Weakness — page 6

969 metadata records. Search and filter

1. Return of Pointer Value Outside of Expected Range
   cwe.xml · Weakness · Year unknown
2. Use of sizeof() on a Pointer Type
   cwe.xml · Weakness · Year unknown
3. Incorrect Pointer Scaling
   cwe.xml · Weakness · Year unknown
4. Use of Pointer Subtraction to Determine Size
   cwe.xml · Weakness · Year unknown
5. Path Equivalence: ' filename' (Leading Space)
   cwe.xml · Weakness · Year unknown
6. Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
   cwe.xml · Weakness · Year unknown
7. Modification of Assumed-Immutable Data (MAID)
   cwe.xml · Weakness · Year unknown
8. External Control of Assumed-Immutable Web Parameter
   cwe.xml · Weakness · Year unknown
9. PHP External Variable Modification
   cwe.xml · Weakness · Year unknown
10. Use of Function with Inconsistent Implementations
    cwe.xml · Weakness · Year unknown
11. Undefined Behavior for Input to API
    cwe.xml · Weakness · Year unknown
12. NULL Pointer Dereference
    cwe.xml · Weakness · Year unknown
13. Use of Obsolete Function
    cwe.xml · Weakness · Year unknown
14. Missing Default Case in Multiple Condition Expression
    cwe.xml · Weakness · Year unknown
15. Signal Handler Use of a Non-reentrant Function
    cwe.xml · Weakness · Year unknown
16. Path Equivalence: 'file name' (Internal Whitespace)
    cwe.xml · Weakness · Year unknown
17. Use of Incorrect Operator
    cwe.xml · Weakness · Year unknown
18. Assigning instead of Comparing
    cwe.xml · Weakness · Year unknown
19. Comparing instead of Assigning
    cwe.xml · Weakness · Year unknown
20. Incorrect Block Delimitation
    cwe.xml · Weakness · Year unknown
21. Omitted Break Statement in Switch
    cwe.xml · Weakness · Year unknown
22. Comparison of Classes by Name
    cwe.xml · Weakness · Year unknown
23. Reliance on Package-level Scope
    cwe.xml · Weakness · Year unknown
24. Exposure of Data Element to Wrong Session
    cwe.xml · Weakness · Year unknown
25. Active Debug Code
    cwe.xml · Weakness · Year unknown
26. Path Equivalence: 'filename/' (Trailing Slash)
    cwe.xml · Weakness · Year unknown
27. Public cloneable() Method Without Final ('Object Hijack')
    cwe.xml · Weakness · Year unknown
28. Use of Inner Class Containing Sensitive Data
    cwe.xml · Weakness · Year unknown
29. Critical Public Variable Without Final Modifier
    cwe.xml · Weakness · Year unknown
30. Download of Code Without Integrity Check
    cwe.xml · Weakness · Year unknown
31. Private Data Structure Returned From A Public Method
    cwe.xml · Weakness · Year unknown
32. Public Data Assigned to Private Array-Typed Field
    cwe.xml · Weakness · Year unknown
33. Exposure of Sensitive System Information to an Unauthorized Control Sphere
    cwe.xml · Weakness · Year unknown
34. Cloneable Class Containing Sensitive Information
    cwe.xml · Weakness · Year unknown
35. Serializable Class Containing Sensitive Data
    cwe.xml · Weakness · Year unknown
36. J2EE Misconfiguration: Data Transmission Without Encryption
    cwe.xml · Weakness · Year unknown
37. Path Equivalence: '//multiple/leading/slash'
    cwe.xml · Weakness · Year unknown
38. Public Static Field Not Marked Final
    cwe.xml · Weakness · Year unknown
39. Trust Boundary Violation
    cwe.xml · Weakness · Year unknown
40. Deserialization of Untrusted Data
    cwe.xml · Weakness · Year unknown
41. Embedded Malicious Code
    cwe.xml · Weakness · Year unknown
42. Trojan Horse
