Weakness

969 metadata records. Search and filter

1. Sensitive Cookie Without 'HttpOnly' Flag
   cwe.xml · Weakness · Year unknown
2. Insufficient Visual Distinction of Homoglyphs Presented to User
   cwe.xml · Weakness · Year unknown
3. Struts: Duplicate Validation Forms
   cwe.xml · Weakness · Year unknown
4. Improper Restriction of Rendered UI Layers or Frames
   cwe.xml · Weakness · Year unknown
5. Use of Web Link to Untrusted Target with window.opener Access
   cwe.xml · Weakness · Year unknown
6. Incomplete Comparison with Missing Factors
   cwe.xml · Weakness · Year unknown
7. Comparison of Incompatible Types
   cwe.xml · Weakness · Year unknown
8. Comparison Using Wrong Factors
   cwe.xml · Weakness · Year unknown
9. Struts: Incomplete validate() Method Definition
   cwe.xml · Weakness · Year unknown
10. Processor Optimization Removal or Modification of Security-critical Code
    cwe.xml · Weakness · Year unknown
11. Insecure Automated Optimizations
    cwe.xml · Weakness · Year unknown
12. Inadequate Detection or Handling of Adversarial Input Perturbations in Automated Recognition Mechanism
    cwe.xml · Weakness · Year unknown
13. Struts: Form Bean Does Not Extend Validation Class
    cwe.xml · Weakness · Year unknown
14. Use of Redundant Code
    cwe.xml · Weakness · Year unknown
15. Static Member Data Element outside of a Singleton Class Element
    cwe.xml · Weakness · Year unknown
16. Data Element Aggregating an Excessively Large Number of Non-Primitive Elements
    cwe.xml · Weakness · Year unknown
17. Architecture with Number of Horizontal Layers Outside of Expected Range
    cwe.xml · Weakness · Year unknown
18. Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor
    cwe.xml · Weakness · Year unknown
19. Creation of Immutable Text Using String Concatenation
    cwe.xml · Weakness · Year unknown
20. Modules with Circular Dependencies
    cwe.xml · Weakness · Year unknown
21. Invokable Control Element with Large Number of Outward Calls
    cwe.xml · Weakness · Year unknown
22. Excessive Data Query Operations in a Large Data Table
    cwe.xml · Weakness · Year unknown
23. Struts: Form Field Without Validator
    cwe.xml · Weakness · Year unknown
24. Excessive Platform Resource Consumption within a Loop
    cwe.xml · Weakness · Year unknown
25. Initialization with Hard-Coded Network Resource Configuration Data
    cwe.xml · Weakness · Year unknown
26. Excessive Use of Hard-Coded Literals in Initialization
    cwe.xml · Weakness · Year unknown
27. Missing Documentation for Design
    cwe.xml · Weakness · Year unknown
28. Invocation of a Control Element at an Unnecessarily Deep Horizontal Layer
    cwe.xml · Weakness · Year unknown
29. Multiple Inheritance from Concrete Classes
    cwe.xml · Weakness · Year unknown
30. Invokable Control Element with Variadic Parameters
    cwe.xml · Weakness · Year unknown
31. Data Access Operations Outside of Expected Data Manager Component
    cwe.xml · Weakness · Year unknown
32. Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element
    cwe.xml · Weakness · Year unknown
33. Insufficient Technical Documentation
    cwe.xml · Weakness · Year unknown
34. Struts: Plug-in Framework not in Use
    cwe.xml · Weakness · Year unknown
35. Excessive Number of Inefficient Server-Side Data Accesses
    cwe.xml · Weakness · Year unknown
36. Insufficient Encapsulation
    cwe.xml · Weakness · Year unknown
37. Parent Class with References to Child Class
    cwe.xml · Weakness · Year unknown
38. Creation of Class Instance within a Static Code Block
    cwe.xml · Weakness · Year unknown
