2000Comprehensive CWE Dictionary

1Location

2Environment

3Technology-specific Environment Issues

4J2EE Environment Issues

5J2EE Misconfiguration: Data Transmission Without Encryption

6J2EE Misconfiguration: Insufficient Session-ID Length

7J2EE Misconfiguration: Missing Custom Error Page

8J2EE Misconfiguration: Entity Bean Declared Remote

9J2EE Misconfiguration: Weak Access Permissions for EJB Methods

10ASP.NET Environment Issues

11ASP.NET Misconfiguration: Creating Debug Binary

12ASP.NET Misconfiguration: Missing Custom Error Page

13ASP.NET Misconfiguration: Password in Configuration File

14Compiler Removal of Code to Clear Buffers

15External Control of System or Configuration Setting

16Configuration

17Code

18Source Code

19Data Processing Errors

20Improper Input Validation

21Pathname Traversal and Equivalence Errors

22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

23Relative Path Traversal

24Path Traversal: '../filedir'

25Path Traversal: '/../filedir'

26Path Traversal: '/dir/../filename'

27Path Traversal: 'dir/../../filename'

28Path Traversal: '..\filedir'

29Path Traversal: '\..\filename'

30Path Traversal: '\dir\..\filename'

31Path Traversal: 'dir\..\..\filename'

32Path Traversal: '...' (Triple Dot)

33Path Traversal: '....' (Multiple Dot)

34Path Traversal: '....//'

35Path Traversal: '.../...//'

36Absolute Path Traversal

37Path Traversal: '/absolute/pathname/here'

38Path Traversal: '\absolute\pathname\here'

39Path Traversal: 'C:dirname'

40Path Traversal: '\\UNC\share\name\' (Windows UNC Share)

41Improper Resolution of Path Equivalence

42Path Equivalence: 'filename.' (Trailing Dot)

43Path Equivalence: 'filename....' (Multiple Trailing Dot)

44Path Equivalence: 'file.name' (Internal Dot)

45Path Equivalence: 'file...name' (Multiple Internal Dot)

46Path Equivalence: 'filename ' (Trailing Space)

47Path Equivalence: ' filename' (Leading Space)

48Path Equivalence: 'file name' (Internal Whitespace)

49Path Equivalence: 'filename/' (Trailing Slash)

50Path Equivalence: '//multiple/leading/slash'

51Path Equivalence: '/multiple//internal/slash'

52Path Equivalence: '/multiple/trailing/slash//'

53Path Equivalence: '\multiple\\internal\backslash'

54Path Equivalence: 'filedir\' (Trailing Backslash)

55Path Equivalence: '/./' (Single Dot Directory)

56Path Equivalence: 'filedir*' (Wildcard)

57Path Equivalence: 'fakedir/../realdir/filename'

58Path Equivalence: Windows 8.3 Filename

59Improper Link Resolution Before File Access ('Link Following')

60UNIX Path Link Problems

61UNIX Symbolic Link (Symlink) Following

62UNIX Hard Link

63Windows Path Link Problems

64Windows Shortcut Following (.LNK)

65Windows Hard Link

66Improper Handling of File Names that Identify Virtual Resources

67Improper Handling of Windows Device Names

68Windows Virtual File Problems

69Improper Handling of Windows ::DATA Alternate Data Stream

70Mac Virtual File Problems

71Apple '.DS_Store'

72Improper Handling of Apple HFS+ Alternate Data Stream Path

73External Control of File Name or Path

74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

75Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

76Improper Neutralization of Equivalent Special Elements

77Improper Neutralization of Special Elements used in a Command ('Command Injection')

78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

81Improper Neutralization of Script in an Error Message Web Page

82Improper Neutralization of Script in Attributes of IMG Tags in a Web Page

83Improper Neutralization of Script in Attributes in a Web Page

84Improper Neutralization of Encoded URI Schemes in a Web Page

85Doubled Character XSS Manipulations

86Improper Neutralization of Invalid Characters in Identifiers in Web Pages

87Improper Neutralization of Alternate XSS Syntax

88Argument Injection or Modification

89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

90Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')

91XML Injection (aka Blind XPath Injection)

92DEPRECATED: Improper Sanitization of Custom Special Characters

93Improper Neutralization of CRLF Sequences ('CRLF Injection')

94Improper Control of Generation of Code ('Code Injection')

95Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

96Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')

97Improper Neutralization of Server-Side Includes (SSI) Within a Web Page

98Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

99Improper Control of Resource Identifiers ('Resource Injection')

100Technology-Specific Input Validation Problems

101Struts Validation Problems

102Struts: Duplicate Validation Forms

103Struts: Incomplete validate() Method Definition

104Struts: Form Bean Does Not Extend Validation Class

105Struts: Form Field Without Validator

106Struts: Plug-in Framework not in Use

107Struts: Unused Validation Form

108Struts: Unvalidated Action Form

109Struts: Validator Turned Off

110Struts: Validator Without Form Field

111Direct Use of Unsafe JNI

112Missing XML Validation

113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')

114Process Control

115Misinterpretation of Input

116Improper Encoding or Escaping of Output

117Improper Output Neutralization for Logs

118Incorrect Access of Indexable Resource ('Range Error')

119Improper Restriction of Operations within the Bounds of a Memory Buffer

120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

121Stack-based Buffer Overflow

122Heap-based Buffer Overflow

123Write-what-where Condition

124Buffer Underwrite ('Buffer Underflow')