    cwe.xml · Weakness · Year unknown
43. Non-Replicating Malicious Code
    cwe.xml · Weakness · Year unknown
44. Replicating Malicious Code (Virus or Worm)
    cwe.xml · Weakness · Year unknown
45. Path Equivalence: '/multiple//internal/slash'
    cwe.xml · Weakness · Year unknown
46. Trapdoor
    cwe.xml · Weakness · Year unknown
47. Logic/Time Bomb
    cwe.xml · Weakness · Year unknown
48. Spyware
    cwe.xml · Weakness · Year unknown
49. Covert Channel
    cwe.xml · Weakness · Year unknown
50. Covert Storage Channel
    cwe.xml · Weakness · Year unknown
51. DEPRECATED: Covert Timing Channel
    cwe.xml · Weakness · Year unknown
52. Path Equivalence: '/multiple/trailing/slash//'
    cwe.xml · Weakness · Year unknown
53. .NET Misconfiguration: Use of Impersonation
    cwe.xml · Weakness · Year unknown
54. Weak Password Requirements
    cwe.xml · Weakness · Year unknown
55. Insufficiently Protected Credentials
    cwe.xml · Weakness · Year unknown
56. Unprotected Transport of Credentials
    cwe.xml · Weakness · Year unknown
57. Use of Cache Containing Sensitive Information
    cwe.xml · Weakness · Year unknown
58. Use of Web Browser Cache Containing Sensitive Information
    cwe.xml · Weakness · Year unknown
59. Cleartext Storage of Sensitive Information in an Environment Variable
    cwe.xml · Weakness · Year unknown
60. Exposure of Version-Control Repository to an Unauthorized Control Sphere
    cwe.xml · Weakness · Year unknown
61. Exposure of Core Dump File to an Unauthorized Control Sphere
    cwe.xml · Weakness · Year unknown
62. Exposure of Access Control List Files to an Unauthorized Control Sphere
    cwe.xml · Weakness · Year unknown
63. Path Equivalence: '\multiple\\internal\backslash'
    cwe.xml · Weakness · Year unknown
64. Exposure of Backup File to an Unauthorized Control Sphere
    cwe.xml · Weakness · Year unknown
65. Inclusion of Sensitive Information in Test Code
    cwe.xml · Weakness · Year unknown
66. Insertion of Sensitive Information into Log File
    cwe.xml · Weakness · Year unknown
67. DEPRECATED: Information Exposure Through Server Log Files
    cwe.xml · Weakness · Year unknown
68. DEPRECATED: Information Exposure Through Debug Log Files
    cwe.xml · Weakness · Year unknown
69. Exposure of Information Through Shell Error Message
    cwe.xml · Weakness · Year unknown
70. Servlet Runtime Error Message Containing Sensitive Information
    cwe.xml · Weakness · Year unknown
71. Java Runtime Error Message Containing Sensitive Information
    cwe.xml · Weakness · Year unknown
72. Insertion of Sensitive Information into Externally-Accessible File or Directory
    cwe.xml · Weakness · Year unknown
73. Use of Persistent Cookies Containing Sensitive Information
    cwe.xml · Weakness · Year unknown
74. Path Equivalence: 'filedir\' (Trailing Backslash)
    cwe.xml · Weakness · Year unknown
75. Inclusion of Sensitive Information in Source Code
    cwe.xml · Weakness · Year unknown
76. Inclusion of Sensitive Information in an Include File
    cwe.xml · Weakness · Year unknown
77. DEPRECATED: Information Exposure Through Cleanup Log Files
    cwe.xml · Weakness · Year unknown
78. Use of Singleton Pattern Without Synchronization in a Multithreaded Context
    cwe.xml · Weakness · Year unknown
79. Missing Standardized Error Handling Mechanism
    cwe.xml · Weakness · Year unknown
80. DEPRECATED: Use of Dynamic Class Loading
    cwe.xml · Weakness · Year unknown
