Weakness — page 8

969 metadata records. Search and filter

1. Compiler Optimization Removal or Modification of Security-critical Code
   cwe.xml · Weakness · Year unknown
2. Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
   cwe.xml · Weakness · Year unknown
3. Exposed Dangerous Method or Function
   cwe.xml · Weakness · Year unknown
4. Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
   cwe.xml · Weakness · Year unknown
5. Improper Check for Unusual or Exceptional Conditions
   cwe.xml · Weakness · Year unknown
6. Improper Handling of Exceptional Conditions
   cwe.xml · Weakness · Year unknown
7. Missing Custom Error Page
   cwe.xml · Weakness · Year unknown
8. Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')
   cwe.xml · Weakness · Year unknown
9. Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
   cwe.xml · Weakness · Year unknown
10. Use of a One-Way Hash without a Salt
    cwe.xml · Weakness · Year unknown
11. Improper Neutralization of Equivalent Special Elements
    cwe.xml · Weakness · Year unknown
12. Use of a One-Way Hash with a Predictable Salt
    cwe.xml · Weakness · Year unknown
13. Free of Pointer not at Start of Buffer
    cwe.xml · Weakness · Year unknown
14. Mismatched Memory Management Routines
    cwe.xml · Weakness · Year unknown
15. Release of Invalid Pointer or Reference
    cwe.xml · Weakness · Year unknown
16. Multiple Locks of a Critical Resource
    cwe.xml · Weakness · Year unknown
17. Multiple Unlocks of a Critical Resource
    cwe.xml · Weakness · Year unknown
18. Critical Data Element Declared Public
    cwe.xml · Weakness · Year unknown
19. Access to Critical Private Variable via Public Method
    cwe.xml · Weakness · Year unknown
20. Incorrect Short Circuit Evaluation
    cwe.xml · Weakness · Year unknown
21. DEPRECATED: Uncontrolled File Descriptor Consumption
    cwe.xml · Weakness · Year unknown
22. Improper Neutralization of Special Elements used in a Command ('Command Injection')
    cwe.xml · Weakness · Year unknown
23. Allocation of Resources Without Limits or Throttling
    cwe.xml · Weakness · Year unknown
24. Missing Reference to Active Allocated Resource
    cwe.xml · Weakness · Year unknown
25. Missing Release of Resource after Effective Lifetime
    cwe.xml · Weakness · Year unknown
26. Missing Reference to Active File Descriptor or Handle
    cwe.xml · Weakness · Year unknown
27. Allocation of File Descriptors or Handles Without Limits or Throttling
    cwe.xml · Weakness · Year unknown
28. Missing Release of File Descriptor or Handle after Effective Lifetime
    cwe.xml · Weakness · Year unknown
29. Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
    cwe.xml · Weakness · Year unknown
30. Regular Expression without Anchors
    cwe.xml · Weakness · Year unknown
31. Insufficient Logging
    cwe.xml · Weakness · Year unknown
32. Logging of Excessive Data
    cwe.xml · Weakness · Year unknown
33. Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
    cwe.xml · Weakness · Year unknown
34. Use of RSA Algorithm without OAEP
    cwe.xml · Weakness · Year unknown
35. Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code
    cwe.xml · Weakness · Year unknown
36. Exposed IOCTL with Insufficient Access Control
    cwe.xml · Weakness · Year unknown
37. Operator Precedence Logic Error
    cwe.xml · Weakness · Year unknown
38. Reliance on Cookies without Validation and Integrity Checking in a Security Decision
    cwe.xml · Weakness · Year unknown
39. Use of Path Manipulation Function without Maximum-sized Buffer
    cwe.xml · Weakness · Year unknown
40. Access of Memory Location Before Start of Buffer
    cwe.xml · Weakness · Year unknown
41. Out-of-bounds Write
    cwe.xml · Weakness · Year unknown
42. Access of Memory Location After End of Buffer
    cwe.xml · Weakness · Year unknown
43. Memory Allocation with Excessive Size Value
    cwe.xml · Weakness · Year unknown
44. Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
    cwe.xml · Weakness · Year unknown
45. Improper Filtering of Special Elements
    cwe.xml · Weakness · Year unknown
46. Incomplete Filtering of Special Elements
    cwe.xml · Weakness · Year unknown
47. Incomplete Filtering of One or More Instances of Special Elements
    cwe.xml · Weakness · Year unknown
48. Only Filtering One Instance of a Special Element
    cwe.xml · Weakness · Year unknown
49. Incomplete Filtering of Multiple Instances of Special Elements
    cwe.xml · Weakness · Year unknown
50. Only Filtering Special Elements at a Specified Location
    cwe.xml · Weakness · Year unknown
51. Only Filtering Special Elements Relative to a Marker
    cwe.xml · Weakness · Year unknown
52. Only Filtering Special Elements at an Absolute Position
    cwe.xml · Weakness · Year unknown
53. Use of Hard-coded Credentials
    cwe.xml · Weakness · Year unknown
54. Improper Control of Interaction Frequency
    cwe.xml · Weakness · Year unknown
55. J2EE Misconfiguration: Entity Bean Declared Remote
    cwe.xml · Weakness · Year unknown
56. Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
    cwe.xml · Weakness · Year unknown
57. Guessable CAPTCHA
    cwe.xml · Weakness · Year unknown
58. Buffer Access with Incorrect Length Value
    cwe.xml · Weakness · Year unknown
59. Buffer Access Using Size of Source Buffer
    cwe.xml · Weakness · Year unknown
60. Reliance on Untrusted Inputs in a Security Decision
    cwe.xml · Weakness · Year unknown