125Out-of-bounds Read

126Buffer Over-read

127Buffer Under-read

128Wrap-around Error

129Improper Validation of Array Index

130Improper Handling of Length Parameter Inconsistency

131Incorrect Calculation of Buffer Size

132DEPRECATED (Duplicate): Miscalculated Null Termination

133String Errors

134Use of Externally-Controlled Format String

135Incorrect Calculation of Multi-Byte String Length

136Type Errors

137Representation Errors

138Improper Neutralization of Special Elements

139DEPRECATED: General Special Element Problems

140Improper Neutralization of Delimiters

141Improper Neutralization of Parameter/Argument Delimiters

142Improper Neutralization of Value Delimiters

143Improper Neutralization of Record Delimiters

144Improper Neutralization of Line Delimiters

145Improper Neutralization of Section Delimiters

146Improper Neutralization of Expression/Command Delimiters

147Improper Neutralization of Input Terminators

148Improper Neutralization of Input Leaders

149Improper Neutralization of Quoting Syntax

150Improper Neutralization of Escape, Meta, or Control Sequences

151Improper Neutralization of Comment Delimiters

152Improper Neutralization of Macro Symbols

153Improper Neutralization of Substitution Characters

154Improper Neutralization of Variable Name Delimiters

155Improper Neutralization of Wildcards or Matching Symbols

156Improper Neutralization of Whitespace

157Failure to Sanitize Paired Delimiters

158Improper Neutralization of Null Byte or NUL Character

159Failure to Sanitize Special Element

160Improper Neutralization of Leading Special Elements

161Improper Neutralization of Multiple Leading Special Elements

162Improper Neutralization of Trailing Special Elements

163Improper Neutralization of Multiple Trailing Special Elements

164Improper Neutralization of Internal Special Elements

165Improper Neutralization of Multiple Internal Special Elements

166Improper Handling of Missing Special Element

167Improper Handling of Additional Special Element

168Improper Handling of Inconsistent Special Elements

169Technology-Specific Special Elements

170Improper Null Termination

171Cleansing, Canonicalization, and Comparison Errors

172Encoding Error

173Improper Handling of Alternate Encoding

174Double Decoding of the Same Data

175Improper Handling of Mixed Encoding

176Improper Handling of Unicode Encoding

177Improper Handling of URL Encoding (Hex Encoding)

178Improper Handling of Case Sensitivity

179Incorrect Behavior Order: Early Validation

180Incorrect Behavior Order: Validate Before Canonicalize

181Incorrect Behavior Order: Validate Before Filter

182Collapse of Data into Unsafe Value

183Permissive Whitelist

184Incomplete Blacklist

185Incorrect Regular Expression

186Overly Restrictive Regular Expression

187Partial Comparison

188Reliance on Data/Memory Layout

189Numeric Errors

190Integer Overflow or Wraparound

191Integer Underflow (Wrap or Wraparound)

192Integer Coercion Error

193Off-by-one Error

194Unexpected Sign Extension

195Signed to Unsigned Conversion Error

196Unsigned to Signed Conversion Error

197Numeric Truncation Error

198Use of Incorrect Byte Ordering

199Information Management Errors

200Information Exposure

201Information Exposure Through Sent Data

202Exposure of Sensitive Data Through Data Queries

203Information Exposure Through Discrepancy

204Response Discrepancy Information Exposure

205Information Exposure Through Behavioral Discrepancy

206Information Exposure of Internal State Through Behavioral Inconsistency

207Information Exposure Through an External Behavioral Inconsistency

208Information Exposure Through Timing Discrepancy

209Information Exposure Through an Error Message

210Information Exposure Through Self-generated Error Message

211Information Exposure Through Externally-generated Error Message

212Improper Cross-boundary Removal of Sensitive Data

213Intentional Information Exposure

214Information Exposure Through Process Environment

215Information Exposure Through Debug Information

216Containment Errors (Container Errors)

217DEPRECATED: Failure to Protect Stored Data from Modification

218DEPRECATED (Duplicate): Failure to provide confidentiality for stored data

219Sensitive Data Under Web Root

220Sensitive Data Under FTP Root

221Information Loss or Omission

222Truncation of Security-relevant Information

223Omission of Security-relevant Information

224Obscured Security-relevant Information by Alternate Name

225DEPRECATED (Duplicate): General Information Management Problems

226Sensitive Information Uncleared Before Release

227Improper Fulfillment of API Contract ('API Abuse')

228Improper Handling of Syntactically Invalid Structure

229Improper Handling of Values

230Improper Handling of Missing Values

231Improper Handling of Extra Values

232Improper Handling of Undefined Values

233Improper Handling of Parameters

234Failure to Handle Missing Parameter

235Improper Handling of Extra Parameters

236Improper Handling of Undefined Parameters

237Improper Handling of Structural Elements

238Improper Handling of Incomplete Structural Elements

239Failure to Handle Incomplete Element

240Improper Handling of Inconsistent Structural Elements

241Improper Handling of Unexpected Data Type

242Use of Inherently Dangerous Function

243Creation of chroot Jail Without Changing Working Directory

244Improper Clearing of Heap Memory Before Release ('Heap Inspection')