39. Invokable Control Element with Signature Containing an Excessive Number of Parameters
    cwe.xml · Weakness · Year unknown
40. Runtime Resource Management Control Element in a Component Built to Run on Application Servers
    cwe.xml · Weakness · Year unknown
41. Missing Serialization Control Element
    cwe.xml · Weakness · Year unknown
42. Excessive Execution of Sequential Searches of Data Resource
    cwe.xml · Weakness · Year unknown
43. Inconsistency Between Implementation and Documented Design
    cwe.xml · Weakness · Year unknown
44. Empty Exception Block
    cwe.xml · Weakness · Year unknown
45. Struts: Unused Validation Form
    cwe.xml · Weakness · Year unknown
46. Serializable Data Element Containing non-Serializable Item Elements
    cwe.xml · Weakness · Year unknown
47. Empty Code Block
    cwe.xml · Weakness · Year unknown
48. Data Resource Access without Use of Connection Pooling
    cwe.xml · Weakness · Year unknown
49. Non-SQL Invokable Control Element with Excessive Number of Data Resource Accesses
    cwe.xml · Weakness · Year unknown
50. Class with Excessively Deep Inheritance
    cwe.xml · Weakness · Year unknown
51. Unconditional Control Flow Transfer outside of Switch Block
    cwe.xml · Weakness · Year unknown
52. Insufficient Adherence to Expected Conventions
    cwe.xml · Weakness · Year unknown
53. Floating Point Comparison with Incorrect Operator
    cwe.xml · Weakness · Year unknown
54. Inappropriate Source Code Style or Formatting
    cwe.xml · Weakness · Year unknown
55. Parent Class without Virtual Destructor Method
    cwe.xml · Weakness · Year unknown
56. Struts: Unvalidated Action Form
    cwe.xml · Weakness · Year unknown
57. Source Code File with Excessive Number of Lines of Code
    cwe.xml · Weakness · Year unknown
58. Class Instance Self Destruction Control Element
    cwe.xml · Weakness · Year unknown
59. Data Access from Outside Expected Data Manager Component
    cwe.xml · Weakness · Year unknown
60. Invokable Control Element with Excessive File or Data Access Operations
    cwe.xml · Weakness · Year unknown
61. Invokable Control Element with Excessive Volume of Commented-out Code
    cwe.xml · Weakness · Year unknown
62. Class with Excessive Number of Child Classes
    cwe.xml · Weakness · Year unknown
63. Class with Virtual Method without a Virtual Destructor
    cwe.xml · Weakness · Year unknown
64. Synchronous Access of Remote Resource without Timeout
    cwe.xml · Weakness · Year unknown
65. Large Data Table with Excessive Number of Indices
    cwe.xml · Weakness · Year unknown
66. Struts: Validator Turned Off
    cwe.xml · Weakness · Year unknown
67. Method Containing Access of a Member Element from Another Class
    cwe.xml · Weakness · Year unknown
68. Use of Object without Invoking Destructor Method
    cwe.xml · Weakness · Year unknown
69. Use of Same Invokable Control Element in Multiple Architectural Layers
    cwe.xml · Weakness · Year unknown
70. Excessively Complex Data Representation
    cwe.xml · Weakness · Year unknown
71. Excessive Index Range Scan for a Data Resource
    cwe.xml · Weakness · Year unknown
72. Loop Condition Value Update within the Loop
    cwe.xml · Weakness · Year unknown
73. Singleton Class Instance Creation without Proper Locking or Synchronization
    cwe.xml · Weakness · Year unknown
74. Persistent Storable Data Element without Associated Comparison Control Element
    cwe.xml · Weakness · Year unknown
75. Data Element containing Pointer Item without Proper Copy Control Element
    cwe.xml · Weakness · Year unknown
76. Inconsistent Naming Conventions for Identifiers
    cwe.xml · Weakness · Year unknown
