CWE

Common Weakness Enumeration

A Community-Developed List of Software Weakness Types

CWE/SANS Top 25 Most Dangerous Software Errors
Home > CWE List > CWE- Individual Dictionary Definition (3.0)  
ID

CWE VIEW: Comprehensive CWE Dictionary

View ID: 2000
Type: Implicit
Status: Draft
+ Objective
This view (slice) covers all the elements in CWE.
+ Filter
/Weakness_Catalog/*[not(self::External_References)]/*
+ Membership
NatureTypeIDName
HasMemberDeprecatedDeprecated1DEPRECATED: Location
HasMemberCategoryCategory27PK - Environment
HasMemberDeprecatedDeprecated3DEPRECATED: Technology-specific Environment Issues
HasMemberCategoryCategory4J2EE Environment Issues
HasMemberVariantVariant5J2EE Misconfiguration: Data Transmission Without Encryption
HasMemberVariantVariant6J2EE Misconfiguration: Insufficient Session-ID Length
HasMemberVariantVariant7J2EE Misconfiguration: Missing Custom Error Page
HasMemberVariantVariant8J2EE Misconfiguration: Entity Bean Declared Remote
HasMemberVariantVariant9J2EE Misconfiguration: Weak Access Permissions for EJB Methods
HasMemberDeprecatedDeprecated10DEPRECATED: ASP.NET Environment Issues
HasMemberVariantVariant11ASP.NET Misconfiguration: Creating Debug Binary
HasMemberVariantVariant12ASP.NET Misconfiguration: Missing Custom Error Page
HasMemberVariantVariant13ASP.NET Misconfiguration: Password in Configuration File
HasMemberBaseBase14Compiler Removal of Code to Clear Buffers
HasMemberBaseBase15External Control of System or Configuration Setting
HasMemberCategoryCategory16Configuration
HasMemberCategoryCategory17Code
HasMemberCategoryCategory18Source Code
HasMemberCategoryCategory19Data Processing Errors
HasMemberClassClass20Improper Input Validation
HasMemberCategoryCategory21Pathname Traversal and Equivalence Errors
HasMemberClassClass22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
HasMemberBaseBase23Relative Path Traversal
HasMemberVariantVariant24Path Traversal: '../filedir'
HasMemberVariantVariant25Path Traversal: '/../filedir'
HasMemberVariantVariant26Path Traversal: '/dir/../filename'
HasMemberVariantVariant27Path Traversal: 'dir/../../filename'
HasMemberVariantVariant28Path Traversal: '..\filedir'
HasMemberVariantVariant29Path Traversal: '\..\filename'
HasMemberVariantVariant30Path Traversal: '\dir\..\filename'
HasMemberVariantVariant31Path Traversal: 'dir\..\..\filename'
HasMemberVariantVariant32Path Traversal: '...' (Triple Dot)
HasMemberVariantVariant33Path Traversal: '....' (Multiple Dot)
HasMemberVariantVariant34Path Traversal: '....//'
HasMemberVariantVariant35Path Traversal: '.../...//'
HasMemberBaseBase36Absolute Path Traversal
HasMemberVariantVariant37Path Traversal: '/absolute/pathname/here'
HasMemberVariantVariant38Path Traversal: '\absolute\pathname\here'
HasMemberVariantVariant39Path Traversal: 'C:dirname'
HasMemberVariantVariant40Path Traversal: '\\UNC\share\name\' (Windows UNC Share)
HasMemberBaseBase41Improper Resolution of Path Equivalence
HasMemberVariantVariant42Path Equivalence: 'filename.' (Trailing Dot)
HasMemberVariantVariant43Path Equivalence: 'filename....' (Multiple Trailing Dot)
HasMemberVariantVariant44Path Equivalence: 'file.name' (Internal Dot)
HasMemberVariantVariant45Path Equivalence: 'file...name' (Multiple Internal Dot)
HasMemberVariantVariant46Path Equivalence: 'filename ' (Trailing Space)
HasMemberVariantVariant47Path Equivalence: ' filename' (Leading Space)
HasMemberVariantVariant48Path Equivalence: 'file name' (Internal Whitespace)
HasMemberVariantVariant49Path Equivalence: 'filename/' (Trailing Slash)
HasMemberVariantVariant50Path Equivalence: '//multiple/leading/slash'
HasMemberVariantVariant51Path Equivalence: '/multiple//internal/slash'
HasMemberVariantVariant52Path Equivalence: '/multiple/trailing/slash//'
HasMemberVariantVariant53Path Equivalence: '\multiple\\internal\backslash'
HasMemberVariantVariant54Path Equivalence: 'filedir\' (Trailing Backslash)
HasMemberVariantVariant55Path Equivalence: '/./' (Single Dot Directory)
HasMemberVariantVariant56Path Equivalence: 'filedir*' (Wildcard)
HasMemberVariantVariant57Path Equivalence: 'fakedir/../realdir/filename'
HasMemberVariantVariant58Path Equivalence: Windows 8.3 Filename
HasMemberBaseBase59Improper Link Resolution Before File Access ('Link Following')
HasMemberDeprecatedDeprecated60DEPRECATED: UNIX Path Link Problems
HasMemberCompositeComposite61UNIX Symbolic Link (Symlink) Following
HasMemberVariantVariant62UNIX Hard Link
HasMemberDeprecatedDeprecated63DEPRECATED: Windows Path Link Problems
HasMemberVariantVariant64Windows Shortcut Following (.LNK)
HasMemberVariantVariant65Windows Hard Link
HasMemberBaseBase66Improper Handling of File Names that Identify Virtual Resources
HasMemberVariantVariant67Improper Handling of Windows Device Names
HasMemberDeprecatedDeprecated68DEPRECATED: Windows Virtual File Problems
HasMemberVariantVariant69Improper Handling of Windows ::DATA Alternate Data Stream
HasMemberDeprecatedDeprecated70DEPRECATED: Mac Virtual File Problems
HasMemberDeprecatedDeprecated71DEPRECATED: Apple '.DS_Store'
HasMemberVariantVariant72Improper Handling of Apple HFS+ Alternate Data Stream Path
HasMemberClassClass73External Control of File Name or Path
HasMemberClassClass74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
HasMemberClassClass75Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
HasMemberBaseBase76Improper Neutralization of Equivalent Special Elements
HasMemberClassClass77Improper Neutralization of Special Elements used in a Command ('Command Injection')
HasMemberBaseBase78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
HasMemberBaseBase79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
HasMemberVariantVariant80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
HasMemberVariantVariant81Improper Neutralization of Script in an Error Message Web Page
HasMemberVariantVariant82Improper Neutralization of Script in Attributes of IMG Tags in a Web Page
HasMemberVariantVariant83Improper Neutralization of Script in Attributes in a Web Page
HasMemberVariantVariant84Improper Neutralization of Encoded URI Schemes in a Web Page
HasMemberVariantVariant85Doubled Character XSS Manipulations
HasMemberVariantVariant86Improper Neutralization of Invalid Characters in Identifiers in Web Pages
HasMemberVariantVariant87Improper Neutralization of Alternate XSS Syntax
HasMemberBaseBase88Argument Injection or Modification
HasMemberBaseBase89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
HasMemberBaseBase90Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
HasMemberBaseBase91XML Injection (aka Blind XPath Injection)
HasMemberDeprecatedDeprecated92DEPRECATED: Improper Sanitization of Custom Special Characters
HasMemberBaseBase93Improper Neutralization of CRLF Sequences ('CRLF Injection')
HasMemberClassClass94Improper Control of Generation of Code ('Code Injection')
HasMemberBaseBase95Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
HasMemberBaseBase96Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
HasMemberVariantVariant97Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
HasMemberBaseBase98Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
HasMemberBaseBase99Improper Control of Resource Identifiers ('Resource Injection')
HasMemberDeprecatedDeprecated100DEPRECATED: Technology-Specific Input Validation Problems
HasMemberDeprecatedDeprecated101DEPRECATED: Struts Validation Problems
HasMemberVariantVariant102Struts: Duplicate Validation Forms
HasMemberVariantVariant103Struts: Incomplete validate() Method Definition
HasMemberVariantVariant104Struts: Form Bean Does Not Extend Validation Class
HasMemberVariantVariant105Struts: Form Field Without Validator
HasMemberVariantVariant106Struts: Plug-in Framework not in Use
HasMemberVariantVariant107Struts: Unused Validation Form
HasMemberVariantVariant108Struts: Unvalidated Action Form
HasMemberVariantVariant109Struts: Validator Turned Off
HasMemberVariantVariant110Struts: Validator Without Form Field
HasMemberBaseBase111Direct Use of Unsafe JNI
HasMemberBaseBase112Missing XML Validation
HasMemberBaseBase113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
HasMemberBaseBase114Process Control
HasMemberBaseBase115Misinterpretation of Input
HasMemberClassClass116Improper Encoding or Escaping of Output
HasMemberBaseBase117Improper Output Neutralization for Logs
HasMemberClassClass118Incorrect Access of Indexable Resource ('Range Error')
HasMemberClassClass119Improper Restriction of Operations within the Bounds of a Memory Buffer
HasMemberBaseBase120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
HasMemberVariantVariant121Stack-based Buffer Overflow
HasMemberVariantVariant122Heap-based Buffer Overflow