245J2EE Bad Practices: Direct Management of Connections

246J2EE Bad Practices: Direct Use of Sockets

247DEPRECATED (Duplicate): Reliance on DNS Lookups in a Security Decision

248Uncaught Exception

249DEPRECATED: Often Misused: Path Manipulation

250Execution with Unnecessary Privileges

251Often Misused: String Management

252Unchecked Return Value

253Incorrect Check of Function Return Value

254Security Features

255Credentials Management

256Plaintext Storage of a Password

257Storing Passwords in a Recoverable Format

258Empty Password in Configuration File

259Use of Hard-coded Password

260Password in Configuration File

261Weak Cryptography for Passwords

262Not Using Password Aging

263Password Aging with Long Expiration

264Permissions, Privileges, and Access Controls

265Privilege / Sandbox Issues

266Incorrect Privilege Assignment

267Privilege Defined With Unsafe Actions

268Privilege Chaining

269Improper Privilege Management

270Privilege Context Switching Error

271Privilege Dropping / Lowering Errors

272Least Privilege Violation

273Improper Check for Dropped Privileges

274Improper Handling of Insufficient Privileges

275Permission Issues

276Incorrect Default Permissions

277Insecure Inherited Permissions

278Insecure Preserved Inherited Permissions

279Incorrect Execution-Assigned Permissions

280Improper Handling of Insufficient Permissions or Privileges

281Improper Preservation of Permissions

282Improper Ownership Management

283Unverified Ownership

284Improper Access Control

285Improper Authorization

286Incorrect User Management

287Improper Authentication

288Authentication Bypass Using an Alternate Path or Channel

289Authentication Bypass by Alternate Name

290Authentication Bypass by Spoofing

291Reliance on IP Address for Authentication

292DEPRECATED (Duplicate): Trusting Self-reported DNS Name

293Using Referer Field for Authentication

294Authentication Bypass by Capture-replay

295Improper Certificate Validation

296Improper Following of a Certificate's Chain of Trust

297Improper Validation of Certificate with Host Mismatch

298Improper Validation of Certificate Expiration

299Improper Check for Certificate Revocation

300Channel Accessible by Non-Endpoint ('Man-in-the-Middle')

301Reflection Attack in an Authentication Protocol

302Authentication Bypass by Assumed-Immutable Data

303Incorrect Implementation of Authentication Algorithm

304Missing Critical Step in Authentication

305Authentication Bypass by Primary Weakness

306Missing Authentication for Critical Function

307Improper Restriction of Excessive Authentication Attempts

308Use of Single-factor Authentication

309Use of Password System for Primary Authentication

310Cryptographic Issues

311Missing Encryption of Sensitive Data

312Cleartext Storage of Sensitive Information

313Cleartext Storage in a File or on Disk

314Cleartext Storage in the Registry

315Cleartext Storage of Sensitive Information in a Cookie

316Cleartext Storage of Sensitive Information in Memory

317Cleartext Storage of Sensitive Information in GUI

318Cleartext Storage of Sensitive Information in Executable

319Cleartext Transmission of Sensitive Information

320Key Management Errors

321Use of Hard-coded Cryptographic Key

322Key Exchange without Entity Authentication

323Reusing a Nonce, Key Pair in Encryption

324Use of a Key Past its Expiration Date

325Missing Required Cryptographic Step

326Inadequate Encryption Strength

327Use of a Broken or Risky Cryptographic Algorithm

328Reversible One-Way Hash

329Not Using a Random IV with CBC Mode

330Use of Insufficiently Random Values

331Insufficient Entropy

332Insufficient Entropy in PRNG

333Improper Handling of Insufficient Entropy in TRNG

334Small Space of Random Values

335PRNG Seed Error

336Same Seed in PRNG

337Predictable Seed in PRNG

338Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

339Small Seed Space in PRNG

340Predictability Problems

341Predictable from Observable State

342Predictable Exact Value from Previous Values

343Predictable Value Range from Previous Values

344Use of Invariant Value in Dynamically Changing Context

345Insufficient Verification of Data Authenticity

346Origin Validation Error

347Improper Verification of Cryptographic Signature

348Use of Less Trusted Source

349Acceptance of Extraneous Untrusted Data With Trusted Data

350Reliance on Reverse DNS Resolution for a Security-Critical Action

351Insufficient Type Distinction

352Cross-Site Request Forgery (CSRF)

353Missing Support for Integrity Check

354Improper Validation of Integrity Check Value

355User Interface Security Issues

356Product UI does not Warn User of Unsafe Actions

357Insufficient UI Warning of Dangerous Operations

358Improperly Implemented Security Check for Standard

359Exposure of Private Information ('Privacy Violation')

360Trust of System Event Data

361Time and State

362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

363Race Condition Enabling Link Following

364Signal Handler Race Condition

365Race Condition in Switch

366Race Condition within a Thread

367Time-of-check Time-of-use (TOCTOU) Race Condition

368Context Switching Race Condition

369Divide By Zero

370Missing Check for Certificate Revocation after Initial Check

371State Issues

372Incomplete Internal State Distinction

373DEPRECATED: State Synchronization Error

374Passing Mutable Objects to an Untrusted Method

375Returning a Mutable Object to an Untrusted Caller

376Temporary File Issues

377Insecure Temporary File

378Creation of Temporary File With Insecure Permissions

379Creation of Temporary File in Directory with Incorrect Permissions

380Technology-Specific Time and State Issues

381J2EE Time and State Issues

382J2EE Bad Practices: Use of System.exit()

383J2EE Bad Practices: Direct Use of Threads

384Session Fixation

385Covert Timing Channel

386Symbolic Name not Mapping to Correct Object

387Signal Errors

388Error Handling

389Error Conditions, Return Values, Status Codes

390Detection of Error Condition Without Action

391Unchecked Error Condition

392Missing Report of Error Condition

393Return of Wrong Status Code

394Unexpected Status Code or Return Value

395Use of NullPointerException Catch to Detect NULL Pointer Dereference

396Declaration of Catch for Generic Exception

397Declaration of Throws for Generic Exception

398Indicator of Poor Code Quality

399Resource Management Errors

400Uncontrolled Resource Consumption ('Resource Exhaustion')

