Weakness — page 2

969 metadata records. Search and filter

1. Initialization of a Resource with an Insecure Default
   cwe.xml · Weakness · Year unknown
2. Improper Isolation of Shared Resources on System-on-a-Chip (SoC)
   cwe.xml · Weakness · Year unknown
3. Improper Restriction of Operations within the Bounds of a Memory Buffer
   cwe.xml · Weakness · Year unknown
4. DMA Device Enabled Too Early in Boot Phase
   cwe.xml · Weakness · Year unknown
5. On-Chip Debug and Test Interface With Improper Access Control
   cwe.xml · Weakness · Year unknown
6. Improper Identifier for IP Block used in System-On-Chip (SOC)
   cwe.xml · Weakness · Year unknown
7. Power-On of Untrusted Execution Core Before Enabling Fabric Access Control
   cwe.xml · Weakness · Year unknown
8. ASP.NET Misconfiguration: Missing Custom Error Page
   cwe.xml · Weakness · Year unknown
9. Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
   cwe.xml · Weakness · Year unknown
10. Generation of Weak Initialization Vector (IV)
    cwe.xml · Weakness · Year unknown
11. Failure to Disable Reserved Bits
    cwe.xml · Weakness · Year unknown
12. Stack-based Buffer Overflow
    cwe.xml · Weakness · Year unknown
13. Heap-based Buffer Overflow
    cwe.xml · Weakness · Year unknown
14. Insufficient Granularity of Access Control
    cwe.xml · Weakness · Year unknown
15. Incorrect Register Defaults or Module Parameters
    cwe.xml · Weakness · Year unknown
16. Insufficient Granularity of Address Regions Protected by Register Locks
    cwe.xml · Weakness · Year unknown
17. Race Condition for Write-Once Attributes
    cwe.xml · Weakness · Year unknown
18. Improper Restriction of Write-Once Bit Fields
    cwe.xml · Weakness · Year unknown
19. Creation of Emergent Resource
    cwe.xml · Weakness · Year unknown
20. Write-what-where Condition
    cwe.xml · Weakness · Year unknown
21. Exposure of Sensitive Information Through Metadata
    cwe.xml · Weakness · Year unknown
22. Improper Prevention of Lock Bit Modification
    cwe.xml · Weakness · Year unknown
23. Improper Lock Behavior After Power State Transition
    cwe.xml · Weakness · Year unknown
24. Security-Sensitive Hardware Controls with Missing Lock Bit Protection
    cwe.xml · Weakness · Year unknown
25. Hardware Internal or Debug Modes Allow Override of Locks
    cwe.xml · Weakness · Year unknown
26. Incorrect Use of Autoboxing and Unboxing for Performance Critical Operations
    cwe.xml · Weakness · Year unknown
27. Improper Neutralization of Formula Elements in a CSV File
    cwe.xml · Weakness · Year unknown
28. Improper Zeroization of Hardware Register
    cwe.xml · Weakness · Year unknown
29. Buffer Underwrite ('Buffer Underflow')
    cwe.xml · Weakness · Year unknown
30. Use of a Cryptographic Primitive with a Risky Implementation
    cwe.xml · Weakness · Year unknown
31. Use of Predictable Algorithm in Random Number Generator
    cwe.xml · Weakness · Year unknown
32. Inclusion of Undocumented Features or Chicken Bits
    cwe.xml · Weakness · Year unknown
33. Sensitive Non-Volatile Information Not Protected During Debug
    cwe.xml · Weakness · Year unknown
34. Internal Asset Exposed to Unsafe Debug Access Level or State
    cwe.xml · Weakness · Year unknown
35. Improper Finite State Machines (FSMs) in Hardware Logic
    cwe.xml · Weakness · Year unknown
36. Improper Write Handling in Limited-write Non-Volatile Memories
    cwe.xml · Weakness · Year unknown
37. Improper Protection Against Voltage and Clock Glitches
    cwe.xml · Weakness · Year unknown
38. Semiconductor Defects in Hardware Logic with Security-Sensitive Implications
    cwe.xml · Weakness · Year unknown
39. Application-Level Admin Tool with Inconsistent View of Underlying Operating System
    cwe.xml · Weakness · Year unknown
40. Out-of-bounds Read
    cwe.xml · Weakness · Year unknown
