Weakness — page 7

969 metadata records. Search and filter

1. Empty Synchronized Block
   cwe.xml · Weakness · Year unknown
2. Explicit Call to Finalize()
   cwe.xml · Weakness · Year unknown
3. Assignment of a Fixed Address to a Pointer
   cwe.xml · Weakness · Year unknown
4. Attempt to Access Child of a Non-structure Pointer
   cwe.xml · Weakness · Year unknown
5. Call to Non-ubiquitous API
   cwe.xml · Weakness · Year unknown
6. Improper Link Resolution Before File Access ('Link Following')
   cwe.xml · Weakness · Year unknown
7. Free of Memory not on the Heap
   cwe.xml · Weakness · Year unknown
8. Sensitive Data Storage in Improperly Locked Memory
   cwe.xml · Weakness · Year unknown
9. DEPRECATED: Authentication Bypass Issues
   cwe.xml · Weakness · Year unknown
10. Authentication Bypass: OpenSSL CTX Object Modified after SSL Objects are Created
    cwe.xml · Weakness · Year unknown
11. J2EE Framework: Saving Unserializable Objects to Disk
    cwe.xml · Weakness · Year unknown
12. Comparison of Object References Instead of Object Contents
    cwe.xml · Weakness · Year unknown
13. DEPRECATED: Incorrect Semantic Object Comparison
    cwe.xml · Weakness · Year unknown
14. Use of Wrong Operator in String Comparison
    cwe.xml · Weakness · Year unknown
15. Use of HTTP Request With Sensitive Query String
    cwe.xml · Weakness · Year unknown
16. Missing Validation of OpenSSL Certificate
    cwe.xml · Weakness · Year unknown
17. J2EE Misconfiguration: Insufficient Session-ID Length
    cwe.xml · Weakness · Year unknown
18. Uncaught Exception in Servlet
    cwe.xml · Weakness · Year unknown
19. URL Redirection to Untrusted Site ('Open Redirect')
    cwe.xml · Weakness · Year unknown
20. Client-Side Enforcement of Server-Side Security
    cwe.xml · Weakness · Year unknown
21. Use of Client-Side Authentication
    cwe.xml · Weakness · Year unknown
22. Multiple Binds to the Same Port
    cwe.xml · Weakness · Year unknown
23. Unchecked Input for Loop Condition
    cwe.xml · Weakness · Year unknown
24. Public Static Final Field References Mutable Object
    cwe.xml · Weakness · Year unknown
25. Struts: Non-private Field in ActionForm Class
    cwe.xml · Weakness · Year unknown
26. Double-Checked Locking
    cwe.xml · Weakness · Year unknown
27. UNIX Symbolic Link (Symlink) Following
    cwe.xml · Weakness · Year unknown
28. Externally Controlled Reference to a Resource in Another Sphere
    cwe.xml · Weakness · Year unknown
29. Improper Restriction of XML External Entity Reference
    cwe.xml · Weakness · Year unknown
30. Improper Authorization of Index Containing Sensitive Information
    cwe.xml · Weakness · Year unknown
31. Insufficient Session Expiration
    cwe.xml · Weakness · Year unknown
32. Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
    cwe.xml · Weakness · Year unknown
33. Inclusion of Sensitive Information in Source Code Comments
    cwe.xml · Weakness · Year unknown
34. Incomplete Identification of Uploaded File Variables (PHP)
    cwe.xml · Weakness · Year unknown
35. Reachable Assertion
    cwe.xml · Weakness · Year unknown
36. Exposed Unsafe ActiveX Method
    cwe.xml · Weakness · Year unknown
37. Dangling Database Cursor ('Cursor Injection')
    cwe.xml · Weakness · Year unknown
38. UNIX Hard Link
    cwe.xml · Weakness · Year unknown
39. Unverified Password Change
    cwe.xml · Weakness · Year unknown
40. Variable Extraction Error
    cwe.xml · Weakness · Year unknown