HasMemberBaseBase123Write-what-where Condition
HasMemberBaseBase124Buffer Underwrite ('Buffer Underflow')
HasMemberBaseBase125Out-of-bounds Read
HasMemberVariantVariant126Buffer Over-read
HasMemberVariantVariant127Buffer Under-read
HasMemberBaseBase128Wrap-around Error
HasMemberBaseBase129Improper Validation of Array Index
HasMemberBaseBase130Improper Handling of Length Parameter Inconsistency
HasMemberBaseBase131Incorrect Calculation of Buffer Size
HasMemberDeprecatedDeprecated132DEPRECATED (Duplicate): Miscalculated Null Termination
HasMemberCategoryCategory133String Errors
HasMemberBaseBase134Use of Externally-Controlled Format String
HasMemberBaseBase135Incorrect Calculation of Multi-Byte String Length
HasMemberCategoryCategory136Type Errors
HasMemberCategoryCategory137Representation Errors
HasMemberClassClass138Improper Neutralization of Special Elements
HasMemberDeprecatedDeprecated139DEPRECATED: General Special Element Problems
HasMemberBaseBase140Improper Neutralization of Delimiters
HasMemberVariantVariant141Improper Neutralization of Parameter/Argument Delimiters
HasMemberVariantVariant142Improper Neutralization of Value Delimiters
HasMemberVariantVariant143Improper Neutralization of Record Delimiters
HasMemberVariantVariant144Improper Neutralization of Line Delimiters
HasMemberVariantVariant145Improper Neutralization of Section Delimiters
HasMemberVariantVariant146Improper Neutralization of Expression/Command Delimiters
HasMemberVariantVariant147Improper Neutralization of Input Terminators
HasMemberVariantVariant148Improper Neutralization of Input Leaders
HasMemberVariantVariant149Improper Neutralization of Quoting Syntax
HasMemberVariantVariant150Improper Neutralization of Escape, Meta, or Control Sequences
HasMemberVariantVariant151Improper Neutralization of Comment Delimiters
HasMemberVariantVariant152Improper Neutralization of Macro Symbols
HasMemberVariantVariant153Improper Neutralization of Substitution Characters
HasMemberVariantVariant154Improper Neutralization of Variable Name Delimiters
HasMemberVariantVariant155Improper Neutralization of Wildcards or Matching Symbols
HasMemberVariantVariant156Improper Neutralization of Whitespace
HasMemberVariantVariant157Failure to Sanitize Paired Delimiters
HasMemberVariantVariant158Improper Neutralization of Null Byte or NUL Character
HasMemberClassClass159Failure to Sanitize Special Element
HasMemberVariantVariant160Improper Neutralization of Leading Special Elements
HasMemberVariantVariant161Improper Neutralization of Multiple Leading Special Elements
HasMemberVariantVariant162Improper Neutralization of Trailing Special Elements
HasMemberVariantVariant163Improper Neutralization of Multiple Trailing Special Elements
HasMemberVariantVariant164Improper Neutralization of Internal Special Elements
HasMemberVariantVariant165Improper Neutralization of Multiple Internal Special Elements
HasMemberBaseBase166Improper Handling of Missing Special Element
HasMemberBaseBase167Improper Handling of Additional Special Element
HasMemberBaseBase168Improper Handling of Inconsistent Special Elements
HasMemberDeprecatedDeprecated169DEPRECATED: Technology-Specific Special Elements
HasMemberBaseBase170Improper Null Termination
HasMemberCategoryCategory171Cleansing, Canonicalization, and Comparison Errors
HasMemberClassClass172Encoding Error
HasMemberVariantVariant173Improper Handling of Alternate Encoding
HasMemberVariantVariant174Double Decoding of the Same Data
HasMemberVariantVariant175Improper Handling of Mixed Encoding
HasMemberVariantVariant176Improper Handling of Unicode Encoding
HasMemberVariantVariant177Improper Handling of URL Encoding (Hex Encoding)
HasMemberBaseBase178Improper Handling of Case Sensitivity
HasMemberBaseBase179Incorrect Behavior Order: Early Validation
HasMemberBaseBase180Incorrect Behavior Order: Validate Before Canonicalize
HasMemberBaseBase181Incorrect Behavior Order: Validate Before Filter
HasMemberBaseBase182Collapse of Data into Unsafe Value
HasMemberBaseBase183Permissive Whitelist
HasMemberBaseBase184Incomplete Blacklist
HasMemberClassClass185Incorrect Regular Expression
HasMemberBaseBase186Overly Restrictive Regular Expression
HasMemberBaseBase187Partial Comparison
HasMemberBaseBase188Reliance on Data/Memory Layout
HasMemberCategoryCategory189Numeric Errors
HasMemberBaseBase190Integer Overflow or Wraparound
HasMemberBaseBase191Integer Underflow (Wrap or Wraparound)
HasMemberClassClass192Integer Coercion Error
HasMemberBaseBase193Off-by-one Error
HasMemberBaseBase194Unexpected Sign Extension
HasMemberVariantVariant195Signed to Unsigned Conversion Error
HasMemberVariantVariant196Unsigned to Signed Conversion Error
HasMemberBaseBase197Numeric Truncation Error
HasMemberBaseBase198Use of Incorrect Byte Ordering
HasMemberCategoryCategory199Information Management Errors
HasMemberClassClass200Information Exposure
HasMemberVariantVariant201Information Exposure Through Sent Data
HasMemberVariantVariant202Exposure of Sensitive Data Through Data Queries
HasMemberClassClass203Information Exposure Through Discrepancy
HasMemberBaseBase204Response Discrepancy Information Exposure
HasMemberBaseBase205Information Exposure Through Behavioral Discrepancy
HasMemberVariantVariant206Information Exposure of Internal State Through Behavioral Inconsistency
HasMemberVariantVariant207Information Exposure Through an External Behavioral Inconsistency
HasMemberBaseBase208Information Exposure Through Timing Discrepancy
HasMemberBaseBase209Information Exposure Through an Error Message
HasMemberBaseBase210Information Exposure Through Self-generated Error Message
HasMemberBaseBase211Information Exposure Through Externally-Generated Error Message
HasMemberBaseBase212Improper Cross-boundary Removal of Sensitive Data
HasMemberBaseBase213Intentional Information Exposure
HasMemberVariantVariant214Information Exposure Through Process Environment
HasMemberVariantVariant215Information Exposure Through Debug Information
HasMemberClassClass216Containment Errors (Container Errors)
HasMemberDeprecatedDeprecated217DEPRECATED: Failure to Protect Stored Data from Modification
HasMemberDeprecatedDeprecated218DEPRECATED (Duplicate): Failure to provide confidentiality for stored data
HasMemberVariantVariant219Sensitive Data Under Web Root
HasMemberVariantVariant220Sensitive Data Under FTP Root
HasMemberClassClass221Information Loss or Omission
HasMemberBaseBase222Truncation of Security-relevant Information
HasMemberBaseBase223Omission of Security-relevant Information
HasMemberBaseBase224Obscured Security-relevant Information by Alternate Name
HasMemberDeprecatedDeprecated225DEPRECATED (Duplicate): General Information Management Problems
HasMemberBaseBase226Sensitive Information Uncleared Before Release
HasMemberCategoryCategory2277PK - API Abuse
HasMemberClassClass228Improper Handling of Syntactically Invalid Structure
HasMemberBaseBase229Improper Handling of Values
HasMemberVariantVariant230Improper Handling of Missing Values
HasMemberVariantVariant231Improper Handling of Extra Values
HasMemberVariantVariant232Improper Handling of Undefined Values
HasMemberBaseBase233Improper Handling of Parameters
HasMemberVariantVariant234Failure to Handle Missing Parameter
HasMemberVariantVariant235Improper Handling of Extra Parameters
HasMemberVariantVariant236Improper Handling of Undefined Parameters
HasMemberBaseBase237Improper Handling of Structural Elements
HasMemberVariantVariant238Improper Handling of Incomplete Structural Elements
HasMemberVariantVariant239Failure to Handle Incomplete Element
HasMemberBaseBase240Improper Handling of Inconsistent Structural Elements
HasMemberBaseBase241Improper Handling of Unexpected Data Type
HasMemberBaseBase242Use of Inherently Dangerous Function
HasMemberVariantVariant243Creation of chroot Jail Without Changing Working Directory
HasMemberVariantVariant244Improper Clearing of Heap Memory Before Release ('Heap Inspection')
HasMemberVariantVariant245J2EE Bad Practices: Direct Management of Connections
HasMemberVariantVariant246J2EE Bad Practices: Direct Use of Sockets
HasMemberDeprecatedDeprecated247DEPRECATED (Duplicate): Reliance on DNS Lookups in a Security Decision
HasMemberBaseBase248Uncaught Exception
HasMemberDeprecatedDeprecated249DEPRECATED: Often Misused: Path Manipulation
HasMemberClassClass250Execution with Unnecessary Privileges
HasMemberCategoryCategory251Often Misused: String Management
HasMemberBaseBase252Unchecked Return Value
HasMemberBaseBase253Incorrect Check of Function Return Value
HasMemberCategoryCategory2547PK - Security Features
HasMemberCategoryCategory255Credentials Management
HasMemberVariantVariant256Plaintext Storage of a Password
