknown
110. Incorrect Provision of Specified Functionality
     cwe.xml · Weakness · Year unknown
111. Function Call With Incorrect Number of Arguments
     cwe.xml · Weakness · Year unknown
112. Function Call With Incorrect Argument Type
     cwe.xml · Weakness · Year unknown
113. Function Call With Incorrectly Specified Argument Value
     cwe.xml · Weakness · Year unknown
114. Function Call With Incorrect Variable or Reference as Argument
     cwe.xml · Weakness · Year unknown
115. Permission Race Condition During Resource Copy
     cwe.xml · Weakness · Year unknown
116. Improper Handling of Windows ::DATA Alternate Data Stream
     cwe.xml · Weakness · Year unknown
117. Unchecked Return Value to NULL Pointer Dereference
     cwe.xml · Weakness · Year unknown
118. Insufficient Control Flow Management
     cwe.xml · Weakness · Year unknown
119. Incomplete Denylist to Cross-Site Scripting
     cwe.xml · Weakness · Year unknown
120. Protection Mechanism Failure
     cwe.xml · Weakness · Year unknown