aol.pm

Browse all indexed records — page 151

18529 metadata records. Search and filter

  1. Obsolete Feature in UI

    cwe.xml · Weakness · Year unknown
  2. The UI Performs the Wrong Action

    cwe.xml · Weakness · Year unknown
  3. Path Equivalence: 'file...name' (Multiple Internal Dot)

    cwe.xml · Weakness · Year unknown
  4. Multiple Interpretations of UI Input

    cwe.xml · Weakness · Year unknown
  5. User Interface (UI) Misrepresentation of Critical Information

    cwe.xml · Weakness · Year unknown
  6. Insecure Default Variable Initialization

    cwe.xml · Weakness · Year unknown
  7. External Initialization of Trusted Variables or Data Stores

    cwe.xml · Weakness · Year unknown
  8. Non-exit on Failed Initialization

    cwe.xml · Weakness · Year unknown
  9. Missing Initialization of a Variable

    cwe.xml · Weakness · Year unknown
  10. Use of Uninitialized Variable

    cwe.xml · Weakness · Year unknown
  11. DEPRECATED: Incorrect Initialization

    cwe.xml · Weakness · Year unknown
  12. Incomplete Cleanup

    cwe.xml · Weakness · Year unknown
  13. Path Equivalence: 'filename ' (Trailing Space)

    cwe.xml · Weakness · Year unknown
  14. Improper Cleanup on Thrown Exception

    cwe.xml · Weakness · Year unknown
  15. Duplicate Key in Associative List (Alist)

    cwe.xml · Weakness · Year unknown
  16. Deletion of Data Structure Sentinel

    cwe.xml · Weakness · Year unknown
  17. Addition of Data Structure Sentinel

    cwe.xml · Weakness · Year unknown
  18. Return of Pointer Value Outside of Expected Range

    cwe.xml · Weakness · Year unknown
  19. Use of sizeof() on a Pointer Type

    cwe.xml · Weakness · Year unknown
  20. Incorrect Pointer Scaling

    cwe.xml · Weakness · Year unknown
  21. Use of Pointer Subtraction to Determine Size

    cwe.xml · Weakness · Year unknown
  22. Path Equivalence: ' filename' (Leading Space)

    cwe.xml · Weakness · Year unknown
  23. Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

    cwe.xml · Weakness · Year unknown
  24. Modification of Assumed-Immutable Data (MAID)

    cwe.xml · Weakness · Year unknown
  25. External Control of Assumed-Immutable Web Parameter

    cwe.xml · Weakness · Year unknown
  26. PHP External Variable Modification

    cwe.xml · Weakness · Year unknown
  27. Use of Function with Inconsistent Implementations

    cwe.xml · Weakness · Year unknown
  28. Undefined Behavior for Input to API

    cwe.xml · Weakness · Year unknown
  29. NULL Pointer Dereference

    cwe.xml · Weakness · Year unknown
  30. Use of Obsolete Function

    cwe.xml · Weakness · Year unknown
  31. Missing Default Case in Multiple Condition Expression

    cwe.xml · Weakness · Year unknown
  32. Signal Handler Use of a Non-reentrant Function

    cwe.xml · Weakness · Year unknown
  33. Path Equivalence: 'file name' (Internal Whitespace)

    cwe.xml · Weakness · Year unknown
  34. Use of Incorrect Operator

    cwe.xml · Weakness · Year unknown
  35. Assigning instead of Comparing

    cwe.xml · Weakness · Year unknown
  36. Comparing instead of Assigning

    cwe.xml · Weakness · Year unknown
  37. Incorrect Block Delimitation

    cwe.xml · Weakness · Year unknown
  38. Omitted Break Statement in Switch

    cwe.xml · Weakness · Year unknown
  39. Comparison of Classes by Name

    cwe.xml · Weakness · Year unknown
  40. Reliance on Package-level Scope

    cwe.xml · Weakness · Year unknown
  41. Exposure of Data Element to Wrong Session