41. Improper Preservation of Consistency Between Independent Representations of Shared State
    cwe.xml · Weakness · Year unknown
42. Mirrored Regions with Different Values
    cwe.xml · Weakness · Year unknown
43. CPU Hardware Not Configured to Support Exclusivity of Write and Execute Operations
    cwe.xml · Weakness · Year unknown
44. Incorrect Selection of Fuse Values
    cwe.xml · Weakness · Year unknown
45. Incorrect Comparison Logic Granularity
    cwe.xml · Weakness · Year unknown
46. Comparison Logic is Vulnerable to Power Side-Channel Attacks
    cwe.xml · Weakness · Year unknown
47. Improper Restriction of Software Interfaces to Hardware Features
    cwe.xml · Weakness · Year unknown
48. Improper Access Control Applied to Mirrored or Aliased Memory Regions
    cwe.xml · Weakness · Year unknown
49. Exposure of Sensitive System Information Due to Uncleared Debug Information
    cwe.xml · Weakness · Year unknown
50. Improper Restriction of Security Token Assignment
    cwe.xml · Weakness · Year unknown
51. Buffer Over-read
    cwe.xml · Weakness · Year unknown
52. Improper Handling of Overlap Between Protected Memory Ranges
    cwe.xml · Weakness · Year unknown
53. Improper Handling of Single Event Upsets
    cwe.xml · Weakness · Year unknown
54. Improper Access Control for Register Interface
    cwe.xml · Weakness · Year unknown
55. Improper Physical Access Control
    cwe.xml · Weakness · Year unknown
56. Hardware Logic with Insecure De-Synchronization between Control and Data Channels
    cwe.xml · Weakness · Year unknown
57. Unintended Reentrant Invocation of Non-reentrant Code Via Nested Calls
    cwe.xml · Weakness · Year unknown
58. Improper Scrubbing of Sensitive Data from Decommissioned Device
    cwe.xml · Weakness · Year unknown
59. Policy Uses Obsolete Encoding
    cwe.xml · Weakness · Year unknown
60. Policy Privileges are not Assigned Consistently Between Control and Data Agents
    cwe.xml · Weakness · Year unknown
61. Product Released in Non-Release Configuration
    cwe.xml · Weakness · Year unknown
62. Buffer Under-read
    cwe.xml · Weakness · Year unknown
63. Generation of Incorrect Security Tokens
    cwe.xml · Weakness · Year unknown
64. Uninitialized Value on Reset for Registers Holding Security Settings
    cwe.xml · Weakness · Year unknown
65. Sensitive Information Uncleared Before Debug/Power State Transition
    cwe.xml · Weakness · Year unknown
66. Device Unlock Credential Sharing
    cwe.xml · Weakness · Year unknown
67. Improper Access Control for Volatile Memory Containing Boot Code
    cwe.xml · Weakness · Year unknown
68. Sensitive Cookie with Improper SameSite Attribute
    cwe.xml · Weakness · Year unknown
69. Hardware Child Block Incorrectly Connected to Parent System
    cwe.xml · Weakness · Year unknown
70. Firmware Not Updateable
    cwe.xml · Weakness · Year unknown
71. Missing Protection Against Hardware Reverse Engineering Using Integrated Circuit (IC) Imaging Techniques
    cwe.xml · Weakness · Year unknown
72. Cryptographic Operations are run Before Supporting Units are Ready
    cwe.xml · Weakness · Year unknown
73. Wrap-around Error
    cwe.xml · Weakness · Year unknown
74. Access Control Check Implemented After Asset is Accessed
    cwe.xml · Weakness · Year unknown
75. Sequence of Processor Instructions Leads to Unexpected Behavior
    cwe.xml · Weakness · Year unknown
76. Assumed-Immutable Data is Stored in Writable Memory
    cwe.xml · Weakness · Year unknown
77. Mutable Attestation or Measurement Reporting Data
    cwe.xml · Weakness · Year unknown
78. Improper Validation of Specified Quantity in Input
    cwe.xml · Weakness · Year unknown
79. Improper Validation of Specified Index, Position, or Offset in Input
    cwe.xml · Weakness · Year unknown
80. Improper Validation of Syntactic Correctness of Input
    cwe.xml · Weakness · Year unknown
81. Improper Validation of Specified Type of Input
