Weakness — page 4

969 metadata records. Search and filter

1. Storage of File With Sensitive Data Under FTP Root
   cwe.xml · Weakness · Year unknown
2. Information Loss or Omission
   cwe.xml · Weakness · Year unknown
3. Truncation of Security-relevant Information
   cwe.xml · Weakness · Year unknown
4. Omission of Security-relevant Information
   cwe.xml · Weakness · Year unknown
5. Obscured Security-relevant Information by Alternate Name
   cwe.xml · Weakness · Year unknown
6. DEPRECATED: General Information Management Problems
   cwe.xml · Weakness · Year unknown
7. Sensitive Information in Resource Not Removed Before Reuse
   cwe.xml · Weakness · Year unknown
8. Improper Handling of Syntactically Invalid Structure
   cwe.xml · Weakness · Year unknown
9. Improper Handling of Values
   cwe.xml · Weakness · Year unknown
10. Relative Path Traversal
    cwe.xml · Weakness · Year unknown
11. Improper Handling of Missing Values
    cwe.xml · Weakness · Year unknown
12. Improper Handling of Extra Values
    cwe.xml · Weakness · Year unknown
13. Improper Handling of Undefined Values
    cwe.xml · Weakness · Year unknown
14. Improper Handling of Parameters
    cwe.xml · Weakness · Year unknown
15. Failure to Handle Missing Parameter
    cwe.xml · Weakness · Year unknown
16. Improper Handling of Extra Parameters
    cwe.xml · Weakness · Year unknown
17. Improper Handling of Undefined Parameters
    cwe.xml · Weakness · Year unknown
18. Improper Handling of Structural Elements
    cwe.xml · Weakness · Year unknown
19. Improper Handling of Incomplete Structural Elements
    cwe.xml · Weakness · Year unknown
20. Failure to Handle Incomplete Element
    cwe.xml · Weakness · Year unknown
21. Path Traversal: '../filedir'
    cwe.xml · Weakness · Year unknown
22. Improper Handling of Inconsistent Structural Elements
    cwe.xml · Weakness · Year unknown
23. Improper Handling of Unexpected Data Type
    cwe.xml · Weakness · Year unknown
24. Use of Inherently Dangerous Function
    cwe.xml · Weakness · Year unknown
25. Creation of chroot Jail Without Changing Working Directory
    cwe.xml · Weakness · Year unknown
26. Improper Clearing of Heap Memory Before Release ('Heap Inspection')
    cwe.xml · Weakness · Year unknown
27. J2EE Bad Practices: Direct Management of Connections
    cwe.xml · Weakness · Year unknown
28. J2EE Bad Practices: Direct Use of Sockets
    cwe.xml · Weakness · Year unknown
29. DEPRECATED: Reliance on DNS Lookups in a Security Decision
    cwe.xml · Weakness · Year unknown
30. Uncaught Exception
    cwe.xml · Weakness · Year unknown
31. DEPRECATED: Often Misused: Path Manipulation
    cwe.xml · Weakness · Year unknown
32. Path Traversal: '/../filedir'
    cwe.xml · Weakness · Year unknown
33. Execution with Unnecessary Privileges
    cwe.xml · Weakness · Year unknown
34. Unchecked Return Value
    cwe.xml · Weakness · Year unknown
35. Incorrect Check of Function Return Value
    cwe.xml · Weakness · Year unknown
36. Plaintext Storage of a Password
    cwe.xml · Weakness · Year unknown
37. Storing Passwords in a Recoverable Format
    cwe.xml · Weakness · Year unknown
38. Empty Password in Configuration File
    cwe.xml · Weakness · Year unknown
39. Use of Hard-coded Password
    cwe.xml · Weakness · Year unknown
40. Path Traversal: '/dir/../filename'
    cwe.xml · Weakness · Year unknown
41. Password in Configuration File
    cwe.xml · Weakness · Year unknown
42. Weak Encoding for Password
    cwe.xml · Weakness · Year unknown
43. Not Using Password Aging
    cwe.xml · Weakness · Year unknown
44. Password Aging with Long Expiration
    cwe.xml · Weakness · Year unknown
45. Incorrect Privilege Assignment
    cwe.xml · Weakness · Year unknown
46. Privilege Defined With Unsafe Actions
    cwe.xml · Weakness · Year unknown
47. Privilege Chaining
    cwe.xml · Weakness · Year unknown
48. Improper Privilege Management
    cwe.xml · Weakness · Year unknown
49. Path Traversal: 'dir/../../filename'
    cwe.xml · Weakness · Year unknown
50. Privilege Context Switching Error
    cwe.xml · Weakness · Year unknown
51. Privilege Dropping / Lowering Errors
    cwe.xml · Weakness · Year unknown
52. Least Privilege Violation
    cwe.xml · Weakness · Year unknown
53. Improper Check for Dropped Privileges
    cwe.xml · Weakness · Year unknown
54. Improper Handling of Insufficient Privileges
    cwe.xml · Weakness · Year unknown
55. Incorrect Default Permissions
    cwe.xml · Weakness · Year unknown
56. Insecure Inherited Permissions
    cwe.xml · Weakness · Year unknown
57. Insecure Preserved Inherited Permissions
    cwe.xml · Weakness · Year unknown
58. Incorrect Execution-Assigned Permissions
    cwe.xml · Weakness · Year unknown
59. Path Traversal: '..\filedir'
    cwe.xml · Weakness · Year unknown
60. Improper Handling of Insufficient Permissions or Privileges
    cwe.xml · Weakness · Year unknown
61. Improper Preservation of Permissions