    cwe.xml · Weakness · Year unknown
  42. Active Debug Code

    cwe.xml · Weakness · Year unknown
  43. Path Equivalence: 'filename/' (Trailing Slash)

    cwe.xml · Weakness · Year unknown
  44. Public cloneable() Method Without Final ('Object Hijack')

    cwe.xml · Weakness · Year unknown
  45. Use of Inner Class Containing Sensitive Data

    cwe.xml · Weakness · Year unknown
  46. Critical Public Variable Without Final Modifier

    cwe.xml · Weakness · Year unknown
  47. Download of Code Without Integrity Check

    cwe.xml · Weakness · Year unknown
  48. Private Data Structure Returned From A Public Method

    cwe.xml · Weakness · Year unknown
  49. Public Data Assigned to Private Array-Typed Field

    cwe.xml · Weakness · Year unknown
  50. Exposure of Sensitive System Information to an Unauthorized Control Sphere

    cwe.xml · Weakness · Year unknown
  51. Cloneable Class Containing Sensitive Information

    cwe.xml · Weakness · Year unknown
  52. Serializable Class Containing Sensitive Data

    cwe.xml · Weakness · Year unknown
  53. J2EE Misconfiguration: Data Transmission Without Encryption

    cwe.xml · Weakness · Year unknown
  54. Path Equivalence: '//multiple/leading/slash'

    cwe.xml · Weakness · Year unknown
  55. Public Static Field Not Marked Final

    cwe.xml · Weakness · Year unknown
  56. Trust Boundary Violation

    cwe.xml · Weakness · Year unknown
  57. Deserialization of Untrusted Data

    cwe.xml · Weakness · Year unknown
  58. Embedded Malicious Code

    cwe.xml · Weakness · Year unknown
  59. Trojan Horse

    cwe.xml · Weakness · Year unknown
  60. Non-Replicating Malicious Code

    cwe.xml · Weakness · Year unknown
  61. Replicating Malicious Code (Virus or Worm)

    cwe.xml · Weakness · Year unknown
  62. Path Equivalence: '/multiple//internal/slash'

    cwe.xml · Weakness · Year unknown
  63. Trapdoor

    cwe.xml · Weakness · Year unknown
  64. Logic/Time Bomb

    cwe.xml · Weakness · Year unknown
  65. Spyware

    cwe.xml · Weakness · Year unknown
  66. Covert Channel

    cwe.xml · Weakness · Year unknown
  67. Covert Storage Channel

    cwe.xml · Weakness · Year unknown
  68. DEPRECATED: Covert Timing Channel

    cwe.xml · Weakness · Year unknown
  69. Path Equivalence: '/multiple/trailing/slash//'

    cwe.xml · Weakness · Year unknown
  70. .NET Misconfiguration: Use of Impersonation

    cwe.xml · Weakness · Year unknown
  71. Weak Password Requirements

    cwe.xml · Weakness · Year unknown
  72. Insufficiently Protected Credentials

    cwe.xml · Weakness · Year unknown
  73. Unprotected Transport of Credentials

    cwe.xml · Weakness · Year unknown
  74. Use of Cache Containing Sensitive Information

    cwe.xml · Weakness · Year unknown
  75. Use of Web Browser Cache Containing Sensitive Information

    cwe.xml · Weakness · Year unknown
  76. Cleartext Storage of Sensitive Information in an Environment Variable

    cwe.xml · Weakness · Year unknown
  77. Exposure of Version-Control Repository to an Unauthorized Control Sphere

    cwe.xml · Weakness · Year unknown
  78. Exposure of Core Dump File to an Unauthorized Control Sphere

    cwe.xml · Weakness · Year unknown
  79. Exposure of Access Control List Files to an Unauthorized Control Sphere

    cwe.xml · Weakness · Year unknown
  80. Path Equivalence: '\multiple\\internal\backslash'

    cwe.xml · Weakness · Year unknown
  81. Exposure of Backup File to an Unauthorized Control Sphere

    cwe.xml · Weakness · Year unknown
  82. Inclusion of Sensitive Information in Test Code