HasMemberBaseBase257Storing Passwords in a Recoverable Format
HasMemberVariantVariant258Empty Password in Configuration File
HasMemberBaseBase259Use of Hard-coded Password
HasMemberVariantVariant260Password in Configuration File
HasMemberVariantVariant261Weak Cryptography for Passwords
HasMemberVariantVariant262Not Using Password Aging
HasMemberBaseBase263Password Aging with Long Expiration
HasMemberCategoryCategory264Permissions, Privileges, and Access Controls
HasMemberCategoryCategory265Privilege / Sandbox Issues
HasMemberBaseBase266Incorrect Privilege Assignment
HasMemberBaseBase267Privilege Defined With Unsafe Actions
HasMemberBaseBase268Privilege Chaining
HasMemberClassClass269Improper Privilege Management
HasMemberBaseBase270Privilege Context Switching Error
HasMemberClassClass271Privilege Dropping / Lowering Errors
HasMemberBaseBase272Least Privilege Violation
HasMemberBaseBase273Improper Check for Dropped Privileges
HasMemberBaseBase274Improper Handling of Insufficient Privileges
HasMemberCategoryCategory275Permission Issues
HasMemberVariantVariant276Incorrect Default Permissions
HasMemberVariantVariant277Insecure Inherited Permissions
HasMemberVariantVariant278Insecure Preserved Inherited Permissions
HasMemberVariantVariant279Incorrect Execution-Assigned Permissions
HasMemberBaseBase280Improper Handling of Insufficient Permissions or Privileges
HasMemberBaseBase281Improper Preservation of Permissions
HasMemberClassClass282Improper Ownership Management
HasMemberBaseBase283Unverified Ownership
HasMemberClassClass284Improper Access Control
HasMemberClassClass285Improper Authorization
HasMemberClassClass286Incorrect User Management
HasMemberClassClass287Improper Authentication
HasMemberBaseBase288Authentication Bypass Using an Alternate Path or Channel
HasMemberVariantVariant289Authentication Bypass by Alternate Name
HasMemberBaseBase290Authentication Bypass by Spoofing
HasMemberVariantVariant291Reliance on IP Address for Authentication
HasMemberDeprecatedDeprecated292DEPRECATED (Duplicate): Trusting Self-reported DNS Name
HasMemberVariantVariant293Using Referer Field for Authentication
HasMemberBaseBase294Authentication Bypass by Capture-replay
HasMemberBaseBase295Improper Certificate Validation
HasMemberBaseBase296Improper Following of a Certificate's Chain of Trust
HasMemberVariantVariant297Improper Validation of Certificate with Host Mismatch
HasMemberVariantVariant298Improper Validation of Certificate Expiration
HasMemberBaseBase299Improper Check for Certificate Revocation
HasMemberClassClass300Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
HasMemberVariantVariant301Reflection Attack in an Authentication Protocol
HasMemberVariantVariant302Authentication Bypass by Assumed-Immutable Data
HasMemberBaseBase303Incorrect Implementation of Authentication Algorithm
HasMemberBaseBase304Missing Critical Step in Authentication
HasMemberBaseBase305Authentication Bypass by Primary Weakness
HasMemberVariantVariant306Missing Authentication for Critical Function
HasMemberBaseBase307Improper Restriction of Excessive Authentication Attempts
HasMemberBaseBase308Use of Single-factor Authentication
HasMemberBaseBase309Use of Password System for Primary Authentication
HasMemberCategoryCategory310Cryptographic Issues
HasMemberBaseBase311Missing Encryption of Sensitive Data
HasMemberBaseBase312Cleartext Storage of Sensitive Information
HasMemberVariantVariant313Cleartext Storage in a File or on Disk
HasMemberVariantVariant314Cleartext Storage in the Registry
HasMemberVariantVariant315Cleartext Storage of Sensitive Information in a Cookie
HasMemberVariantVariant316Cleartext Storage of Sensitive Information in Memory
HasMemberVariantVariant317Cleartext Storage of Sensitive Information in GUI
HasMemberVariantVariant318Cleartext Storage of Sensitive Information in Executable
HasMemberBaseBase319Cleartext Transmission of Sensitive Information
HasMemberCategoryCategory320Key Management Errors
HasMemberBaseBase321Use of Hard-coded Cryptographic Key
HasMemberBaseBase322Key Exchange without Entity Authentication
HasMemberBaseBase323Reusing a Nonce, Key Pair in Encryption
HasMemberBaseBase324Use of a Key Past its Expiration Date
HasMemberBaseBase325Missing Required Cryptographic Step
HasMemberClassClass326Inadequate Encryption Strength
HasMemberBaseBase327Use of a Broken or Risky Cryptographic Algorithm
HasMemberBaseBase328Reversible One-Way Hash
HasMemberVariantVariant329Not Using a Random IV with CBC Mode
HasMemberClassClass330Use of Insufficiently Random Values
HasMemberBaseBase331Insufficient Entropy
HasMemberVariantVariant332Insufficient Entropy in PRNG
HasMemberVariantVariant333Improper Handling of Insufficient Entropy in TRNG
HasMemberBaseBase334Small Space of Random Values
HasMemberBaseBase335Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
HasMemberBaseBase336Same Seed in Pseudo-Random Number Generator (PRNG)
HasMemberBaseBase337Predictable Seed in Pseudo-Random Number Generator (PRNG)
HasMemberBaseBase338Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
HasMemberBaseBase339Small Seed Space in PRNG
HasMemberClassClass340Predictability Problems
HasMemberBaseBase341Predictable from Observable State
HasMemberBaseBase342Predictable Exact Value from Previous Values
HasMemberBaseBase343Predictable Value Range from Previous Values
HasMemberBaseBase344Use of Invariant Value in Dynamically Changing Context
HasMemberClassClass345Insufficient Verification of Data Authenticity
HasMemberBaseBase346Origin Validation Error
HasMemberBaseBase347Improper Verification of Cryptographic Signature
HasMemberBaseBase348Use of Less Trusted Source
HasMemberBaseBase349Acceptance of Extraneous Untrusted Data With Trusted Data
HasMemberVariantVariant350Reliance on Reverse DNS Resolution for a Security-Critical Action
HasMemberBaseBase351Insufficient Type Distinction
HasMemberCompositeComposite352Cross-Site Request Forgery (CSRF)
HasMemberBaseBase353Missing Support for Integrity Check
HasMemberBaseBase354Improper Validation of Integrity Check Value
HasMemberCategoryCategory355User Interface Security Issues
HasMemberBaseBase356Product UI does not Warn User of Unsafe Actions
HasMemberBaseBase357Insufficient UI Warning of Dangerous Operations
HasMemberBaseBase358Improperly Implemented Security Check for Standard
HasMemberClassClass359Exposure of Private Information ('Privacy Violation')
HasMemberBaseBase360Trust of System Event Data
HasMemberCategoryCategory3617PK - Time and State
HasMemberClassClass362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
HasMemberBaseBase363Race Condition Enabling Link Following
HasMemberBaseBase364Signal Handler Race Condition
HasMemberBaseBase365Race Condition in Switch
HasMemberBaseBase366Race Condition within a Thread
HasMemberBaseBase367Time-of-check Time-of-use (TOCTOU) Race Condition
HasMemberBaseBase368Context Switching Race Condition
HasMemberBaseBase369Divide By Zero
HasMemberVariantVariant370Missing Check for Certificate Revocation after Initial Check
HasMemberCategoryCategory371State Issues
HasMemberBaseBase372Incomplete Internal State Distinction
HasMemberDeprecatedDeprecated373DEPRECATED: State Synchronization Error
HasMemberBaseBase374Passing Mutable Objects to an Untrusted Method
HasMemberBaseBase375Returning a Mutable Object to an Untrusted Caller
HasMemberCategoryCategory376Temporary File Issues
HasMemberBaseBase377Insecure Temporary File
HasMemberBaseBase378Creation of Temporary File With Insecure Permissions
HasMemberBaseBase379Creation of Temporary File in Directory with Incorrect Permissions
HasMemberCategoryCategory380Technology-Specific Time and State Issues
HasMemberCategoryCategory381J2EE Time and State Issues
HasMemberVariantVariant382J2EE Bad Practices: Use of System.exit()
HasMemberVariantVariant383J2EE Bad Practices: Direct Use of Threads
HasMemberCompositeComposite384Session Fixation
HasMemberBaseBase385Covert Timing Channel
HasMemberBaseBase386Symbolic Name not Mapping to Correct Object
HasMemberCategoryCategory387Signal Errors
HasMemberCategoryCategory3887PK - Errors
HasMemberCategoryCategory389Error Conditions, Return Values, Status Codes
HasMemberClassClass390Detection of Error Condition Without Action
HasMemberBaseBase391Unchecked Error Condition
HasMemberBaseBase392Missing Report of Error Condition
HasMemberBaseBase393Return of Wrong Status Code
HasMemberBaseBase394Unexpected Status Code or Return Value
HasMemberBaseBase395Use of NullPointerException Catch to Detect NULL Pointer Dereference
HasMemberBaseBase396Declaration of Catch for Generic Exception
HasMemberBaseBase397Declaration of Throws for Generic Exception
HasMemberCategoryCategory3987PK - Code Quality