401Improper Release of Memory Before Removing Last Reference ('Memory Leak')

402Transmission of Private Resources into a New Sphere ('Resource Leak')

403Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')

404Improper Resource Shutdown or Release

405Asymmetric Resource Consumption (Amplification)

406Insufficient Control of Network Message Volume (Network Amplification)

407Algorithmic Complexity

408Incorrect Behavior Order: Early Amplification

409Improper Handling of Highly Compressed Data (Data Amplification)

410Insufficient Resource Pool

411Resource Locking Problems

412Unrestricted Externally Accessible Lock

413Improper Resource Locking

414Missing Lock Check

415Double Free

416Use After Free

417Channel and Path Errors

418Channel Errors

419Unprotected Primary Channel

420Unprotected Alternate Channel

421Race Condition During Access to Alternate Channel

422Unprotected Windows Messaging Channel ('Shatter')

423DEPRECATED (Duplicate): Proxied Trusted Channel

424Improper Protection of Alternate Path

425Direct Request ('Forced Browsing')

426Untrusted Search Path

427Uncontrolled Search Path Element

428Unquoted Search Path or Element

429Handler Errors

430Deployment of Wrong Handler

431Missing Handler

432Dangerous Signal Handler not Disabled During Sensitive Operations

433Unparsed Raw Web Content Delivery

434Unrestricted Upload of File with Dangerous Type

435Interaction Error

436Interpretation Conflict

437Incomplete Model of Endpoint Features

438Behavioral Problems

439Behavioral Change in New Version or Environment

440Expected Behavior Violation

441Unintended Proxy or Intermediary ('Confused Deputy')

442Web Problems

443DEPRECATED (Duplicate): HTTP response splitting

444Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')

445DEPRECATED: User Interface Errors

446UI Discrepancy for Security Feature

447Unimplemented or Unsupported Feature in UI

448Obsolete Feature in UI

449The UI Performs the Wrong Action

450Multiple Interpretations of UI Input

451User Interface (UI) Misrepresentation of Critical Information

452Initialization and Cleanup Errors

453Insecure Default Variable Initialization

454External Initialization of Trusted Variables or Data Stores

455Non-exit on Failed Initialization

456Missing Initialization of a Variable

457Use of Uninitialized Variable

458DEPRECATED: Incorrect Initialization

459Incomplete Cleanup

460Improper Cleanup on Thrown Exception

461Data Structure Issues

462Duplicate Key in Associative List (Alist)

463Deletion of Data Structure Sentinel

464Addition of Data Structure Sentinel

465Pointer Issues

466Return of Pointer Value Outside of Expected Range

467Use of sizeof() on a Pointer Type

468Incorrect Pointer Scaling

469Use of Pointer Subtraction to Determine Size

470Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

471Modification of Assumed-Immutable Data (MAID)

472External Control of Assumed-Immutable Web Parameter

473PHP External Variable Modification

474Use of Function with Inconsistent Implementations

475Undefined Behavior for Input to API

476NULL Pointer Dereference

477Use of Obsolete Functions

478Missing Default Case in Switch Statement

479Signal Handler Use of a Non-reentrant Function

480Use of Incorrect Operator

481Assigning instead of Comparing

482Comparing instead of Assigning

483Incorrect Block Delimitation

484Omitted Break Statement in Switch

485Insufficient Encapsulation

486Comparison of Classes by Name

487Reliance on Package-level Scope

488Exposure of Data Element to Wrong Session

489Leftover Debug Code

490Mobile Code Issues

491Public cloneable() Method Without Final ('Object Hijack')

492Use of Inner Class Containing Sensitive Data

493Critical Public Variable Without Final Modifier

494Download of Code Without Integrity Check

495Private Array-Typed Field Returned From A Public Method

496Public Data Assigned to Private Array-Typed Field

497Exposure of System Data to an Unauthorized Control Sphere

498Cloneable Class Containing Sensitive Information

499Serializable Class Containing Sensitive Data

500Public Static Field Not Marked Final

501Trust Boundary Violation

502Deserialization of Untrusted Data

503Byte/Object Code

504Motivation/Intent

505Intentionally Introduced Weakness

506Embedded Malicious Code

507Trojan Horse

508Non-Replicating Malicious Code

509Replicating Malicious Code (Virus or Worm)