41. Improper Validation of Function Hook Arguments
    cwe.xml · Weakness · Year unknown
42. Unsafe ActiveX Control Marked Safe For Scripting
    cwe.xml · Weakness · Year unknown
43. Executable Regular Expression Error
    cwe.xml · Weakness · Year unknown
44. Permissive Regular Expression
    cwe.xml · Weakness · Year unknown
45. Null Byte Interaction Error (Poison Null Byte)
    cwe.xml · Weakness · Year unknown
46. Dynamic Variable Evaluation
    cwe.xml · Weakness · Year unknown
47. Function Call with Incorrectly Specified Arguments
    cwe.xml · Weakness · Year unknown
48. Not Failing Securely ('Failing Open')
    cwe.xml · Weakness · Year unknown
49. Unnecessary Complexity in Protection Mechanism (Not Using 'Economy of Mechanism')
    cwe.xml · Weakness · Year unknown
50. Not Using Complete Mediation
    cwe.xml · Weakness · Year unknown
51. Authorization Bypass Through User-Controlled Key
    cwe.xml · Weakness · Year unknown
52. Windows Shortcut Following (.LNK)
    cwe.xml · Weakness · Year unknown
53. Weak Password Recovery Mechanism for Forgotten Password
    cwe.xml · Weakness · Year unknown
54. Improper Restriction of Names for Files and Other Resources
    cwe.xml · Weakness · Year unknown
55. External Control of Critical State Data
    cwe.xml · Weakness · Year unknown
56. Improper Neutralization of Data within XPath Expressions ('XPath Injection')
    cwe.xml · Weakness · Year unknown
57. Improper Neutralization of HTTP Headers for Scripting Syntax
    cwe.xml · Weakness · Year unknown
58. Overly Restrictive Account Lockout Mechanism
    cwe.xml · Weakness · Year unknown
59. Reliance on File Name or Extension of Externally-Supplied File
    cwe.xml · Weakness · Year unknown
60. Use of Non-Canonical URL Paths for Authorization Decisions
    cwe.xml · Weakness · Year unknown
61. Incorrect Use of Privileged APIs
    cwe.xml · Weakness · Year unknown
62. Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking
    cwe.xml · Weakness · Year unknown
63. Windows Hard Link
    cwe.xml · Weakness · Year unknown
64. Trusting HTTP Permission Methods on the Server Side
    cwe.xml · Weakness · Year unknown
65. Exposure of WSDL File Containing Sensitive Information
    cwe.xml · Weakness · Year unknown
66. Improper Neutralization of Data within XQuery Expressions ('XQuery Injection')
    cwe.xml · Weakness · Year unknown
67. Improper Isolation or Compartmentalization
    cwe.xml · Weakness · Year unknown
68. Reliance on a Single Factor in a Security Decision
    cwe.xml · Weakness · Year unknown
69. Insufficient Psychological Acceptability
    cwe.xml · Weakness · Year unknown
70. Reliance on Security Through Obscurity
    cwe.xml · Weakness · Year unknown
71. Violation of Secure Design Principles
    cwe.xml · Weakness · Year unknown
72. Improper Handling of File Names that Identify Virtual Resources
    cwe.xml · Weakness · Year unknown
73. Improper Synchronization
    cwe.xml · Weakness · Year unknown
74. Use of a Non-reentrant Function in a Concurrent Context
    cwe.xml · Weakness · Year unknown
75. Improper Control of a Resource Through its Lifetime
    cwe.xml · Weakness · Year unknown
76. Improper Initialization
    cwe.xml · Weakness · Year unknown
77. Operation on Resource in Wrong Phase of Lifetime
    cwe.xml · Weakness · Year unknown
78. Improper Locking
    cwe.xml · Weakness · Year unknown
79. Exposure of Resource to Wrong Sphere
    cwe.xml · Weakness · Year unknown