    cwe.xml · Weakness · Year unknown
82. Improper Validation of Consistency within Input
    cwe.xml · Weakness · Year unknown
83. Improper Validation of Unsafe Equivalence in Input
    cwe.xml · Weakness · Year unknown
84. Improper Validation of Array Index
    cwe.xml · Weakness · Year unknown
85. Incorrect Decoding of Security Identifiers
    cwe.xml · Weakness · Year unknown
86. Public Key Re-Use for Signing both Debug and Production Code
    cwe.xml · Weakness · Year unknown
87. Incorrect Conversion of Security Identifiers
    cwe.xml · Weakness · Year unknown
88. Missing Source Correlation of Multiple Independent Data
    cwe.xml · Weakness · Year unknown
89. Insecure Security Identifier Mechanism
    cwe.xml · Weakness · Year unknown
90. Debug Messages Revealing Unnecessary Information
    cwe.xml · Weakness · Year unknown
91. Incorrect Chaining or Granularity of Debug Components
    cwe.xml · Weakness · Year unknown
92. Unprotected Confidential Information on Device is Accessible by OSAT Vendors
    cwe.xml · Weakness · Year unknown
93. Hardware Logic Contains Race Conditions
    cwe.xml · Weakness · Year unknown
94. Missing Protection Mechanism for Alternate Hardware Interface
    cwe.xml · Weakness · Year unknown
95. ASP.NET Misconfiguration: Password in Configuration File
    cwe.xml · Weakness · Year unknown
96. Improper Handling of Length Parameter Inconsistency
    cwe.xml · Weakness · Year unknown
97. Improper Protection of Physical Side Channels
    cwe.xml · Weakness · Year unknown
98. Insufficient or Incomplete Data Removal within Hardware Component
    cwe.xml · Weakness · Year unknown
99. Missing Source Identifier in Entity Transactions on a System-On-Chip (SOC)
    cwe.xml · Weakness · Year unknown
100. Non-Transparent Sharing of Microarchitectural Resources
     cwe.xml · Weakness · Year unknown
101. Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation
     cwe.xml · Weakness · Year unknown
102. Incorrect Calculation of Buffer Size
     cwe.xml · Weakness · Year unknown
103. Missing Ability to Patch ROM Code
     cwe.xml · Weakness · Year unknown
104. Improper Translation of Security Attributes by Fabric Bridge
     cwe.xml · Weakness · Year unknown
105. Missing Protection for Mirrored Regions in On-Chip Fabric Firewall
     cwe.xml · Weakness · Year unknown
106. Hardware Allows Activation of Test or Debug Logic at Runtime
     cwe.xml · Weakness · Year unknown
107. Missing Write Protection for Parametric Data Values
     cwe.xml · Weakness · Year unknown
108. Improper Setting of Bus Controlling Capability in Fabric End-point
     cwe.xml · Weakness · Year unknown
109. Fabric-Address Map Allows Programming of Unwarranted Overlaps of Protected and Unprotected Ranges
     cwe.xml · Weakness · Year unknown
110. Improper Access Control in Fabric Bridge
     cwe.xml · Weakness · Year unknown
111. Missing Support for Security Features in On-chip Fabrics or Buses
     cwe.xml · Weakness · Year unknown
112. Improper Protection against Electromagnetic Fault Injection (EM-FI)
     cwe.xml · Weakness · Year unknown
113. DEPRECATED: Miscalculated Null Termination
     cwe.xml · Weakness · Year unknown
114. Improper Protection for Outbound Error Messages and Alert Signals
     cwe.xml · Weakness · Year unknown
115. Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
     cwe.xml · Weakness · Year unknown
116. Use of Blocking Code in Single-threaded, Non-blocking Context
     cwe.xml · Weakness · Year unknown
117. Improper Management of Sensitive Trace Data
     cwe.xml · Weakness · Year unknown
118. DEPRECATED: Sensitive Information Accessible by Physical Probing of JTAG Interface
     cwe.xml · Weakness · Year unknown
119. Improperly Controlled Sequential Memory Allocation
     cwe.xml · Weakness · Year unknown
120. Missing Immutable Root of Trust in Hardware
     cwe.xml · Weakness · Year unknown