510Trapdoor

511Logic/Time Bomb

512Spyware

513Intentionally Introduced Nonmalicious Weakness

514Covert Channel

515Covert Storage Channel

516DEPRECATED (Duplicate): Covert Timing Channel

517Other Intentional, Nonmalicious Weakness

518Inadvertently Introduced Weakness

519.NET Environment Issues

520.NET Misconfiguration: Use of Impersonation

521Weak Password Requirements

522Insufficiently Protected Credentials

523Unprotected Transport of Credentials

524Information Exposure Through Caching

525Information Exposure Through Browser Caching

526Information Exposure Through Environmental Variables

527Exposure of CVS Repository to an Unauthorized Control Sphere

528Exposure of Core Dump File to an Unauthorized Control Sphere

529Exposure of Access Control List Files to an Unauthorized Control Sphere

530Exposure of Backup File to an Unauthorized Control Sphere

531Information Exposure Through Test Code

532Information Exposure Through Log Files

533Information Exposure Through Server Log Files

534Information Exposure Through Debug Log Files

535Information Exposure Through Shell Error Message

536Information Exposure Through Servlet Runtime Error Message

537Information Exposure Through Java Runtime Error Message

538File and Directory Information Exposure

539Information Exposure Through Persistent Cookies

540Information Exposure Through Source Code

541Information Exposure Through Include Source Code

542Information Exposure Through Cleanup Log Files

543Use of Singleton Pattern Without Synchronization in a Multithreaded Context

544Missing Standardized Error Handling Mechanism

545DEPRECATED: Use of Dynamic Class Loading

546Suspicious Comment

547Use of Hard-coded, Security-relevant Constants

548Information Exposure Through Directory Listing

549Missing Password Field Masking

550Information Exposure Through Server Error Message

551Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

552Files or Directories Accessible to External Parties

553Command Shell in Externally Accessible Directory

554ASP.NET Misconfiguration: Not Using Input Validation Framework

555J2EE Misconfiguration: Plaintext Password in Configuration File

556ASP.NET Misconfiguration: Use of Identity Impersonation

557Concurrency Issues

558Use of getlogin() in Multithreaded Application

559Often Misused: Arguments and Parameters

560Use of umask() with chmod-style Argument

561Dead Code

562Return of Stack Variable Address

563Assignment to Variable without Use ('Unused Variable')

564SQL Injection: Hibernate

565Reliance on Cookies without Validation and Integrity Checking

566Authorization Bypass Through User-Controlled SQL Primary Key

567Unsynchronized Access to Shared Data in a Multithreaded Context

568finalize() Method Without super.finalize()

569Expression Issues

570Expression is Always False

571Expression is Always True

572Call to Thread run() instead of start()

573Improper Following of Specification by Caller

574EJB Bad Practices: Use of Synchronization Primitives

575EJB Bad Practices: Use of AWT Swing

576EJB Bad Practices: Use of Java I/O

577EJB Bad Practices: Use of Sockets

578EJB Bad Practices: Use of Class Loader

579J2EE Bad Practices: Non-serializable Object Stored in Session

580clone() Method Without super.clone()

581Object Model Violation: Just One of Equals and Hashcode Defined

582Array Declared Public, Final, and Static

583finalize() Method Declared Public

584Return Inside Finally Block

585Empty Synchronized Block

586Explicit Call to Finalize()

587Assignment of a Fixed Address to a Pointer

588Attempt to Access Child of a Non-structure Pointer

589Call to Non-ubiquitous API

590Free of Memory not on the Heap

591Sensitive Data Storage in Improperly Locked Memory

592DEPRECATED: Authentication Bypass Issues

593Authentication Bypass: OpenSSL CTX Object Modified after SSL Objects are Created

594J2EE Framework: Saving Unserializable Objects to Disk

595Comparison of Object References Instead of Object Contents

596Incorrect Semantic Object Comparison

597Use of Wrong Operator in String Comparison

598Information Exposure Through Query Strings in GET Request

599Missing Validation of OpenSSL Certificate

600Uncaught Exception in Servlet

601URL Redirection to Untrusted Site ('Open Redirect')

602Client-Side Enforcement of Server-Side Security

603Use of Client-Side Authentication

604Deprecated Entries

605Multiple Binds to the Same Port

606Unchecked Input for Loop Condition

607Public Static Final Field References Mutable Object

608Struts: Non-private Field in ActionForm Class

609Double-Checked Locking

610Externally Controlled Reference to a Resource in Another Sphere

611Improper Restriction of XML External Entity Reference ('XXE')

612Information Exposure Through Indexing of Private Data

613Insufficient Session Expiration

614Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

615Information Exposure Through Comments

616Incomplete Identification of Uploaded File Variables (PHP)

617Reachable Assertion

618Exposed Unsafe ActiveX Method

619Dangling Database Cursor ('Cursor Injection')

620Unverified Password Change

621Variable Extraction Error

622Improper Validation of Function Hook Arguments

623Unsafe ActiveX Control Marked Safe For Scripting

624Executable Regular Expression Error

625Permissive Regular Expression

626Null Byte Interaction Error (Poison Null Byte)

627Dynamic Variable Evaluation

628Function Call with Incorrectly Specified Arguments

629Weaknesses in OWASP Top Ten (2007)

630Weaknesses Examined by SAMATE

631Resource-specific Weaknesses

632Weaknesses that Affect Files or Directories

633Weaknesses that Affect Memory

634Weaknesses that Affect System Processes

635Weaknesses Used by NVD

636Not Failing Securely ('Failing Open')

637Unnecessary Complexity in Protection Mechanism (Not Using 'Economy of Mechanism')

638Not Using Complete Mediation

639Authorization Bypass Through User-Controlled Key

640Weak Password Recovery Mechanism for Forgotten Password

641Improper Restriction of Names for Files and Other Resources

642External Control of Critical State Data

643Improper Neutralization of Data within XPath Expressions ('XPath Injection')

644Improper Neutralization of HTTP Headers for Scripting Syntax

645Overly Restrictive Account Lockout Mechanism

646Reliance on File Name or Extension of Externally-Supplied File

647Use of Non-Canonical URL Paths for Authorization Decisions

648Incorrect Use of Privileged APIs

649Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking

650Trusting HTTP Permission Methods on the Server Side

651Information Exposure Through WSDL File

652Improper Neutralization of Data within XQuery Expressions ('XQuery Injection')