HasMemberCategoryCategory399Resource Management Errors
HasMemberBaseBase400Uncontrolled Resource Consumption ('Resource Exhaustion')
HasMemberBaseBase401Improper Release of Memory Before Removing Last Reference ('Memory Leak')
HasMemberClassClass402Transmission of Private Resources into a New Sphere ('Resource Leak')
HasMemberBaseBase403Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')
HasMemberBaseBase404Improper Resource Shutdown or Release
HasMemberClassClass405Asymmetric Resource Consumption (Amplification)
HasMemberBaseBase406Insufficient Control of Network Message Volume (Network Amplification)
HasMemberBaseBase407Algorithmic Complexity
HasMemberBaseBase408Incorrect Behavior Order: Early Amplification
HasMemberBaseBase409Improper Handling of Highly Compressed Data (Data Amplification)
HasMemberBaseBase410Insufficient Resource Pool
HasMemberCategoryCategory411Resource Locking Problems
HasMemberBaseBase412Unrestricted Externally Accessible Lock
HasMemberBaseBase413Improper Resource Locking
HasMemberBaseBase414Missing Lock Check
HasMemberVariantVariant415Double Free
HasMemberBaseBase416Use After Free
HasMemberCategoryCategory417Channel and Path Errors
HasMemberDeprecatedDeprecated418DEPRECATED: Channel Errors
HasMemberBaseBase419Unprotected Primary Channel
HasMemberBaseBase420Unprotected Alternate Channel
HasMemberBaseBase421Race Condition During Access to Alternate Channel
HasMemberVariantVariant422Unprotected Windows Messaging Channel ('Shatter')
HasMemberDeprecatedDeprecated423DEPRECATED (Duplicate): Proxied Trusted Channel
HasMemberClassClass424Improper Protection of Alternate Path
HasMemberBaseBase425Direct Request ('Forced Browsing')
HasMemberCompositeComposite426Untrusted Search Path
HasMemberBaseBase427Uncontrolled Search Path Element
HasMemberBaseBase428Unquoted Search Path or Element
HasMemberCategoryCategory429Handler Errors
HasMemberBaseBase430Deployment of Wrong Handler
HasMemberBaseBase431Missing Handler
HasMemberBaseBase432Dangerous Signal Handler not Disabled During Sensitive Operations
HasMemberVariantVariant433Unparsed Raw Web Content Delivery
HasMemberBaseBase434Unrestricted Upload of File with Dangerous Type
HasMemberClassClass435Improper Interaction Between Multiple Entities
HasMemberBaseBase436Interpretation Conflict
HasMemberBaseBase437Incomplete Model of Endpoint Features
HasMemberCategoryCategory438Behavioral Problems
HasMemberBaseBase439Behavioral Change in New Version or Environment
HasMemberBaseBase440Expected Behavior Violation
HasMemberClassClass441Unintended Proxy or Intermediary ('Confused Deputy')
HasMemberCategoryCategory442Web Problems
HasMemberDeprecatedDeprecated443DEPRECATED (Duplicate): HTTP response splitting
HasMemberBaseBase444Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
HasMemberDeprecatedDeprecated445DEPRECATED: User Interface Errors
HasMemberBaseBase446UI Discrepancy for Security Feature
HasMemberBaseBase447Unimplemented or Unsupported Feature in UI
HasMemberBaseBase448Obsolete Feature in UI
HasMemberBaseBase449The UI Performs the Wrong Action
HasMemberBaseBase450Multiple Interpretations of UI Input
HasMemberClassClass451User Interface (UI) Misrepresentation of Critical Information
HasMemberCategoryCategory452Initialization and Cleanup Errors
HasMemberBaseBase453Insecure Default Variable Initialization
HasMemberBaseBase454External Initialization of Trusted Variables or Data Stores
HasMemberBaseBase455Non-exit on Failed Initialization
HasMemberBaseBase456Missing Initialization of a Variable
HasMemberVariantVariant457Use of Uninitialized Variable
HasMemberDeprecatedDeprecated458DEPRECATED: Incorrect Initialization
HasMemberBaseBase459Incomplete Cleanup
HasMemberVariantVariant460Improper Cleanup on Thrown Exception
HasMemberCategoryCategory461Data Structure Issues
HasMemberBaseBase462Duplicate Key in Associative List (Alist)
HasMemberBaseBase463Deletion of Data Structure Sentinel
HasMemberBaseBase464Addition of Data Structure Sentinel
HasMemberCategoryCategory465Pointer Issues
HasMemberBaseBase466Return of Pointer Value Outside of Expected Range
HasMemberVariantVariant467Use of sizeof() on a Pointer Type
HasMemberBaseBase468Incorrect Pointer Scaling
HasMemberBaseBase469Use of Pointer Subtraction to Determine Size
HasMemberBaseBase470Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
HasMemberBaseBase471Modification of Assumed-Immutable Data (MAID)
HasMemberBaseBase472External Control of Assumed-Immutable Web Parameter
HasMemberVariantVariant473PHP External Variable Modification
HasMemberBaseBase474Use of Function with Inconsistent Implementations
HasMemberBaseBase475Undefined Behavior for Input to API
HasMemberBaseBase476NULL Pointer Dereference
HasMemberBaseBase477Use of Obsolete Function
HasMemberVariantVariant478Missing Default Case in Switch Statement
HasMemberVariantVariant479Signal Handler Use of a Non-reentrant Function
HasMemberBaseBase480Use of Incorrect Operator
HasMemberVariantVariant481Assigning instead of Comparing
HasMemberVariantVariant482Comparing instead of Assigning
HasMemberVariantVariant483Incorrect Block Delimitation
HasMemberBaseBase484Omitted Break Statement in Switch
HasMemberCategoryCategory4857PK - Encapsulation
HasMemberVariantVariant486Comparison of Classes by Name
HasMemberVariantVariant487Reliance on Package-level Scope
HasMemberVariantVariant488Exposure of Data Element to Wrong Session
HasMemberBaseBase489Leftover Debug Code
HasMemberCategoryCategory490Mobile Code Issues
HasMemberVariantVariant491Public cloneable() Method Without Final ('Object Hijack')
HasMemberVariantVariant492Use of Inner Class Containing Sensitive Data
HasMemberVariantVariant493Critical Public Variable Without Final Modifier
HasMemberBaseBase494Download of Code Without Integrity Check
HasMemberVariantVariant495Private Array-Typed Field Returned From A Public Method
HasMemberVariantVariant496Public Data Assigned to Private Array-Typed Field
HasMemberVariantVariant497Exposure of System Data to an Unauthorized Control Sphere
HasMemberVariantVariant498Cloneable Class Containing Sensitive Information
HasMemberVariantVariant499Serializable Class Containing Sensitive Data
HasMemberVariantVariant500Public Static Field Not Marked Final
HasMemberBaseBase501Trust Boundary Violation
HasMemberVariantVariant502Deserialization of Untrusted Data
HasMemberDeprecatedDeprecated503DEPRECATED: Byte/Object Code
HasMemberDeprecatedDeprecated504DEPRECATED: Motivation/Intent
HasMemberDeprecatedDeprecated505DEPRECATED: Intentionally Introduced Weakness
HasMemberClassClass506Embedded Malicious Code
HasMemberBaseBase507Trojan Horse
HasMemberBaseBase508Non-Replicating Malicious Code
HasMemberBaseBase509Replicating Malicious Code (Virus or Worm)
HasMemberBaseBase510Trapdoor
HasMemberBaseBase511Logic/Time Bomb
HasMemberBaseBase512Spyware
HasMemberDeprecatedDeprecated513DEPRECATED: Intentionally Introduced Nonmalicious Weakness
HasMemberClassClass514Covert Channel
HasMemberBaseBase515Covert Storage Channel
HasMemberDeprecatedDeprecated516DEPRECATED (Duplicate): Covert Timing Channel
HasMemberDeprecatedDeprecated517DEPRECATED: Other Intentional, Nonmalicious Weakness
HasMemberDeprecatedDeprecated518DEPRECATED: Inadvertently Introduced Weakness
HasMemberCategoryCategory519.NET Environment Issues
HasMemberVariantVariant520.NET Misconfiguration: Use of Impersonation
HasMemberBaseBase521Weak Password Requirements
HasMemberBaseBase522Insufficiently Protected Credentials
HasMemberVariantVariant523Unprotected Transport of Credentials
HasMemberVariantVariant524Information Exposure Through Caching
HasMemberVariantVariant525Information Exposure Through Browser Caching
HasMemberVariantVariant526Information Exposure Through Environmental Variables
HasMemberVariantVariant527Exposure of CVS Repository to an Unauthorized Control Sphere
HasMemberVariantVariant528Exposure of Core Dump File to an Unauthorized Control Sphere
HasMemberVariantVariant529Exposure of Access Control List Files to an Unauthorized Control Sphere
HasMemberVariantVariant530Exposure of Backup File to an Unauthorized Control Sphere
HasMemberVariantVariant531Information Exposure Through Test Code
HasMemberVariantVariant532Information Exposure Through Log Files
HasMemberVariantVariant533Information Exposure Through Server Log Files
HasMemberVariantVariant534Information Exposure Through Debug Log Files
HasMemberVariantVariant535Information Exposure Through Shell Error Message
HasMemberVariantVariant536Information Exposure Through Servlet Runtime Error Message
HasMemberVariantVariant537Information Exposure Through Java Runtime Error Message
HasMemberBaseBase538File and Directory Information Exposure
HasMemberVariantVariant539Information Exposure Through Persistent Cookies