81. Suspicious Comment
    cwe.xml · Weakness · Year unknown
82. Use of Hard-coded, Security-relevant Constants
    cwe.xml · Weakness · Year unknown
83. Exposure of Information Through Directory Listing
    cwe.xml · Weakness · Year unknown
84. Missing Password Field Masking
    cwe.xml · Weakness · Year unknown
85. Path Equivalence: '/./' (Single Dot Directory)
    cwe.xml · Weakness · Year unknown
86. Server-generated Error Message Containing Sensitive Information
    cwe.xml · Weakness · Year unknown
87. Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
    cwe.xml · Weakness · Year unknown
88. Files or Directories Accessible to External Parties
    cwe.xml · Weakness · Year unknown
89. Command Shell in Externally Accessible Directory
    cwe.xml · Weakness · Year unknown
90. ASP.NET Misconfiguration: Not Using Input Validation Framework
    cwe.xml · Weakness · Year unknown
91. J2EE Misconfiguration: Plaintext Password in Configuration File
    cwe.xml · Weakness · Year unknown
92. ASP.NET Misconfiguration: Use of Identity Impersonation
    cwe.xml · Weakness · Year unknown
93. Use of getlogin() in Multithreaded Application
    cwe.xml · Weakness · Year unknown
94. Path Equivalence: 'filedir*' (Wildcard)
    cwe.xml · Weakness · Year unknown
95. Use of umask() with chmod-style Argument
    cwe.xml · Weakness · Year unknown
96. Dead Code
    cwe.xml · Weakness · Year unknown
97. Return of Stack Variable Address
    cwe.xml · Weakness · Year unknown
98. Assignment to Variable without Use
    cwe.xml · Weakness · Year unknown
99. SQL Injection: Hibernate
    cwe.xml · Weakness · Year unknown
100. Reliance on Cookies without Validation and Integrity Checking
     cwe.xml · Weakness · Year unknown
101. Authorization Bypass Through User-Controlled SQL Primary Key
     cwe.xml · Weakness · Year unknown
102. Unsynchronized Access to Shared Data in a Multithreaded Context
     cwe.xml · Weakness · Year unknown
103. finalize() Method Without super.finalize()
     cwe.xml · Weakness · Year unknown
104. Path Equivalence: 'fakedir/../realdir/filename'
     cwe.xml · Weakness · Year unknown
105. Expression is Always False
     cwe.xml · Weakness · Year unknown
106. Expression is Always True
     cwe.xml · Weakness · Year unknown
107. Call to Thread run() instead of start()
     cwe.xml · Weakness · Year unknown
108. Improper Following of Specification by Caller
     cwe.xml · Weakness · Year unknown
109. EJB Bad Practices: Use of Synchronization Primitives
     cwe.xml · Weakness · Year unknown
110. EJB Bad Practices: Use of AWT Swing
     cwe.xml · Weakness · Year unknown
111. EJB Bad Practices: Use of Java I/O
     cwe.xml · Weakness · Year unknown
112. EJB Bad Practices: Use of Sockets
     cwe.xml · Weakness · Year unknown
113. EJB Bad Practices: Use of Class Loader
     cwe.xml · Weakness · Year unknown
114. J2EE Bad Practices: Non-serializable Object Stored in Session
     cwe.xml · Weakness · Year unknown
115. Path Equivalence: Windows 8.3 Filename
     cwe.xml · Weakness · Year unknown
116. clone() Method Without super.clone()
     cwe.xml · Weakness · Year unknown
117. Object Model Violation: Just One of Equals and Hashcode Defined
     cwe.xml · Weakness · Year unknown
118. Array Declared Public, Final, and Static
     cwe.xml · Weakness · Year unknown
119. finalize() Method Declared Public
     cwe.xml · Weakness · Year unknown
120. Return Inside Finally Block
     cwe.xml · Weakness · Year unknown