653Insufficient Compartmentalization

654Reliance on a Single Factor in a Security Decision

655Insufficient Psychological Acceptability

656Reliance on Security Through Obscurity

657Violation of Secure Design Principles

658Weaknesses in Software Written in C

659Weaknesses in Software Written in C++

660Weaknesses in Software Written in Java

661Weaknesses in Software Written in PHP

662Improper Synchronization

663Use of a Non-reentrant Function in a Concurrent Context

664Improper Control of a Resource Through its Lifetime

665Improper Initialization

666Operation on Resource in Wrong Phase of Lifetime

667Improper Locking

668Exposure of Resource to Wrong Sphere

669Incorrect Resource Transfer Between Spheres

670Always-Incorrect Control Flow Implementation

671Lack of Administrator Control over Security

672Operation on a Resource after Expiration or Release

673External Influence of Sphere Definition

674Uncontrolled Recursion

675Duplicate Operations on Resource

676Use of Potentially Dangerous Function

677Weakness Base Elements

678Composites

679Chain Elements

680Integer Overflow to Buffer Overflow

681Incorrect Conversion between Numeric Types

682Incorrect Calculation

683Function Call With Incorrect Order of Arguments

684Incorrect Provision of Specified Functionality

685Function Call With Incorrect Number of Arguments

686Function Call With Incorrect Argument Type

687Function Call With Incorrectly Specified Argument Value

688Function Call With Incorrect Variable or Reference as Argument

689Permission Race Condition During Resource Copy

690Unchecked Return Value to NULL Pointer Dereference

691Insufficient Control Flow Management

692Incomplete Blacklist to Cross-Site Scripting

693Protection Mechanism Failure

694Use of Multiple Resources with Duplicate Identifier

695Use of Low-Level Functionality

696Incorrect Behavior Order

697Insufficient Comparison

698Execution After Redirect (EAR)

699Development Concepts

700Seven Pernicious Kingdoms

701Weaknesses Introduced During Design

702Weaknesses Introduced During Implementation

703Improper Check or Handling of Exceptional Conditions

704Incorrect Type Conversion or Cast

705Incorrect Control Flow Scoping

706Use of Incorrectly-Resolved Name or Reference

707Improper Enforcement of Message or Data Structure

708Incorrect Ownership Assignment

709Named Chains

710Coding Standards Violation

711Weaknesses in OWASP Top Ten (2004)

712OWASP Top Ten 2007 Category A1 - Cross Site Scripting (XSS)

713OWASP Top Ten 2007 Category A2 - Injection Flaws

714OWASP Top Ten 2007 Category A3 - Malicious File Execution

715OWASP Top Ten 2007 Category A4 - Insecure Direct Object Reference

716OWASP Top Ten 2007 Category A5 - Cross Site Request Forgery (CSRF)

717OWASP Top Ten 2007 Category A6 - Information Leakage and Improper Error Handling

718OWASP Top Ten 2007 Category A7 - Broken Authentication and Session Management

719OWASP Top Ten 2007 Category A8 - Insecure Cryptographic Storage

720OWASP Top Ten 2007 Category A9 - Insecure Communications

721OWASP Top Ten 2007 Category A10 - Failure to Restrict URL Access

722OWASP Top Ten 2004 Category A1 - Unvalidated Input

723OWASP Top Ten 2004 Category A2 - Broken Access Control

724OWASP Top Ten 2004 Category A3 - Broken Authentication and Session Management

725OWASP Top Ten 2004 Category A4 - Cross-Site Scripting (XSS) Flaws

726OWASP Top Ten 2004 Category A5 - Buffer Overflows

727OWASP Top Ten 2004 Category A6 - Injection Flaws

728OWASP Top Ten 2004 Category A7 - Improper Error Handling

729OWASP Top Ten 2004 Category A8 - Insecure Storage

730OWASP Top Ten 2004 Category A9 - Denial of Service

731OWASP Top Ten 2004 Category A10 - Insecure Configuration Management

732Incorrect Permission Assignment for Critical Resource

733Compiler Optimization Removal or Modification of Security-critical Code

734Weaknesses Addressed by the CERT C Secure Coding Standard

735CERT C Secure Coding Section 01 - Preprocessor (PRE)

736CERT C Secure Coding Section 02 - Declarations and Initialization (DCL)

737CERT C Secure Coding Section 03 - Expressions (EXP)

738CERT C Secure Coding Section 04 - Integers (INT)

739CERT C Secure Coding Section 05 - Floating Point (FLP)

740CERT C Secure Coding Section 06 - Arrays (ARR)

741CERT C Secure Coding Section 07 - Characters and Strings (STR)

742CERT C Secure Coding Section 08 - Memory Management (MEM)

743CERT C Secure Coding Section 09 - Input Output (FIO)

744CERT C Secure Coding Section 10 - Environment (ENV)

745CERT C Secure Coding Section 11 - Signals (SIG)

746CERT C Secure Coding Section 12 - Error Handling (ERR)

747CERT C Secure Coding Section 49 - Miscellaneous (MSC)

748CERT C Secure Coding Section 50 - POSIX (POS)

749Exposed Dangerous Method or Function

750Weaknesses in the 2009 CWE/SANS Top 25 Most Dangerous Programming Errors

7512009 Top 25 - Insecure Interaction Between Components

7522009 Top 25 - Risky Resource Management

7532009 Top 25 - Porous Defenses

754Improper Check for Unusual or Exceptional Conditions

755Improper Handling of Exceptional Conditions

756Missing Custom Error Page

757Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')

758Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

759Use of a One-Way Hash without a Salt

760Use of a One-Way Hash with a Predictable Salt

761Free of Pointer not at Start of Buffer

762Mismatched Memory Management Routines

763Release of Invalid Pointer or Reference

764Multiple Locks of a Critical Resource

765Multiple Unlocks of a Critical Resource

766Critical Variable Declared Public

767Access to Critical Private Variable via Public Method

768Incorrect Short Circuit Evaluation

769File Descriptor Exhaustion

770Allocation of Resources Without Limits or Throttling

771Missing Reference to Active Allocated Resource

772Missing Release of Resource after Effective Lifetime

773Missing Reference to Active File Descriptor or Handle

774Allocation of File Descriptors or Handles Without Limits or Throttling

775Missing Release of File Descriptor or Handle after Effective Lifetime

776Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

777Regular Expression without Anchors

778Insufficient Logging

779Logging of Excessive Data

780Use of RSA Algorithm without OAEP

781Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code

782Exposed IOCTL with Insufficient Access Control

783Operator Precedence Logic Error

784Reliance on Cookies without Validation and Integrity Checking in a Security Decision

785Use of Path Manipulation Function without Maximum-sized Buffer

786Access of Memory Location Before Start of Buffer

787Out-of-bounds Write

788Access of Memory Location After End of Buffer

789Uncontrolled Memory Allocation

790Improper Filtering of Special Elements

791Incomplete Filtering of Special Elements

792Incomplete Filtering of One or More Instances of Special Elements

793Only Filtering One Instance of a Special Element

794Incomplete Filtering of Multiple Instances of Special Elements

795Only Filtering Special Elements at a Specified Location

796Only Filtering Special Elements Relative to a Marker

797Only Filtering Special Elements at an Absolute Position

798Use of Hard-coded Credentials

799Improper Control of Interaction Frequency

800Weaknesses in the 2010 CWE/SANS Top 25 Most Dangerous Programming Errors

8012010 Top 25 - Insecure Interaction Between Components

8022010 Top 25 - Risky Resource Management

8032010 Top 25 - Porous Defenses

804Guessable CAPTCHA

805Buffer Access with Incorrect Length Value

806Buffer Access Using Size of Source Buffer

807Reliance on Untrusted Inputs in a Security Decision

8082010 Top 25 - Weaknesses On the Cusp

809Weaknesses in OWASP Top Ten (2010)

810OWASP Top Ten 2010 Category A1 - Injection

811OWASP Top Ten 2010 Category A2 - Cross-Site Scripting (XSS)

812OWASP Top Ten 2010 Category A3 - Broken Authentication and Session Management

813OWASP Top Ten 2010 Category A4 - Insecure Direct Object References

814OWASP Top Ten 2010 Category A5 - Cross-Site Request Forgery(CSRF)

815OWASP Top Ten 2010 Category A6 - Security Misconfiguration

816OWASP Top Ten 2010 Category A7 - Insecure Cryptographic Storage

817OWASP Top Ten 2010 Category A8 - Failure to Restrict URL Access

818OWASP Top Ten 2010 Category A9 - Insufficient Transport Layer Protection

819OWASP Top Ten 2010 Category A10 - Unvalidated Redirects and Forwards

820Missing Synchronization

821Incorrect Synchronization

822Untrusted Pointer Dereference

823Use of Out-of-range Pointer Offset

824Access of Uninitialized Pointer

825Expired Pointer Dereference

826Premature Release of Resource During Expected Lifetime

827Improper Control of Document Type Definition

828Signal Handler with Functionality that is not Asynchronous-Safe

829Inclusion of Functionality from Untrusted Control Sphere

830Inclusion of Web Functionality from an Untrusted Source

831Signal Handler Function Associated with Multiple Signals

832Unlock of a Resource that is not Locked

833Deadlock

834Excessive Iteration

835Loop with Unreachable Exit Condition ('Infinite Loop')

836Use of Password Hash Instead of Password for Authentication

837Improper Enforcement of a Single, Unique Action

838Inappropriate Encoding for Output Context

839Numeric Range Comparison Without Minimum Check

840Business Logic Errors

841Improper Enforcement of Behavioral Workflow

842Placement of User into Incorrect Group

843Access of Resource Using Incompatible Type ('Type Confusion')

844Weaknesses Addressed by the CERT Java Secure Coding Standard

845CERT Java Secure Coding Section 00 - Input Validation and Data Sanitization (IDS)

846CERT Java Secure Coding Section 01 - Declarations and Initialization (DCL)

847CERT Java Secure Coding Section 02 - Expressions (EXP)

848CERT Java Secure Coding Section 03 - Numeric Types and Operations (NUM)

849CERT Java Secure Coding Section 04 - Object Orientation (OBJ)

850CERT Java Secure Coding Section 05 - Methods (MET)

851CERT Java Secure Coding Section 06 - Exceptional Behavior (ERR)

852CERT Java Secure Coding Section 07 - Visibility and Atomicity (VNA)

853CERT Java Secure Coding Section 08 - Locking (LCK)

854CERT Java Secure Coding Section 09 - Thread APIs (THI)

855CERT Java Secure Coding Section 10 - Thread Pools (TPS)

856CERT Java Secure Coding Section 11 - Thread-Safety Miscellaneous (TSM)

857CERT Java Secure Coding Section 12 - Input Output (FIO)

858CERT Java Secure Coding Section 13 - Serialization (SER)

859CERT Java Secure Coding Section 14 - Platform Security (SEC)

860CERT Java Secure Coding Section 15 - Runtime Environment (ENV)

861CERT Java Secure Coding Section 49 - Miscellaneous (MSC)