61. Improper Neutralization of Script in an Error Message Web Page
    cwe.xml · Weakness · Year unknown
62. Improper Neutralization of Script in Attributes of IMG Tags in a Web Page
    cwe.xml · Weakness · Year unknown
63. Missing Synchronization
    cwe.xml · Weakness · Year unknown
64. Incorrect Synchronization
    cwe.xml · Weakness · Year unknown
65. Untrusted Pointer Dereference
    cwe.xml · Weakness · Year unknown
66. Use of Out-of-range Pointer Offset
    cwe.xml · Weakness · Year unknown
67. Access of Uninitialized Pointer
    cwe.xml · Weakness · Year unknown
68. Expired Pointer Dereference
    cwe.xml · Weakness · Year unknown
69. Premature Release of Resource During Expected Lifetime
    cwe.xml · Weakness · Year unknown
70. Improper Control of Document Type Definition
    cwe.xml · Weakness · Year unknown
71. Signal Handler with Functionality that is not Asynchronous-Safe
    cwe.xml · Weakness · Year unknown
72. Inclusion of Functionality from Untrusted Control Sphere
    cwe.xml · Weakness · Year unknown
73. Improper Neutralization of Script in Attributes in a Web Page
    cwe.xml · Weakness · Year unknown
74. Inclusion of Web Functionality from an Untrusted Source
    cwe.xml · Weakness · Year unknown
75. Signal Handler Function Associated with Multiple Signals
    cwe.xml · Weakness · Year unknown
76. Unlock of a Resource that is not Locked
    cwe.xml · Weakness · Year unknown
77. Deadlock
    cwe.xml · Weakness · Year unknown
78. Excessive Iteration
    cwe.xml · Weakness · Year unknown
79. Loop with Unreachable Exit Condition ('Infinite Loop')
    cwe.xml · Weakness · Year unknown
80. Use of Password Hash Instead of Password for Authentication
    cwe.xml · Weakness · Year unknown
81. Improper Enforcement of a Single, Unique Action
    cwe.xml · Weakness · Year unknown
82. Inappropriate Encoding for Output Context
    cwe.xml · Weakness · Year unknown
83. Numeric Range Comparison Without Minimum Check
    cwe.xml · Weakness · Year unknown
84. Improper Neutralization of Encoded URI Schemes in a Web Page
    cwe.xml · Weakness · Year unknown
85. Improper Enforcement of Behavioral Workflow
    cwe.xml · Weakness · Year unknown
86. Placement of User into Incorrect Group
    cwe.xml · Weakness · Year unknown
87. Access of Resource Using Incompatible Type ('Type Confusion')
    cwe.xml · Weakness · Year unknown
88. Doubled Character XSS Manipulations
    cwe.xml · Weakness · Year unknown
89. Improper Neutralization of Invalid Characters in Identifiers in Web Pages
    cwe.xml · Weakness · Year unknown
90. Missing Authorization
    cwe.xml · Weakness · Year unknown
91. Incorrect Authorization
    cwe.xml · Weakness · Year unknown
92. Improper Neutralization of Alternate XSS Syntax
    cwe.xml · Weakness · Year unknown
93. Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
    cwe.xml · Weakness · Year unknown
94. Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
    cwe.xml · Weakness · Year unknown
95. J2EE Misconfiguration: Weak Access Permissions for EJB Methods
    cwe.xml · Weakness · Year unknown
96. Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
    cwe.xml · Weakness · Year unknown
97. Use of Uninitialized Resource
    cwe.xml · Weakness · Year unknown
98. Missing Initialization of Resource
    cwe.xml · Weakness · Year unknown
99. XML Injection (aka Blind XPath Injection)
    cwe.xml · Weakness · Year unknown
100. Use of Expired File Descriptor
     cwe.xml · Weakness · Year unknown
101. Improper Update of Reference Count
     cwe.xml · Weakness · Year unknown
102. Hidden Functionality
     cwe.xml · Weakness · Year unknown
103. Improper Control of Dynamically-Managed Code Resources
     cwe.xml · Weakness · Year unknown
104. Improper Control of Dynamically-Identified Variables
     cwe.xml · Weakness · Year unknown
105. Improperly Controlled Modification of Dynamically-Determined Object Attributes
     cwe.xml · Weakness · Year unknown
106. Use of Password Hash With Insufficient Computational Effort
     cwe.xml · Weakness · Year unknown
107. Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
     cwe.xml · Weakness · Year unknown
108. Server-Side Request Forgery (SSRF)
     cwe.xml · Weakness · Year unknown
109. DEPRECATED: Improper Sanitization of Custom Special Characters
     cwe.xml · Weakness · Year unknown
110. Improper Restriction of Power Consumption
     cwe.xml · Weakness · Year unknown
111. Storage of Sensitive Data in a Mechanism without Access Control
     cwe.xml · Weakness · Year unknown
112. Insecure Storage of Sensitive Information
     cwe.xml · Weakness · Year unknown
113. Improper Restriction of Communication Channel to Intended Endpoints
     cwe.xml · Weakness · Year unknown
114. Improper Enforcement of Message Integrity During Transmission in a Communication Channel
     cwe.xml · Weakness · Year unknown
115. Improper Verification of Intent by Broadcast Receiver
     cwe.xml · Weakness · Year unknown
116. Improper Export of Android Application Components
     cwe.xml · Weakness · Year unknown
117. Use of Implicit Intent for Sensitive Communication
     cwe.xml · Weakness · Year unknown
118. Improper Neutralization of CRLF Sequences ('CRLF Injection')
     cwe.xml · Weakness · Year unknown
119. Improper Authorization in Handler for Custom URL Scheme
     cwe.xml · Weakness · Year unknown
120. Improper Control of Generation of Code ('Code Injection')
     cwe.xml · Weakness · Year unknown