HasMemberVariantVariant540Information Exposure Through Source Code
HasMemberVariantVariant541Information Exposure Through Include Source Code
HasMemberVariantVariant542Information Exposure Through Cleanup Log Files
HasMemberVariantVariant543Use of Singleton Pattern Without Synchronization in a Multithreaded Context
HasMemberBaseBase544Missing Standardized Error Handling Mechanism
HasMemberDeprecatedDeprecated545DEPRECATED: Use of Dynamic Class Loading
HasMemberVariantVariant546Suspicious Comment
HasMemberVariantVariant547Use of Hard-coded, Security-relevant Constants
HasMemberVariantVariant548Information Exposure Through Directory Listing
HasMemberVariantVariant549Missing Password Field Masking
HasMemberVariantVariant550Information Exposure Through Server Error Message
HasMemberBaseBase551Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
HasMemberBaseBase552Files or Directories Accessible to External Parties
HasMemberVariantVariant553Command Shell in Externally Accessible Directory
HasMemberVariantVariant554ASP.NET Misconfiguration: Not Using Input Validation Framework
HasMemberVariantVariant555J2EE Misconfiguration: Plaintext Password in Configuration File
HasMemberVariantVariant556ASP.NET Misconfiguration: Use of Identity Impersonation
HasMemberCategoryCategory557Concurrency Issues
HasMemberVariantVariant558Use of getlogin() in Multithreaded Application
HasMemberCategoryCategory559Often Misused: Arguments and Parameters
HasMemberVariantVariant560Use of umask() with chmod-style Argument
HasMemberVariantVariant561Dead Code
HasMemberBaseBase562Return of Stack Variable Address
HasMemberVariantVariant563Assignment to Variable without Use
HasMemberVariantVariant564SQL Injection: Hibernate
HasMemberBaseBase565Reliance on Cookies without Validation and Integrity Checking
HasMemberVariantVariant566Authorization Bypass Through User-Controlled SQL Primary Key
HasMemberBaseBase567Unsynchronized Access to Shared Data in a Multithreaded Context
HasMemberVariantVariant568finalize() Method Without super.finalize()
HasMemberCategoryCategory569Expression Issues
HasMemberVariantVariant570Expression is Always False
HasMemberVariantVariant571Expression is Always True
HasMemberVariantVariant572Call to Thread run() instead of start()
HasMemberClassClass573Improper Following of Specification by Caller
HasMemberVariantVariant574EJB Bad Practices: Use of Synchronization Primitives
HasMemberVariantVariant575EJB Bad Practices: Use of AWT Swing
HasMemberVariantVariant576EJB Bad Practices: Use of Java I/O
HasMemberVariantVariant577EJB Bad Practices: Use of Sockets
HasMemberVariantVariant578EJB Bad Practices: Use of Class Loader
HasMemberVariantVariant579J2EE Bad Practices: Non-serializable Object Stored in Session
HasMemberVariantVariant580clone() Method Without super.clone()
HasMemberBaseBase581Object Model Violation: Just One of Equals and Hashcode Defined
HasMemberVariantVariant582Array Declared Public, Final, and Static
HasMemberVariantVariant583finalize() Method Declared Public
HasMemberBaseBase584Return Inside Finally Block
HasMemberVariantVariant585Empty Synchronized Block
HasMemberVariantVariant586Explicit Call to Finalize()
HasMemberBaseBase587Assignment of a Fixed Address to a Pointer
HasMemberVariantVariant588Attempt to Access Child of a Non-structure Pointer
HasMemberVariantVariant589Call to Non-ubiquitous API
HasMemberVariantVariant590Free of Memory not on the Heap
HasMemberVariantVariant591Sensitive Data Storage in Improperly Locked Memory
HasMemberDeprecatedDeprecated592DEPRECATED: Authentication Bypass Issues
HasMemberVariantVariant593Authentication Bypass: OpenSSL CTX Object Modified after SSL Objects are Created
HasMemberVariantVariant594J2EE Framework: Saving Unserializable Objects to Disk
HasMemberBaseBase595Comparison of Object References Instead of Object Contents
HasMemberBaseBase596Incorrect Semantic Object Comparison
HasMemberVariantVariant597Use of Wrong Operator in String Comparison
HasMemberVariantVariant598Information Exposure Through Query Strings in GET Request
HasMemberVariantVariant599Missing Validation of OpenSSL Certificate
HasMemberBaseBase600Uncaught Exception in Servlet
HasMemberVariantVariant601URL Redirection to Untrusted Site ('Open Redirect')
HasMemberBaseBase602Client-Side Enforcement of Server-Side Security
HasMemberBaseBase603Use of Client-Side Authentication
HasMemberViewView604Deprecated Entries
HasMemberBaseBase605Multiple Binds to the Same Port
HasMemberBaseBase606Unchecked Input for Loop Condition
HasMemberVariantVariant607Public Static Final Field References Mutable Object
HasMemberVariantVariant608Struts: Non-private Field in ActionForm Class
HasMemberBaseBase609Double-Checked Locking
HasMemberClassClass610Externally Controlled Reference to a Resource in Another Sphere
HasMemberVariantVariant611Improper Restriction of XML External Entity Reference ('XXE')
HasMemberVariantVariant612Information Exposure Through Indexing of Private Data
HasMemberBaseBase613Insufficient Session Expiration
HasMemberVariantVariant614Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
HasMemberVariantVariant615Information Exposure Through Comments
HasMemberVariantVariant616Incomplete Identification of Uploaded File Variables (PHP)
HasMemberVariantVariant617Reachable Assertion
HasMemberBaseBase618Exposed Unsafe ActiveX Method
HasMemberBaseBase619Dangling Database Cursor ('Cursor Injection')
HasMemberVariantVariant620Unverified Password Change
HasMemberBaseBase621Variable Extraction Error
HasMemberVariantVariant622Improper Validation of Function Hook Arguments
HasMemberVariantVariant623Unsafe ActiveX Control Marked Safe For Scripting
HasMemberBaseBase624Executable Regular Expression Error
HasMemberBaseBase625Permissive Regular Expression
HasMemberVariantVariant626Null Byte Interaction Error (Poison Null Byte)
HasMemberBaseBase627Dynamic Variable Evaluation
HasMemberBaseBase628Function Call with Incorrectly Specified Arguments
HasMemberViewView629Weaknesses in OWASP Top Ten (2007)
HasMemberDeprecatedDeprecated630DEPRECATED: Weaknesses Examined by SAMATE
HasMemberDeprecatedDeprecated631DEPRECATED: Resource-specific Weaknesses
HasMemberDeprecatedDeprecated632DEPRECATED: Weaknesses that Affect Files or Directories
HasMemberDeprecatedDeprecated633DEPRECATED: Weaknesses that Affect Memory
HasMemberDeprecatedDeprecated634DEPRECATED: Weaknesses that Affect System Processes
HasMemberViewView635Weaknesses Originally Used by NVD from 2008 to 2016
HasMemberClassClass636Not Failing Securely ('Failing Open')
HasMemberClassClass637Unnecessary Complexity in Protection Mechanism (Not Using 'Economy of Mechanism')
HasMemberClassClass638Not Using Complete Mediation
HasMemberBaseBase639Authorization Bypass Through User-Controlled Key
HasMemberBaseBase640Weak Password Recovery Mechanism for Forgotten Password
HasMemberBaseBase641Improper Restriction of Names for Files and Other Resources
HasMemberClassClass642External Control of Critical State Data
HasMemberBaseBase643Improper Neutralization of Data within XPath Expressions ('XPath Injection')
HasMemberVariantVariant644Improper Neutralization of HTTP Headers for Scripting Syntax
HasMemberBaseBase645Overly Restrictive Account Lockout Mechanism
HasMemberVariantVariant646Reliance on File Name or Extension of Externally-Supplied File
HasMemberVariantVariant647Use of Non-Canonical URL Paths for Authorization Decisions
HasMemberBaseBase648Incorrect Use of Privileged APIs
HasMemberBaseBase649Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking
HasMemberVariantVariant650Trusting HTTP Permission Methods on the Server Side
HasMemberVariantVariant651Information Exposure Through WSDL File
HasMemberBaseBase652Improper Neutralization of Data within XQuery Expressions ('XQuery Injection')
HasMemberBaseBase653Insufficient Compartmentalization
HasMemberBaseBase654Reliance on a Single Factor in a Security Decision
HasMemberBaseBase655Insufficient Psychological Acceptability
HasMemberBaseBase656Reliance on Security Through Obscurity
HasMemberClassClass657Violation of Secure Design Principles
HasMemberViewView658Weaknesses in Software Written in C
HasMemberViewView659Weaknesses in Software Written in C++
HasMemberViewView660Weaknesses in Software Written in Java
HasMemberViewView661Weaknesses in Software Written in PHP
HasMemberBaseBase662Improper Synchronization
HasMemberBaseBase663Use of a Non-reentrant Function in a Concurrent Context
HasMemberClassClass664Improper Control of a Resource Through its Lifetime
HasMemberClassClass665Improper Initialization
HasMemberBaseBase666Operation on Resource in Wrong Phase of Lifetime
HasMemberBaseBase667Improper Locking