    cwe.xml · Weakness · Year unknown
62. Improper Ownership Management
    cwe.xml · Weakness · Year unknown
63. Unverified Ownership
    cwe.xml · Weakness · Year unknown
64. Improper Access Control
    cwe.xml · Weakness · Year unknown
65. Improper Authorization
    cwe.xml · Weakness · Year unknown
66. Incorrect User Management
    cwe.xml · Weakness · Year unknown
67. Improper Authentication
    cwe.xml · Weakness · Year unknown
68. Authentication Bypass Using an Alternate Path or Channel
    cwe.xml · Weakness · Year unknown
69. Authentication Bypass by Alternate Name
    cwe.xml · Weakness · Year unknown
70. Path Traversal: '\..\filename'
    cwe.xml · Weakness · Year unknown
71. Authentication Bypass by Spoofing
    cwe.xml · Weakness · Year unknown
72. Reliance on IP Address for Authentication
    cwe.xml · Weakness · Year unknown
73. DEPRECATED: Trusting Self-reported DNS Name
    cwe.xml · Weakness · Year unknown
74. Using Referer Field for Authentication
    cwe.xml · Weakness · Year unknown
75. Authentication Bypass by Capture-replay
    cwe.xml · Weakness · Year unknown
76. Improper Certificate Validation
    cwe.xml · Weakness · Year unknown
77. Improper Following of a Certificate's Chain of Trust
    cwe.xml · Weakness · Year unknown
78. Improper Validation of Certificate with Host Mismatch
    cwe.xml · Weakness · Year unknown
79. Improper Validation of Certificate Expiration
    cwe.xml · Weakness · Year unknown
80. Improper Check for Certificate Revocation
    cwe.xml · Weakness · Year unknown
81. Path Traversal: '\dir\..\filename'
    cwe.xml · Weakness · Year unknown
82. Channel Accessible by Non-Endpoint
    cwe.xml · Weakness · Year unknown
83. Reflection Attack in an Authentication Protocol
    cwe.xml · Weakness · Year unknown
84. Authentication Bypass by Assumed-Immutable Data
    cwe.xml · Weakness · Year unknown
85. Incorrect Implementation of Authentication Algorithm
    cwe.xml · Weakness · Year unknown
86. Missing Critical Step in Authentication
    cwe.xml · Weakness · Year unknown
87. Authentication Bypass by Primary Weakness
    cwe.xml · Weakness · Year unknown
88. Missing Authentication for Critical Function
    cwe.xml · Weakness · Year unknown
89. Improper Restriction of Excessive Authentication Attempts
    cwe.xml · Weakness · Year unknown
90. Use of Single-factor Authentication
    cwe.xml · Weakness · Year unknown
91. Use of Password System for Primary Authentication
    cwe.xml · Weakness · Year unknown
92. Path Traversal: 'dir\..\..\filename'
    cwe.xml · Weakness · Year unknown
93. Missing Encryption of Sensitive Data
    cwe.xml · Weakness · Year unknown
94. Cleartext Storage of Sensitive Information
    cwe.xml · Weakness · Year unknown
95. Cleartext Storage in a File or on Disk
    cwe.xml · Weakness · Year unknown
96. Cleartext Storage in the Registry
    cwe.xml · Weakness · Year unknown
97. Cleartext Storage of Sensitive Information in a Cookie
    cwe.xml · Weakness · Year unknown
98. Cleartext Storage of Sensitive Information in Memory
    cwe.xml · Weakness · Year unknown
99. Cleartext Storage of Sensitive Information in GUI
    cwe.xml · Weakness · Year unknown
100. Cleartext Storage of Sensitive Information in Executable
     cwe.xml · Weakness · Year unknown
101. Cleartext Transmission of Sensitive Information
     cwe.xml · Weakness · Year unknown
102. Path Traversal: '...' (Triple Dot)
     cwe.xml · Weakness · Year unknown
103. Use of Hard-coded Cryptographic Key
     cwe.xml · Weakness · Year unknown
104. Key Exchange without Entity Authentication
     cwe.xml · Weakness · Year unknown
105. Reusing a Nonce, Key Pair in Encryption
     cwe.xml · Weakness · Year unknown
106. Use of a Key Past its Expiration Date
     cwe.xml · Weakness · Year unknown
107. Missing Cryptographic Step
     cwe.xml · Weakness · Year unknown
108. Inadequate Encryption Strength
     cwe.xml · Weakness · Year unknown
109. Use of a Broken or Risky Cryptographic Algorithm
     cwe.xml · Weakness · Year unknown
110. Use of Weak Hash
     cwe.xml · Weakness · Year unknown
111. Generation of Predictable IV with CBC Mode
     cwe.xml · Weakness · Year unknown
112. Path Traversal: '....' (Multiple Dot)
     cwe.xml · Weakness · Year unknown
113. Use of Insufficiently Random Values
     cwe.xml · Weakness · Year unknown
114. Insufficient Entropy
     cwe.xml · Weakness · Year unknown
115. Insufficient Entropy in PRNG
     cwe.xml · Weakness · Year unknown
116. Improper Handling of Insufficient Entropy in TRNG
     cwe.xml · Weakness · Year unknown
117. Small Space of Random Values
     cwe.xml · Weakness · Year unknown
118. Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
     cwe.xml · Weakness · Year unknown
119. Same Seed in Pseudo-Random Number Generator (PRNG)
     cwe.xml · Weakness · Year unknown
120. Predictable Seed in Pseudo-Random Number Generator (PRNG)
     cwe.xml · Weakness · Year unknown