Weakness — page 5

969 metadata records. Search and filter

1. Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
   cwe.xml · Weakness · Year unknown
2. Small Seed Space in PRNG
   cwe.xml · Weakness · Year unknown
3. Path Traversal: '....//'
   cwe.xml · Weakness · Year unknown
4. Generation of Predictable Numbers or Identifiers
   cwe.xml · Weakness · Year unknown
5. Predictable from Observable State
   cwe.xml · Weakness · Year unknown
6. Predictable Exact Value from Previous Values
   cwe.xml · Weakness · Year unknown
7. Predictable Value Range from Previous Values
   cwe.xml · Weakness · Year unknown
8. Use of Invariant Value in Dynamically Changing Context
   cwe.xml · Weakness · Year unknown
9. Insufficient Verification of Data Authenticity
   cwe.xml · Weakness · Year unknown
10. Origin Validation Error
    cwe.xml · Weakness · Year unknown
11. Improper Verification of Cryptographic Signature
    cwe.xml · Weakness · Year unknown
12. Use of Less Trusted Source
    cwe.xml · Weakness · Year unknown
13. Acceptance of Extraneous Untrusted Data With Trusted Data
    cwe.xml · Weakness · Year unknown
14. Path Traversal: '.../...//'
    cwe.xml · Weakness · Year unknown
15. Reliance on Reverse DNS Resolution for a Security-Critical Action
    cwe.xml · Weakness · Year unknown
16. Insufficient Type Distinction
    cwe.xml · Weakness · Year unknown
17. Cross-Site Request Forgery (CSRF)
    cwe.xml · Weakness · Year unknown
18. Missing Support for Integrity Check
    cwe.xml · Weakness · Year unknown
19. Improper Validation of Integrity Check Value
    cwe.xml · Weakness · Year unknown
20. Product UI does not Warn User of Unsafe Actions
    cwe.xml · Weakness · Year unknown
21. Insufficient UI Warning of Dangerous Operations
    cwe.xml · Weakness · Year unknown
22. Improperly Implemented Security Check for Standard
    cwe.xml · Weakness · Year unknown
23. Exposure of Private Personal Information to an Unauthorized Actor
    cwe.xml · Weakness · Year unknown
24. Absolute Path Traversal
    cwe.xml · Weakness · Year unknown
25. Trust of System Event Data
    cwe.xml · Weakness · Year unknown
26. Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
    cwe.xml · Weakness · Year unknown
27. Race Condition Enabling Link Following
    cwe.xml · Weakness · Year unknown
28. Signal Handler Race Condition
    cwe.xml · Weakness · Year unknown
29. DEPRECATED: Race Condition in Switch
    cwe.xml · Weakness · Year unknown
30. Race Condition within a Thread
    cwe.xml · Weakness · Year unknown
31. Time-of-check Time-of-use (TOCTOU) Race Condition
    cwe.xml · Weakness · Year unknown
32. Context Switching Race Condition
    cwe.xml · Weakness · Year unknown
33. Divide By Zero
    cwe.xml · Weakness · Year unknown
34. Path Traversal: '/absolute/pathname/here'
    cwe.xml · Weakness · Year unknown
35. Missing Check for Certificate Revocation after Initial Check
    cwe.xml · Weakness · Year unknown
36. Incomplete Internal State Distinction
    cwe.xml · Weakness · Year unknown
37. DEPRECATED: State Synchronization Error
    cwe.xml · Weakness · Year unknown
38. Passing Mutable Objects to an Untrusted Method
    cwe.xml · Weakness · Year unknown
39. Returning a Mutable Object to an Untrusted Caller
    cwe.xml · Weakness · Year unknown
40. Insecure Temporary File
    cwe.xml · Weakness · Year unknown
41. Creation of Temporary File With Insecure Permissions
    cwe.xml · Weakness · Year unknown
42. Creation of Temporary File in Directory with Insecure Permissions
    cwe.xml · Weakness · Year unknown
43. Path Traversal: '\absolute\pathname\here'
    cwe.xml · Weakness · Year unknown
44. J2EE Bad Practices: Use of System.exit()
    cwe.xml · Weakness · Year unknown
45. J2EE Bad Practices: Direct Use of Threads
    cwe.xml · Weakness · Year unknown
46. Session Fixation
    cwe.xml · Weakness · Year unknown
47. Covert Timing Channel
    cwe.xml · Weakness · Year unknown
48. Symbolic Name not Mapping to Correct Object
    cwe.xml · Weakness · Year unknown
49. Path Traversal: 'C:dirname'
    cwe.xml · Weakness · Year unknown
50. Detection of Error Condition Without Action
    cwe.xml · Weakness · Year unknown
51. Unchecked Error Condition
    cwe.xml · Weakness · Year unknown
52. Missing Report of Error Condition
    cwe.xml · Weakness · Year unknown
53. Return of Wrong Status Code
    cwe.xml · Weakness · Year unknown
54. Unexpected Status Code or Return Value
    cwe.xml · Weakness · Year unknown
55. Use of NullPointerException Catch to Detect NULL Pointer Dereference
    cwe.xml · Weakness · Year unknown
56. Declaration of Catch for Generic Exception
    cwe.xml · Weakness · Year unknown
57. Declaration of Throws for Generic Exception
    cwe.xml · Weakness · Year unknown
58. Path Traversal: '\\UNC\share\name\' (Windows UNC Share)
    cwe.xml · Weakness · Year unknown
59. Uncontrolled Resource Consumption
    cwe.xml · Weakness · Year unknown
60. Missing Release of Memory after Effective Lifetime