HasMemberClassClass668Exposure of Resource to Wrong Sphere
HasMemberClassClass669Incorrect Resource Transfer Between Spheres
HasMemberClassClass670Always-Incorrect Control Flow Implementation
HasMemberClassClass671Lack of Administrator Control over Security
HasMemberBaseBase672Operation on a Resource after Expiration or Release
HasMemberClassClass673External Influence of Sphere Definition
HasMemberBaseBase674Uncontrolled Recursion
HasMemberClassClass675Duplicate Operations on Resource
HasMemberBaseBase676Use of Potentially Dangerous Function
HasMemberViewView677Weakness Base Elements
HasMemberViewView678Composites
HasMemberDeprecatedDeprecated679DEPRECATED: Chain Elements
HasMemberChainChain680Integer Overflow to Buffer Overflow
HasMemberClassClass681Incorrect Conversion between Numeric Types
HasMemberClassClass682Incorrect Calculation
HasMemberVariantVariant683Function Call With Incorrect Order of Arguments
HasMemberClassClass684Incorrect Provision of Specified Functionality
HasMemberVariantVariant685Function Call With Incorrect Number of Arguments
HasMemberVariantVariant686Function Call With Incorrect Argument Type
HasMemberVariantVariant687Function Call With Incorrectly Specified Argument Value
HasMemberVariantVariant688Function Call With Incorrect Variable or Reference as Argument
HasMemberCompositeComposite689Permission Race Condition During Resource Copy
HasMemberChainChain690Unchecked Return Value to NULL Pointer Dereference
HasMemberClassClass691Insufficient Control Flow Management
HasMemberChainChain692Incomplete Blacklist to Cross-Site Scripting
HasMemberClassClass693Protection Mechanism Failure
HasMemberBaseBase694Use of Multiple Resources with Duplicate Identifier
HasMemberBaseBase695Use of Low-Level Functionality
HasMemberClassClass696Incorrect Behavior Order
HasMemberClassClass697Insufficient Comparison
HasMemberBaseBase698Execution After Redirect (EAR)
HasMemberViewView699Development Concepts
HasMemberViewView700Seven Pernicious Kingdoms
HasMemberViewView701Weaknesses Introduced During Design
HasMemberViewView702Weaknesses Introduced During Implementation
HasMemberClassClass703Improper Check or Handling of Exceptional Conditions
HasMemberClassClass704Incorrect Type Conversion or Cast
HasMemberClassClass705Incorrect Control Flow Scoping
HasMemberClassClass706Use of Incorrectly-Resolved Name or Reference
HasMemberClassClass707Improper Enforcement of Message or Data Structure
HasMemberBaseBase708Incorrect Ownership Assignment
HasMemberViewView709Named Chains
HasMemberClassClass710Improper Adherence to Coding Standards
HasMemberViewView711Weaknesses in OWASP Top Ten (2004)
HasMemberCategoryCategory712OWASP Top Ten 2007 Category A1 - Cross Site Scripting (XSS)
HasMemberCategoryCategory713OWASP Top Ten 2007 Category A2 - Injection Flaws
HasMemberCategoryCategory714OWASP Top Ten 2007 Category A3 - Malicious File Execution
HasMemberCategoryCategory715OWASP Top Ten 2007 Category A4 - Insecure Direct Object Reference
HasMemberCategoryCategory716OWASP Top Ten 2007 Category A5 - Cross Site Request Forgery (CSRF)
HasMemberCategoryCategory717OWASP Top Ten 2007 Category A6 - Information Leakage and Improper Error Handling
HasMemberCategoryCategory718OWASP Top Ten 2007 Category A7 - Broken Authentication and Session Management
HasMemberCategoryCategory719OWASP Top Ten 2007 Category A8 - Insecure Cryptographic Storage
HasMemberCategoryCategory720OWASP Top Ten 2007 Category A9 - Insecure Communications
HasMemberCategoryCategory721OWASP Top Ten 2007 Category A10 - Failure to Restrict URL Access
HasMemberCategoryCategory722OWASP Top Ten 2004 Category A1 - Unvalidated Input
HasMemberCategoryCategory723OWASP Top Ten 2004 Category A2 - Broken Access Control
HasMemberCategoryCategory724OWASP Top Ten 2004 Category A3 - Broken Authentication and Session Management
HasMemberCategoryCategory725OWASP Top Ten 2004 Category A4 - Cross-Site Scripting (XSS) Flaws
HasMemberCategoryCategory726OWASP Top Ten 2004 Category A5 - Buffer Overflows
HasMemberCategoryCategory727OWASP Top Ten 2004 Category A6 - Injection Flaws
HasMemberCategoryCategory728OWASP Top Ten 2004 Category A7 - Improper Error Handling
HasMemberCategoryCategory729OWASP Top Ten 2004 Category A8 - Insecure Storage
HasMemberCategoryCategory730OWASP Top Ten 2004 Category A9 - Denial of Service
HasMemberCategoryCategory731OWASP Top Ten 2004 Category A10 - Insecure Configuration Management
HasMemberClassClass732Incorrect Permission Assignment for Critical Resource
HasMemberBaseBase733Compiler Optimization Removal or Modification of Security-critical Code
HasMemberViewView734Weaknesses Addressed by the CERT C Secure Coding Standard (2008 Version)
HasMemberCategoryCategory735CERT C Secure Coding (2008 Version) Section 01 - Preprocessor (PRE)
HasMemberCategoryCategory736CERT C Secure Coding (2008 Version) Section 02 - Declarations and Initialization (DCL)
HasMemberCategoryCategory737CERT C Secure Coding (2008 Version) Section 03 - Expressions (EXP)
HasMemberCategoryCategory738CERT C Secure Coding (2008 Version) Section 04 - Integers (INT)
HasMemberCategoryCategory739CERT C Secure Coding (2008 Version) Section 05 - Floating Point (FLP)
HasMemberCategoryCategory740CERT C Secure Coding (2008 Version) Section 06 - Arrays (ARR)
HasMemberCategoryCategory741CERT C Secure Coding (2008 Version) Section 07 - Characters and Strings (STR)
HasMemberCategoryCategory742CERT C Secure Coding (2008 Version) Section 08 - Memory Management (MEM)
HasMemberCategoryCategory743CERT C Secure Coding (2008 Version) Section 09 - Input Output (FIO)
HasMemberCategoryCategory744CERT C Secure Coding (2008 Version) Section 10 - Environment (ENV)
HasMemberCategoryCategory745CERT C Secure Coding (2008 Version) Section 11 - Signals (SIG)
HasMemberCategoryCategory746CERT C Secure Coding (2008 Version) Section 12 - Error Handling (ERR)
HasMemberCategoryCategory747CERT C Secure Coding (2008 Version) Section 49 - Miscellaneous (MSC)
HasMemberCategoryCategory748CERT C Secure Coding (2008 Version) Section 50 - POSIX (POS)
HasMemberBaseBase749Exposed Dangerous Method or Function
HasMemberViewView750Weaknesses in the 2009 CWE/SANS Top 25 Most Dangerous Programming Errors
HasMemberCategoryCategory7512009 Top 25 - Insecure Interaction Between Components
HasMemberCategoryCategory7522009 Top 25 - Risky Resource Management
HasMemberCategoryCategory7532009 Top 25 - Porous Defenses
HasMemberClassClass754Improper Check for Unusual or Exceptional Conditions
HasMemberClassClass755Improper Handling of Exceptional Conditions
HasMemberClassClass756Missing Custom Error Page
HasMemberClassClass757Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')
HasMemberClassClass758Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
HasMemberBaseBase759Use of a One-Way Hash without a Salt
HasMemberBaseBase760Use of a One-Way Hash with a Predictable Salt
HasMemberVariantVariant761Free of Pointer not at Start of Buffer
HasMemberVariantVariant762Mismatched Memory Management Routines
HasMemberBaseBase763Release of Invalid Pointer or Reference
HasMemberVariantVariant764Multiple Locks of a Critical Resource
HasMemberVariantVariant765Multiple Unlocks of a Critical Resource
HasMemberVariantVariant766Critical Variable Declared Public
HasMemberVariantVariant767Access to Critical Private Variable via Public Method
HasMemberVariantVariant768Incorrect Short Circuit Evaluation
HasMemberBaseBase769Uncontrolled File Descriptor Consumption
HasMemberBaseBase770Allocation of Resources Without Limits or Throttling
HasMemberBaseBase771Missing Reference to Active Allocated Resource
HasMemberBaseBase772Missing Release of Resource after Effective Lifetime
HasMemberVariantVariant773Missing Reference to Active File Descriptor or Handle
HasMemberVariantVariant774Allocation of File Descriptors or Handles Without Limits or Throttling
HasMemberVariantVariant775Missing Release of File Descriptor or Handle after Effective Lifetime
HasMemberVariantVariant776Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
HasMemberVariantVariant777Regular Expression without Anchors
HasMemberBaseBase778Insufficient Logging
HasMemberBaseBase779Logging of Excessive Data
HasMemberVariantVariant780Use of RSA Algorithm without OAEP
HasMemberVariantVariant781Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code
HasMemberVariantVariant782Exposed IOCTL with Insufficient Access Control
HasMemberVariantVariant783Operator Precedence Logic Error
HasMemberVariantVariant784Reliance on Cookies without Validation and Integrity Checking in a Security Decision
HasMemberVariantVariant785Use of Path Manipulation Function without Maximum-sized Buffer
HasMemberBaseBase786Access of Memory Location Before Start of Buffer