80. Incorrect Resource Transfer Between Spheres
    cwe.xml · Weakness · Year unknown
81. Improper Handling of Windows Device Names
    cwe.xml · Weakness · Year unknown
82. Always-Incorrect Control Flow Implementation
    cwe.xml · Weakness · Year unknown
83. Lack of Administrator Control over Security
    cwe.xml · Weakness · Year unknown
84. Operation on a Resource after Expiration or Release
    cwe.xml · Weakness · Year unknown
85. External Influence of Sphere Definition
    cwe.xml · Weakness · Year unknown
86. Uncontrolled Recursion
    cwe.xml · Weakness · Year unknown
87. Multiple Operations on Resource in Single-Operation Context
    cwe.xml · Weakness · Year unknown
88. Use of Potentially Dangerous Function
    cwe.xml · Weakness · Year unknown
89. Integer Overflow to Buffer Overflow
    cwe.xml · Weakness · Year unknown
90. Incorrect Conversion between Numeric Types
    cwe.xml · Weakness · Year unknown
91. Incorrect Calculation
    cwe.xml · Weakness · Year unknown
92. Function Call With Incorrect Order of Arguments
    cwe.xml · Weakness · Year unknown
93. Incorrect Provision of Specified Functionality
    cwe.xml · Weakness · Year unknown
94. Function Call With Incorrect Number of Arguments
    cwe.xml · Weakness · Year unknown
95. Function Call With Incorrect Argument Type
    cwe.xml · Weakness · Year unknown
96. Function Call With Incorrectly Specified Argument Value
    cwe.xml · Weakness · Year unknown
97. Function Call With Incorrect Variable or Reference as Argument
    cwe.xml · Weakness · Year unknown
98. Permission Race Condition During Resource Copy
    cwe.xml · Weakness · Year unknown
99. Improper Handling of Windows ::DATA Alternate Data Stream
    cwe.xml · Weakness · Year unknown
100. Unchecked Return Value to NULL Pointer Dereference
     cwe.xml · Weakness · Year unknown
101. Insufficient Control Flow Management
     cwe.xml · Weakness · Year unknown
102. Incomplete Denylist to Cross-Site Scripting
     cwe.xml · Weakness · Year unknown
103. Protection Mechanism Failure
     cwe.xml · Weakness · Year unknown
104. Use of Multiple Resources with Duplicate Identifier
     cwe.xml · Weakness · Year unknown
105. Use of Low-Level Functionality
     cwe.xml · Weakness · Year unknown
106. Incorrect Behavior Order
     cwe.xml · Weakness · Year unknown
107. Incorrect Comparison
     cwe.xml · Weakness · Year unknown
108. Execution After Redirect (EAR)
     cwe.xml · Weakness · Year unknown
109. J2EE Misconfiguration: Missing Custom Error Page
     cwe.xml · Weakness · Year unknown
110. Improper Check or Handling of Exceptional Conditions
     cwe.xml · Weakness · Year unknown
111. Incorrect Type Conversion or Cast
     cwe.xml · Weakness · Year unknown
112. Incorrect Control Flow Scoping
     cwe.xml · Weakness · Year unknown
113. Use of Incorrectly-Resolved Name or Reference
     cwe.xml · Weakness · Year unknown
114. Improper Neutralization
     cwe.xml · Weakness · Year unknown
115. Incorrect Ownership Assignment
     cwe.xml · Weakness · Year unknown
116. DEPRECATED: Apple '.DS_Store'
     cwe.xml · Weakness · Year unknown
117. Improper Adherence to Coding Standards
     cwe.xml · Weakness · Year unknown
118. Improper Handling of Apple HFS+ Alternate Data Stream Path
     cwe.xml · Weakness · Year unknown
119. External Control of File Name or Path
     cwe.xml · Weakness · Year unknown
120. Incorrect Permission Assignment for Critical Resource
     cwe.xml · Weakness · Year unknown