CWE
Home > CWE List > VIEW LIST: CWE-660: Weaknesses found in the Java Language (Draft 9)   View the CWE List

VIEW LIST: CWE-660: Weaknesses found in the Java Language (Draft 9)

Weaknesses found in the Java Language
View ID
Status: Draft

660 (View)

ObjectiveThis view (slice) covers issues that are found in Java that are not common to all languages.
View Data

Filter Used: .//Applicable_Platforms/Platform='Java'

CWEs in this viewTotal CWEs
Total70out of695
Views0out of14
Categories1out of64
Weaknesses69out of605
Compound_Elements0out of12
Back to top
Weakness VariantWeakness Variant Array Declared Public, Final, and Static - (582)
Weakness VariantWeakness Variant Assigning instead of Comparing - (481)
Weakness VariantWeakness Variant Call to Thread run() instead of start() - (572)
Weakness VariantWeakness Variant clone() Method Without super.clone() - (580)
Weakness VariantWeakness Variant Comparison of Classes by Name - (486)
Weakness VariantWeakness Variant Critical Public Variable Without Final Modifier - (493)
Weakness BaseWeakness Base Declaration of Catch for Generic Exception - (396)
Weakness BaseWeakness Base Declaration of Throws for Generic Exception - (397)
Weakness BaseWeakness Base Direct Use of Unsafe JNI - (111)
Weakness BaseWeakness Base Double-Checked Locking - (609)
Weakness VariantWeakness Variant Download of Untrusted Mobile Code Without Integrity Check - (494)
Weakness BaseWeakness Base Duplicate Key in Associative List (Alist) - (462)
Weakness VariantWeakness Variant EJB Bad Practices: Use of AWT Swing - (575)
Weakness VariantWeakness Variant EJB Bad Practices: Use of Class Loader - (578)
Weakness VariantWeakness Variant EJB Bad Practices: Use of Java I/O - (576)
Weakness VariantWeakness Variant EJB Bad Practices: Use of Sockets - (577)
Weakness VariantWeakness Variant EJB Bad Practices: Use of Synchronization Primitives - (574)
Weakness VariantWeakness Variant Empty Synchronized Block - (585)
Weakness VariantWeakness Variant Explicit Call to Finalize - (586)
Weakness VariantWeakness Variant Failure to Use Default Case in Switch - (478)
Weakness VariantWeakness Variant finalize() Method Declared Public - (583)
Weakness VariantWeakness Variant finalize() Method Without super.finalize() - (568)
Weakness VariantWeakness Variant Improper Cleanup on Thrown Exception - (460)
Weakness BaseWeakness Base Incorrect Sign Extension - (194)
Weakness VariantWeakness Variant Information Leak through Class Cloning - (498)
Weakness VariantWeakness Variant Information Leak Through Java Runtime Error Message - (537)
Weakness BaseWeakness Base Insufficient Control of Directives in Dynamically Evaluated Code (aka 'Eval Injection') - (95)
Category Integer Coercion Error - (192)
Weakness BaseWeakness Base Integer Underflow (Wrap or Wraparound) - (191)
Weakness VariantWeakness Variant J2EE Bad Practices: Direct Management of Connections - (245)
Weakness VariantWeakness Variant J2EE Bad Practices: Direct Use of Sockets - (246)
Weakness VariantWeakness Variant J2EE Bad Practices: Direct Use of Threads - (383)
Weakness VariantWeakness Variant J2EE Bad Practices: Non-serializable Object Stored in Session - (579)
Weakness VariantWeakness Variant J2EE Bad Practices: Use of System.exit() - (382)
Weakness VariantWeakness Variant J2EE Framework: Saving Unserializable Objects to Disk - (594)
Weakness VariantWeakness Variant J2EE Misconfiguration: Data Transmission Without Encryption - (5)
Weakness VariantWeakness Variant J2EE Misconfiguration: Insufficient Session-ID Length - (6)
Weakness VariantWeakness Variant J2EE Misconfiguration: Missing Error Handling - (7)
Weakness BaseWeakness Base Mutable Objects Passed by Reference - (374)
Weakness BaseWeakness Base NULL Pointer Dereference - (476)
Weakness BaseWeakness Base Numeric Truncation Error - (197)
Weakness BaseWeakness Base Object Model Violation: Just One of Equals and Hashcode Defined - (581)
Weakness BaseWeakness Base Omitted Break Statement - (484)
Weakness BaseWeakness Base Passing Mutable Objects to an Untrusted Method - (375)
Weakness VariantWeakness Variant Private Array-Typed Field Returned From A Public Method - (495)
Weakness VariantWeakness Variant Public cloneable() Method Without Final (aka 'Object Hijack') - (491)
Weakness VariantWeakness Variant Public Data Assigned to Private Array-Typed Field - (496)
Weakness VariantWeakness Variant Public Static Final Field References Mutable Object - (607)
Weakness BaseWeakness Base Race Condition in Switch - (365)
Weakness BaseWeakness Base Race Condition within a Thread - (366)
Weakness VariantWeakness Variant Reliance on Package-level Scope - (487)
Weakness VariantWeakness Variant Serializable Class Containing Sensitive Data - (499)
Weakness VariantWeakness Variant Static Field Not Marked Final - (500)
Weakness VariantWeakness Variant Struts: Duplicate Validation Forms - (102)
Weakness VariantWeakness Variant Struts: Form Bean Does Not Extend Validation Class - (104)
Weakness VariantWeakness Variant Struts: Form Field Without Validator - (105)
Weakness VariantWeakness Variant Struts: Incomplete validate() Method Definition - (103)
Weakness VariantWeakness Variant Struts: Non-private Field in ActionForm Class - (608)
Weakness VariantWeakness Variant Struts: Plug-in Framework not in Use - (106)
Weakness VariantWeakness Variant Struts: Unused Validation Form - (107)
Weakness VariantWeakness Variant Struts: Unvalidated Action Form - (108)
Weakness VariantWeakness Variant Struts: Validator Turned Off - (109)
Weakness VariantWeakness Variant Struts: Validator Without Form Field - (110)
Weakness ClassWeakness Class Struts Validation Problems - (101)
Weakness BaseWeakness Base Uncaught Exception - (248)
Weakness VariantWeakness Variant Use of Dynamic Class Loading - (545)
Weakness BaseWeakness Base Use of Externally-Controlled Input to Select Classes or Code (aka 'Unsafe Reflection') - (470)
Weakness VariantWeakness Variant Use of Inner Class Containing Sensitive Data - (492)
Weakness BaseWeakness Base Use of NullPointerException Catch to Detect NULL Pointer Dereference - (395)
Weakness VariantWeakness Variant Use of Singleton Pattern in a Non-thread-safe Manner - (543)
Page Last Updated: April 11, 2008
 

CWE is sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security.

This Web site is hosted by The MITRE Corporation.
Copyright 2008, The MITRE Corporation. CWE and the CWE logo are trademarks of The MITRE Corporation.

Contact cwe@mitre.org for more information.
Privacy policy
Terms of use
Contact us