HasMemberBaseBase787Out-of-bounds Write
HasMemberBaseBase788Access of Memory Location After End of Buffer
HasMemberVariantVariant789Uncontrolled Memory Allocation
HasMemberClassClass790Improper Filtering of Special Elements
HasMemberBaseBase791Incomplete Filtering of Special Elements
HasMemberVariantVariant792Incomplete Filtering of One or More Instances of Special Elements
HasMemberVariantVariant793Only Filtering One Instance of a Special Element
HasMemberVariantVariant794Incomplete Filtering of Multiple Instances of Special Elements
HasMemberBaseBase795Only Filtering Special Elements at a Specified Location
HasMemberVariantVariant796Only Filtering Special Elements Relative to a Marker
HasMemberVariantVariant797Only Filtering Special Elements at an Absolute Position
HasMemberBaseBase798Use of Hard-coded Credentials
HasMemberClassClass799Improper Control of Interaction Frequency
HasMemberViewView800Weaknesses in the 2010 CWE/SANS Top 25 Most Dangerous Programming Errors
HasMemberCategoryCategory8012010 Top 25 - Insecure Interaction Between Components
HasMemberCategoryCategory8022010 Top 25 - Risky Resource Management
HasMemberCategoryCategory8032010 Top 25 - Porous Defenses
HasMemberBaseBase804Guessable CAPTCHA
HasMemberBaseBase805Buffer Access with Incorrect Length Value
HasMemberVariantVariant806Buffer Access Using Size of Source Buffer
HasMemberBaseBase807Reliance on Untrusted Inputs in a Security Decision
HasMemberCategoryCategory8082010 Top 25 - Weaknesses On the Cusp
HasMemberViewView809Weaknesses in OWASP Top Ten (2010)
HasMemberCategoryCategory810OWASP Top Ten 2010 Category A1 - Injection
HasMemberCategoryCategory811OWASP Top Ten 2010 Category A2 - Cross-Site Scripting (XSS)
HasMemberCategoryCategory812OWASP Top Ten 2010 Category A3 - Broken Authentication and Session Management
HasMemberCategoryCategory813OWASP Top Ten 2010 Category A4 - Insecure Direct Object References
HasMemberCategoryCategory814OWASP Top Ten 2010 Category A5 - Cross-Site Request Forgery(CSRF)
HasMemberCategoryCategory815OWASP Top Ten 2010 Category A6 - Security Misconfiguration
HasMemberCategoryCategory816OWASP Top Ten 2010 Category A7 - Insecure Cryptographic Storage
HasMemberCategoryCategory817OWASP Top Ten 2010 Category A8 - Failure to Restrict URL Access
HasMemberCategoryCategory818OWASP Top Ten 2010 Category A9 - Insufficient Transport Layer Protection
HasMemberCategoryCategory819OWASP Top Ten 2010 Category A10 - Unvalidated Redirects and Forwards
HasMemberBaseBase820Missing Synchronization
HasMemberBaseBase821Incorrect Synchronization
HasMemberBaseBase822Untrusted Pointer Dereference
HasMemberBaseBase823Use of Out-of-range Pointer Offset
HasMemberBaseBase824Access of Uninitialized Pointer
HasMemberBaseBase825Expired Pointer Dereference
HasMemberBaseBase826Premature Release of Resource During Expected Lifetime
HasMemberBaseBase827Improper Control of Document Type Definition
HasMemberBaseBase828Signal Handler with Functionality that is not Asynchronous-Safe
HasMemberClassClass829Inclusion of Functionality from Untrusted Control Sphere
HasMemberBaseBase830Inclusion of Web Functionality from an Untrusted Source
HasMemberBaseBase831Signal Handler Function Associated with Multiple Signals
HasMemberBaseBase832Unlock of a Resource that is not Locked
HasMemberBaseBase833Deadlock
HasMemberBaseBase834Excessive Iteration
HasMemberBaseBase835Loop with Unreachable Exit Condition ('Infinite Loop')
HasMemberBaseBase836Use of Password Hash Instead of Password for Authentication
HasMemberBaseBase837Improper Enforcement of a Single, Unique Action
HasMemberBaseBase838Inappropriate Encoding for Output Context
HasMemberBaseBase839Numeric Range Comparison Without Minimum Check
HasMemberCategoryCategory840Business Logic Errors
HasMemberBaseBase841Improper Enforcement of Behavioral Workflow
HasMemberBaseBase842Placement of User into Incorrect Group
HasMemberBaseBase843Access of Resource Using Incompatible Type ('Type Confusion')
HasMemberViewView844Weaknesses Addressed by the CERT Java Secure Coding Standard
HasMemberCategoryCategory845CERT Java Secure Coding Section 00 - Input Validation and Data Sanitization (IDS)
HasMemberCategoryCategory846CERT Java Secure Coding Section 01 - Declarations and Initialization (DCL)
HasMemberCategoryCategory847CERT Java Secure Coding Section 02 - Expressions (EXP)
HasMemberCategoryCategory848CERT Java Secure Coding Section 03 - Numeric Types and Operations (NUM)
HasMemberCategoryCategory849CERT Java Secure Coding Section 04 - Object Orientation (OBJ)
HasMemberCategoryCategory850CERT Java Secure Coding Section 05 - Methods (MET)
HasMemberCategoryCategory851CERT Java Secure Coding Section 06 - Exceptional Behavior (ERR)
HasMemberCategoryCategory852CERT Java Secure Coding Section 07 - Visibility and Atomicity (VNA)
HasMemberCategoryCategory853CERT Java Secure Coding Section 08 - Locking (LCK)
HasMemberCategoryCategory854CERT Java Secure Coding Section 09 - Thread APIs (THI)
HasMemberCategoryCategory855CERT Java Secure Coding Section 10 - Thread Pools (TPS)
HasMemberCategoryCategory856CERT Java Secure Coding Section 11 - Thread-Safety Miscellaneous (TSM)
HasMemberCategoryCategory857CERT Java Secure Coding Section 12 - Input Output (FIO)
HasMemberCategoryCategory858CERT Java Secure Coding Section 13 - Serialization (SER)
HasMemberCategoryCategory859CERT Java Secure Coding Section 14 - Platform Security (SEC)
HasMemberCategoryCategory860CERT Java Secure Coding Section 15 - Runtime Environment (ENV)
HasMemberCategoryCategory861CERT Java Secure Coding Section 49 - Miscellaneous (MSC)
HasMemberClassClass862Missing Authorization
HasMemberClassClass863Incorrect Authorization
HasMemberCategoryCategory8642011 Top 25 - Insecure Interaction Between Components
HasMemberCategoryCategory8652011 Top 25 - Risky Resource Management
HasMemberCategoryCategory8662011 Top 25 - Porous Defenses
HasMemberCategoryCategory8672011 Top 25 - Weaknesses On the Cusp
HasMemberViewView868Weaknesses Addressed by the CERT C++ Secure Coding Standard
HasMemberCategoryCategory869CERT C++ Secure Coding Section 01 - Preprocessor (PRE)
HasMemberCategoryCategory870CERT C++ Secure Coding Section 02 - Declarations and Initialization (DCL)
HasMemberCategoryCategory871CERT C++ Secure Coding Section 03 - Expressions (EXP)
HasMemberCategoryCategory872CERT C++ Secure Coding Section 04 - Integers (INT)
HasMemberCategoryCategory873CERT C++ Secure Coding Section 05 - Floating Point Arithmetic (FLP)
HasMemberCategoryCategory874CERT C++ Secure Coding Section 06 - Arrays and the STL (ARR)
HasMemberCategoryCategory875CERT C++ Secure Coding Section 07 - Characters and Strings (STR)
HasMemberCategoryCategory876CERT C++ Secure Coding Section 08 - Memory Management (MEM)
HasMemberCategoryCategory877CERT C++ Secure Coding Section 09 - Input Output (FIO)
HasMemberCategoryCategory878CERT C++ Secure Coding Section 10 - Environment (ENV)
HasMemberCategoryCategory879CERT C++ Secure Coding Section 11 - Signals (SIG)
HasMemberCategoryCategory880CERT C++ Secure Coding Section 12 - Exceptions and Error Handling (ERR)
HasMemberCategoryCategory881CERT C++ Secure Coding Section 13 - Object Oriented Programming (OOP)
HasMemberCategoryCategory882CERT C++ Secure Coding Section 14 - Concurrency (CON)
HasMemberCategoryCategory883CERT C++ Secure Coding Section 49 - Miscellaneous (MSC)
HasMemberViewView884CWE Cross-section
HasMemberCategoryCategory885SFP Primary Cluster: Risky Values
HasMemberCategoryCategory886SFP Primary Cluster: Unused entities
HasMemberCategoryCategory887SFP Primary Cluster: API
HasMemberViewView888Software Fault Pattern (SFP) Clusters
HasMemberCategoryCategory889SFP Primary Cluster: Exception Management
HasMemberCategoryCategory890SFP Primary Cluster: Memory Access
HasMemberCategoryCategory891SFP Primary Cluster: Memory Management
HasMemberCategoryCategory892SFP Primary Cluster: Resource Management
HasMemberCategoryCategory893SFP Primary Cluster: Path Resolution
HasMemberCategoryCategory894SFP Primary Cluster: Synchronization
HasMemberCategoryCategory895SFP Primary Cluster: Information Leak
HasMemberCategoryCategory896SFP Primary Cluster: Tainted Input
HasMemberCategoryCategory897SFP Primary Cluster: Entry Points
HasMemberCategoryCategory898SFP Primary Cluster: Authentication
HasMemberCategoryCategory899SFP Primary Cluster: Access Control
HasMemberViewView900Weaknesses in the 2011 CWE/SANS Top 25 Most Dangerous Software Errors
HasMemberCategoryCategory901SFP Primary Cluster: Privilege
HasMemberCategoryCategory902SFP Primary Cluster: Channel
HasMemberCategoryCategory903SFP Primary Cluster: Cryptography
HasMemberCategoryCategory904SFP Primary Cluster: Malware