    cwe.xml · Weakness · Year unknown
61. Transmission of Private Resources into a New Sphere ('Resource Leak')
    cwe.xml · Weakness · Year unknown
62. Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')
    cwe.xml · Weakness · Year unknown
63. Improper Resource Shutdown or Release
    cwe.xml · Weakness · Year unknown
64. Asymmetric Resource Consumption (Amplification)
    cwe.xml · Weakness · Year unknown
65. Insufficient Control of Network Message Volume (Network Amplification)
    cwe.xml · Weakness · Year unknown
66. Inefficient Algorithmic Complexity
    cwe.xml · Weakness · Year unknown
67. Incorrect Behavior Order: Early Amplification
    cwe.xml · Weakness · Year unknown
68. Improper Handling of Highly Compressed Data (Data Amplification)
    cwe.xml · Weakness · Year unknown
69. Improper Resolution of Path Equivalence
    cwe.xml · Weakness · Year unknown
70. Insufficient Resource Pool
    cwe.xml · Weakness · Year unknown
71. Unrestricted Externally Accessible Lock
    cwe.xml · Weakness · Year unknown
72. Improper Resource Locking
    cwe.xml · Weakness · Year unknown
73. Missing Lock Check
    cwe.xml · Weakness · Year unknown
74. Double Free
    cwe.xml · Weakness · Year unknown
75. Use After Free
    cwe.xml · Weakness · Year unknown
76. Unprotected Primary Channel
    cwe.xml · Weakness · Year unknown
77. Path Equivalence: 'filename.' (Trailing Dot)
    cwe.xml · Weakness · Year unknown
78. Unprotected Alternate Channel
    cwe.xml · Weakness · Year unknown
79. Race Condition During Access to Alternate Channel
    cwe.xml · Weakness · Year unknown
80. Unprotected Windows Messaging Channel ('Shatter')
    cwe.xml · Weakness · Year unknown
81. DEPRECATED: Proxied Trusted Channel
    cwe.xml · Weakness · Year unknown
82. Improper Protection of Alternate Path
    cwe.xml · Weakness · Year unknown
83. Direct Request ('Forced Browsing')
    cwe.xml · Weakness · Year unknown
84. Untrusted Search Path
    cwe.xml · Weakness · Year unknown
85. Uncontrolled Search Path Element
    cwe.xml · Weakness · Year unknown
86. Unquoted Search Path or Element
    cwe.xml · Weakness · Year unknown
87. Path Equivalence: 'filename....' (Multiple Trailing Dot)
    cwe.xml · Weakness · Year unknown
88. Deployment of Wrong Handler
    cwe.xml · Weakness · Year unknown
89. Missing Handler
    cwe.xml · Weakness · Year unknown
90. Dangerous Signal Handler not Disabled During Sensitive Operations
    cwe.xml · Weakness · Year unknown
91. Unparsed Raw Web Content Delivery
    cwe.xml · Weakness · Year unknown
92. Unrestricted Upload of File with Dangerous Type
    cwe.xml · Weakness · Year unknown
93. Improper Interaction Between Multiple Correctly-Behaving Entities
    cwe.xml · Weakness · Year unknown
94. Interpretation Conflict
    cwe.xml · Weakness · Year unknown
95. Incomplete Model of Endpoint Features
    cwe.xml · Weakness · Year unknown
96. Behavioral Change in New Version or Environment
    cwe.xml · Weakness · Year unknown
97. Path Equivalence: 'file.name' (Internal Dot)
    cwe.xml · Weakness · Year unknown
98. Expected Behavior Violation
    cwe.xml · Weakness · Year unknown
99. Unintended Proxy or Intermediary ('Confused Deputy')
    cwe.xml · Weakness · Year unknown
100. DEPRECATED: HTTP response splitting
     cwe.xml · Weakness · Year unknown
101. Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
     cwe.xml · Weakness · Year unknown
102. UI Discrepancy for Security Feature
     cwe.xml · Weakness · Year unknown
103. Unimplemented or Unsupported Feature in UI
     cwe.xml · Weakness · Year unknown
104. Obsolete Feature in UI
     cwe.xml · Weakness · Year unknown
105. The UI Performs the Wrong Action
     cwe.xml · Weakness · Year unknown
106. Path Equivalence: 'file...name' (Multiple Internal Dot)
     cwe.xml · Weakness · Year unknown
107. Multiple Interpretations of UI Input
     cwe.xml · Weakness · Year unknown
108. User Interface (UI) Misrepresentation of Critical Information
     cwe.xml · Weakness · Year unknown
109. Insecure Default Variable Initialization
     cwe.xml · Weakness · Year unknown
110. External Initialization of Trusted Variables or Data Stores
     cwe.xml · Weakness · Year unknown
111. Non-exit on Failed Initialization
     cwe.xml · Weakness · Year unknown
112. Missing Initialization of a Variable
     cwe.xml · Weakness · Year unknown
113. Use of Uninitialized Variable
     cwe.xml · Weakness · Year unknown
114. DEPRECATED: Incorrect Initialization
     cwe.xml · Weakness · Year unknown
115. Incomplete Cleanup
     cwe.xml · Weakness · Year unknown
116. Path Equivalence: 'filename ' (Trailing Space)
     cwe.xml · Weakness · Year unknown
117. Improper Cleanup on Thrown Exception
     cwe.xml · Weakness · Year unknown
118. Duplicate Key in Associative List (Alist)
     cwe.xml · Weakness · Year unknown
119. Deletion of Data Structure Sentinel
     cwe.xml · Weakness · Year unknown
120. Addition of Data Structure Sentinel
     cwe.xml · Weakness · Year unknown