    cwe.xml · Weakness · Year unknown
  83. Insertion of Sensitive Information into Log File

    cwe.xml · Weakness · Year unknown
  84. DEPRECATED: Information Exposure Through Server Log Files

    cwe.xml · Weakness · Year unknown
  85. DEPRECATED: Information Exposure Through Debug Log Files

    cwe.xml · Weakness · Year unknown
  86. Exposure of Information Through Shell Error Message

    cwe.xml · Weakness · Year unknown
  87. Servlet Runtime Error Message Containing Sensitive Information

    cwe.xml · Weakness · Year unknown
  88. Java Runtime Error Message Containing Sensitive Information

    cwe.xml · Weakness · Year unknown
  89. Insertion of Sensitive Information into Externally-Accessible File or Directory

    cwe.xml · Weakness · Year unknown
  90. Use of Persistent Cookies Containing Sensitive Information

    cwe.xml · Weakness · Year unknown
  91. Path Equivalence: 'filedir\' (Trailing Backslash)

    cwe.xml · Weakness · Year unknown
  92. Inclusion of Sensitive Information in Source Code

    cwe.xml · Weakness · Year unknown
  93. Inclusion of Sensitive Information in an Include File

    cwe.xml · Weakness · Year unknown
  94. DEPRECATED: Information Exposure Through Cleanup Log Files

    cwe.xml · Weakness · Year unknown
  95. Use of Singleton Pattern Without Synchronization in a Multithreaded Context

    cwe.xml · Weakness · Year unknown
  96. Missing Standardized Error Handling Mechanism

    cwe.xml · Weakness · Year unknown
  97. DEPRECATED: Use of Dynamic Class Loading

    cwe.xml · Weakness · Year unknown
  98. Suspicious Comment

    cwe.xml · Weakness · Year unknown
  99. Use of Hard-coded, Security-relevant Constants

    cwe.xml · Weakness · Year unknown
  100. Exposure of Information Through Directory Listing

    cwe.xml · Weakness · Year unknown
  101. Missing Password Field Masking

    cwe.xml · Weakness · Year unknown
  102. Path Equivalence: '/./' (Single Dot Directory)

    cwe.xml · Weakness · Year unknown
  103. Server-generated Error Message Containing Sensitive Information

    cwe.xml · Weakness · Year unknown
  104. Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

    cwe.xml · Weakness · Year unknown
  105. Files or Directories Accessible to External Parties

    cwe.xml · Weakness · Year unknown
  106. Command Shell in Externally Accessible Directory

    cwe.xml · Weakness · Year unknown
  107. ASP.NET Misconfiguration: Not Using Input Validation Framework

    cwe.xml · Weakness · Year unknown
  108. J2EE Misconfiguration: Plaintext Password in Configuration File

    cwe.xml · Weakness · Year unknown
  109. ASP.NET Misconfiguration: Use of Identity Impersonation

    cwe.xml · Weakness · Year unknown
  110. Use of getlogin() in Multithreaded Application

    cwe.xml · Weakness · Year unknown
  111. Path Equivalence: 'filedir*' (Wildcard)

    cwe.xml · Weakness · Year unknown
  112. Use of umask() with chmod-style Argument

    cwe.xml · Weakness · Year unknown
  113. Dead Code

    cwe.xml · Weakness · Year unknown
  114. Return of Stack Variable Address

    cwe.xml · Weakness · Year unknown
  115. Assignment to Variable without Use

    cwe.xml · Weakness · Year unknown
  116. SQL Injection: Hibernate

    cwe.xml · Weakness · Year unknown
  117. Reliance on Cookies without Validation and Integrity Checking

    cwe.xml · Weakness · Year unknown
  118. Authorization Bypass Through User-Controlled SQL Primary Key

    cwe.xml · Weakness · Year unknown
  119. Unsynchronized Access to Shared Data in a Multithreaded Context

    cwe.xml · Weakness · Year unknown
  120. finalize() Method Without super.finalize()

    cwe.xml · Weakness · Year unknown

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.