HasMemberCategoryCategory905SFP Primary Cluster: Predictability
HasMemberCategoryCategory906SFP Primary Cluster: UI
HasMemberCategoryCategory907SFP Primary Cluster: Other
HasMemberBaseBase908Use of Uninitialized Resource
HasMemberBaseBase909Missing Initialization of Resource
HasMemberBaseBase910Use of Expired File Descriptor
HasMemberBaseBase911Improper Update of Reference Count
HasMemberClassClass912Hidden Functionality
HasMemberClassClass913Improper Control of Dynamically-Managed Code Resources
HasMemberBaseBase914Improper Control of Dynamically-Identified Variables
HasMemberBaseBase915Improperly Controlled Modification of Dynamically-Determined Object Attributes
HasMemberBaseBase916Use of Password Hash With Insufficient Computational Effort
HasMemberBaseBase917Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
HasMemberBaseBase918Server-Side Request Forgery (SSRF)
HasMemberViewView919Weaknesses in Mobile Applications
HasMemberBaseBase920Improper Restriction of Power Consumption
HasMemberBaseBase921Storage of Sensitive Data in a Mechanism without Access Control
HasMemberClassClass922Insecure Storage of Sensitive Information
HasMemberClassClass923Improper Restriction of Communication Channel to Intended Endpoints
HasMemberClassClass924Improper Enforcement of Message Integrity During Transmission in a Communication Channel
HasMemberVariantVariant925Improper Verification of Intent by Broadcast Receiver
HasMemberVariantVariant926Improper Export of Android Application Components
HasMemberVariantVariant927Use of Implicit Intent for Sensitive Communication
HasMemberViewView928Weaknesses in OWASP Top Ten (2013)
HasMemberCategoryCategory929OWASP Top Ten 2013 Category A1 - Injection
HasMemberCategoryCategory930OWASP Top Ten 2013 Category A2 - Broken Authentication and Session Management
HasMemberCategoryCategory931OWASP Top Ten 2013 Category A3 - Cross-Site Scripting (XSS)
HasMemberCategoryCategory932OWASP Top Ten 2013 Category A4 - Insecure Direct Object References
HasMemberCategoryCategory933OWASP Top Ten 2013 Category A5 - Security Misconfiguration
HasMemberCategoryCategory934OWASP Top Ten 2013 Category A6 - Sensitive Data Exposure
HasMemberCategoryCategory935OWASP Top Ten 2013 Category A7 - Missing Function Level Access Control
HasMemberCategoryCategory936OWASP Top Ten 2013 Category A8 - Cross-Site Request Forgery (CSRF)
HasMemberCategoryCategory937OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
HasMemberCategoryCategory938OWASP Top Ten 2013 Category A10 - Unvalidated Redirects and Forwards
HasMemberBaseBase939Improper Authorization in Handler for Custom URL Scheme
HasMemberBaseBase940Improper Verification of Source of a Communication Channel
HasMemberBaseBase941Incorrectly Specified Destination in a Communication Channel
HasMemberVariantVariant942Overly Permissive Cross-domain Whitelist
HasMemberClassClass943Improper Neutralization of Special Elements in Data Query Logic
HasMemberCategoryCategory944SFP Secondary Cluster: Access Management
HasMemberCategoryCategory945SFP Secondary Cluster: Insecure Resource Access
HasMemberCategoryCategory946SFP Secondary Cluster: Insecure Resource Permissions
HasMemberCategoryCategory947SFP Secondary Cluster: Authentication Bypass
HasMemberCategoryCategory948SFP Secondary Cluster: Digital Certificate
HasMemberCategoryCategory949SFP Secondary Cluster: Faulty Endpoint Authentication
HasMemberCategoryCategory950SFP Secondary Cluster: Hardcoded Sensitive Data
HasMemberCategoryCategory951SFP Secondary Cluster: Insecure Authentication Policy
HasMemberCategoryCategory952SFP Secondary Cluster: Missing Authentication
HasMemberCategoryCategory953SFP Secondary Cluster: Missing Endpoint Authentication
HasMemberCategoryCategory954SFP Secondary Cluster: Multiple Binds to the Same Port
HasMemberCategoryCategory955SFP Secondary Cluster: Unrestricted Authentication
HasMemberCategoryCategory956SFP Secondary Cluster: Channel Attack
HasMemberCategoryCategory957SFP Secondary Cluster: Protocol Error
HasMemberCategoryCategory958SFP Secondary Cluster: Broken Cryptography
HasMemberCategoryCategory959SFP Secondary Cluster: Weak Cryptography
HasMemberCategoryCategory960SFP Secondary Cluster: Ambiguous Exception Type
HasMemberCategoryCategory961SFP Secondary Cluster: Incorrect Exception Behavior
HasMemberCategoryCategory962SFP Secondary Cluster: Unchecked Status Condition
HasMemberCategoryCategory963SFP Secondary Cluster: Exposed Data
HasMemberCategoryCategory964SFP Secondary Cluster: Exposure Temporary File
HasMemberCategoryCategory965SFP Secondary Cluster: Insecure Session Management
HasMemberCategoryCategory966SFP Secondary Cluster: Other Exposures
HasMemberCategoryCategory967SFP Secondary Cluster: State Disclosure
HasMemberCategoryCategory968SFP Secondary Cluster: Covert Channel
HasMemberCategoryCategory969SFP Secondary Cluster: Faulty Memory Release
HasMemberCategoryCategory970SFP Secondary Cluster: Faulty Buffer Access
HasMemberCategoryCategory971SFP Secondary Cluster: Faulty Pointer Use
HasMemberCategoryCategory972SFP Secondary Cluster: Faulty String Expansion
HasMemberCategoryCategory973SFP Secondary Cluster: Improper NULL Termination
HasMemberCategoryCategory974SFP Secondary Cluster: Incorrect Buffer Length Computation
HasMemberCategoryCategory975SFP Secondary Cluster: Architecture
HasMemberCategoryCategory976SFP Secondary Cluster: Compiler
HasMemberCategoryCategory977SFP Secondary Cluster: Design
HasMemberCategoryCategory978SFP Secondary Cluster: Implementation
HasMemberCategoryCategory979SFP Secondary Cluster: Failed Chroot Jail
HasMemberCategoryCategory980SFP Secondary Cluster: Link in Resource Name Resolution
HasMemberCategoryCategory981SFP Secondary Cluster: Path Traversal
HasMemberCategoryCategory982SFP Secondary Cluster: Failure to Release Resource
HasMemberCategoryCategory983SFP Secondary Cluster: Faulty Resource Use
HasMemberCategoryCategory984SFP Secondary Cluster: Life Cycle
HasMemberCategoryCategory985SFP Secondary Cluster: Unrestricted Consumption
HasMemberCategoryCategory986SFP Secondary Cluster: Missing Lock
HasMemberCategoryCategory987SFP Secondary Cluster: Multiple Locks/Unlocks
HasMemberCategoryCategory988SFP Secondary Cluster: Race Condition Window
HasMemberCategoryCategory989SFP Secondary Cluster: Unrestricted Lock
HasMemberCategoryCategory990SFP Secondary Cluster: Tainted Input to Command
HasMemberCategoryCategory991SFP Secondary Cluster: Tainted Input to Environment
HasMemberCategoryCategory992SFP Secondary Cluster: Faulty Input Transformation
HasMemberCategoryCategory993SFP Secondary Cluster: Incorrect Input Handling
HasMemberCategoryCategory994SFP Secondary Cluster: Tainted Input to Variable
HasMemberCategoryCategory995SFP Secondary Cluster: Feature
HasMemberCategoryCategory996SFP Secondary Cluster: Security
HasMemberCategoryCategory997SFP Secondary Cluster: Information Loss
HasMemberCategoryCategory998SFP Secondary Cluster: Glitch in Computation
HasMemberViewView999Weaknesses without Software Fault Patterns
HasMemberViewView1000Research Concepts
HasMemberCategoryCategory1001SFP Secondary Cluster: Use of an Improper API
HasMemberCategoryCategory1002SFP Secondary Cluster: Unexpected Entry Points
HasMemberViewView1003Weaknesses for Simplified Mapping of Published Vulnerabilities
HasMemberVariantVariant1004Sensitive Cookie Without 'HttpOnly' Flag
HasMemberCategoryCategory10057PK - Input Validation and Representation
HasMemberCategoryCategory1006Bad Coding Practices
HasMemberBaseBase1007Insufficient Visual Distinction of Homoglyphs Presented to User
HasMemberViewView1008Architectural Concepts
HasMemberCategoryCategory1009Audit
HasMemberCategoryCategory1010Authenticate Actors
HasMemberCategoryCategory1011Authorize Actors
HasMemberCategoryCategory1012Cross Cutting
HasMemberCategoryCategory1013Encrypt Data
HasMemberCategoryCategory1014Identify Actors
HasMemberCategoryCategory1015Limit Access
HasMemberCategoryCategory1016Limit Exposure
HasMemberCategoryCategory1017Lock Computer
HasMemberCategoryCategory1018Manage User Sessions
HasMemberCategoryCategory1019Validate Inputs
HasMemberCategoryCategory1020Verify Message Integrity
HasMemberBaseBase1021Improper Restriction of Rendered UI Layers or Frames
HasMemberVariantVariant1022Improper Restriction of Cross-Origin Permission to window.opener.location
HasMemberViewView2000Comprehensive CWE Dictionary
+ Content History
Modifications
Modification DateModifierOrganizationSource
2008-09-08CWE Content TeamMITRE
updated View_Structure
+ View Metrics
CWEs in this viewTotal CWEs
Total982out of982
Weaknesses714out of 714
Categories237out of 237
Views31out of 31

More information is available — Please select a different filter.
Page Last Updated: November 14, 2017