77. ASP.NET Misconfiguration: Creating Debug Binary
    cwe.xml · Weakness · Year unknown
78. Struts: Validator Without Form Field
    cwe.xml · Weakness · Year unknown
79. Insufficient Isolation of System-Dependent Functions
    cwe.xml · Weakness · Year unknown
80. Reliance on Runtime Component in Generated Code
    cwe.xml · Weakness · Year unknown
81. Reliance on Machine-Dependent Data Representation
    cwe.xml · Weakness · Year unknown
82. Use of Platform-Dependent Third Party Components
    cwe.xml · Weakness · Year unknown
83. Use of Unmaintained Third Party Components
    cwe.xml · Weakness · Year unknown
84. Insufficient Encapsulation of Machine-Dependent Functionality
    cwe.xml · Weakness · Year unknown
85. Insufficient Use of Symbolic Constants
    cwe.xml · Weakness · Year unknown
86. Insufficient Isolation of Symbolic Constant Definitions
    cwe.xml · Weakness · Year unknown
87. Excessive Reliance on Global Variables
    cwe.xml · Weakness · Year unknown
88. Use of Same Variable for Multiple Purposes
    cwe.xml · Weakness · Year unknown
89. Direct Use of Unsafe JNI
    cwe.xml · Weakness · Year unknown
90. Incomplete Design Documentation
    cwe.xml · Weakness · Year unknown
91. Incomplete I/O Documentation
    cwe.xml · Weakness · Year unknown
92. Incomplete Documentation of Program Execution
    cwe.xml · Weakness · Year unknown
93. Inappropriate Comment Style
    cwe.xml · Weakness · Year unknown
94. Inappropriate Whitespace Style
    cwe.xml · Weakness · Year unknown
95. Source Code Element without Standard Prologue
    cwe.xml · Weakness · Year unknown
96. Inaccurate Source Code Comments
    cwe.xml · Weakness · Year unknown
97. Callable with Insufficient Behavioral Summary
    cwe.xml · Weakness · Year unknown
98. Insufficient Documentation of Error Handling Techniques
    cwe.xml · Weakness · Year unknown
99. Excessive Use of Unconditional Branching
    cwe.xml · Weakness · Year unknown
100. Missing XML Validation
     cwe.xml · Weakness · Year unknown
101. Excessive Code Complexity
     cwe.xml · Weakness · Year unknown
102. Excessive McCabe Cyclomatic Complexity
     cwe.xml · Weakness · Year unknown
103. Excessive Halstead Complexity
     cwe.xml · Weakness · Year unknown
104. Excessive Use of Self-Modifying Code
     cwe.xml · Weakness · Year unknown
105. Excessively Deep Nesting
     cwe.xml · Weakness · Year unknown
106. Excessive Attack Surface
     cwe.xml · Weakness · Year unknown
107. Declaration of Variable with Unnecessarily Wide Scope
     cwe.xml · Weakness · Year unknown
108. Compilation with Insufficient Warnings or Errors
     cwe.xml · Weakness · Year unknown
109. Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')
     cwe.xml · Weakness · Year unknown
110. Process Control
     cwe.xml · Weakness · Year unknown
111. Misinterpretation of Input
     cwe.xml · Weakness · Year unknown
112. Improper Encoding or Escaping of Output
     cwe.xml · Weakness · Year unknown
113. Irrelevant Code
     cwe.xml · Weakness · Year unknown
114. Improper Output Neutralization for Logs
     cwe.xml · Weakness · Year unknown
115. Improper Use of Validation Framework
     cwe.xml · Weakness · Year unknown
116. ASP.NET Misconfiguration: Improper Model Validation
     cwe.xml · Weakness · Year unknown
117. Inefficient CPU Computation
     cwe.xml · Weakness · Year unknown
118. Use of Prohibited Code
     cwe.xml · Weakness · Year unknown
119. Incorrect Access of Indexable Resource ('Range Error')
     cwe.xml · Weakness · Year unknown
120. DEPRECATED: Use of Uninitialized Resource
     cwe.xml · Weakness · Year unknown