862Missing Authorization

863Incorrect Authorization

8642011 Top 25 - Insecure Interaction Between Components

8652011 Top 25 - Risky Resource Management

8662011 Top 25 - Porous Defenses

8672011 Top 25 - Weaknesses On the Cusp

868Weaknesses Addressed by the CERT C++ Secure Coding Standard

869CERT C++ Secure Coding Section 01 - Preprocessor (PRE)

870CERT C++ Secure Coding Section 02 - Declarations and Initialization (DCL)

871CERT C++ Secure Coding Section 03 - Expressions (EXP)

872CERT C++ Secure Coding Section 04 - Integers (INT)

873CERT C++ Secure Coding Section 05 - Floating Point Arithmetic (FLP)

874CERT C++ Secure Coding Section 06 - Arrays and the STL (ARR)

875CERT C++ Secure Coding Section 07 - Characters and Strings (STR)

876CERT C++ Secure Coding Section 08 - Memory Management (MEM)

877CERT C++ Secure Coding Section 09 - Input Output (FIO)

878CERT C++ Secure Coding Section 10 - Environment (ENV)

879CERT C++ Secure Coding Section 11 - Signals (SIG)

880CERT C++ Secure Coding Section 12 - Exceptions and Error Handling (ERR)

881CERT C++ Secure Coding Section 13 - Object Oriented Programming (OOP)

882CERT C++ Secure Coding Section 14 - Concurrency (CON)

883CERT C++ Secure Coding Section 49 - Miscellaneous (MSC)

884CWE Cross-section

885SFP Primary Cluster: Risky Values

886SFP Primary Cluster: Unused entities

887SFP Primary Cluster: API

888Software Fault Pattern (SFP) Clusters

889SFP Primary Cluster: Exception Management

890SFP Primary Cluster: Memory Access

891SFP Primary Cluster: Memory Management

892SFP Primary Cluster: Resource Management

893SFP Primary Cluster: Path Resolution

894SFP Primary Cluster: Synchronization

895SFP Primary Cluster: Information Leak

896SFP Primary Cluster: Tainted Input

897SFP Primary Cluster: Entry Points

898SFP Primary Cluster: Authentication

899SFP Primary Cluster: Access Control

900Weaknesses in the 2011 CWE/SANS Top 25 Most Dangerous Software Errors

901SFP Primary Cluster: Privilege

902SFP Primary Cluster: Channel

903SFP Primary Cluster: Cryptography

904SFP Primary Cluster: Malware

905SFP Primary Cluster: Predictability

906SFP Primary Cluster: UI

907SFP Primary Cluster: Other

908Use of Uninitialized Resource

909Missing Initialization of Resource

910Use of Expired File Descriptor

911Improper Update of Reference Count

912Hidden Functionality

913Improper Control of Dynamically-Managed Code Resources

914Improper Control of Dynamically-Identified Variables

915Improperly Controlled Modification of Dynamically-Determined Object Attributes

916Use of Password Hash With Insufficient Computational Effort

917Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

918Server-Side Request Forgery (SSRF)

919Weaknesses in Mobile Applications

920Improper Restriction of Power Consumption

921Storage of Sensitive Data in a Mechanism without Access Control

922Insecure Storage of Sensitive Information

923Improper Restriction of Communication Channel to Intended Endpoints

924Improper Enforcement of Message Integrity During Transmission in a Communication Channel

925Improper Verification of Intent by Broadcast Receiver

926Improper Export of Android Application Components

927Use of Implicit Intent for Sensitive Communication

928Weaknesses in OWASP Top Ten (2013)

929OWASP Top Ten 2013 Category A1 - Injection

930OWASP Top Ten 2013 Category A2 - Broken Authentication and Session Management

931OWASP Top Ten 2013 Category A3 - Cross-Site Scripting (XSS)

932OWASP Top Ten 2013 Category A4 - Insecure Direct Object References

933OWASP Top Ten 2013 Category A5 - Security Misconfiguration

934OWASP Top Ten 2013 Category A6 - Sensitive Data Exposure

935OWASP Top Ten 2013 Category A7 - Missing Function Level Access Control

936OWASP Top Ten 2013 Category A8 - Cross-Site Request Forgery (CSRF)

937OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

938OWASP Top Ten 2013 Category A10 - Unvalidated Redirects and Forwards

939Improper Authorization in Handler for Custom URL Scheme

940Improper Verification of Source of a Communication Channel

941Incorrectly Specified Destination in a Communication Channel

942Overly Permissive Cross-domain Whitelist

943Improper Neutralization of Special Elements in Data Query Logic

944SFP Secondary Cluster: Access Management

945SFP Secondary Cluster: Insecure Resource Access

946SFP Secondary Cluster: Insecure Resource Permissions

947SFP Secondary Cluster: Authentication Bypass

948SFP Secondary Cluster: Digital Certificate

949SFP Secondary Cluster: Faulty Endpoint Authentication

950SFP Secondary Cluster: Hardcoded Sensitive Data

951SFP Secondary Cluster: Insecure Authentication Policy

952SFP Secondary Cluster: Missing Authentication

953SFP Secondary Cluster: Missing Endpoint Authentication

954SFP Secondary Cluster: Multiple Binds to the Same Port

955SFP Secondary Cluster: Unrestricted Authentication

956SFP Secondary Cluster: Channel Attack

957SFP Secondary Cluster: Protocol Error

958SFP Secondary Cluster: Broken Cryptography

959SFP Secondary Cluster: Weak Cryptography

960SFP Secondary Cluster: Ambiguous Exception Type

961SFP Secondary Cluster: Incorrect Exception Behavior

962SFP Secondary Cluster: Unchecked Status Condition

963SFP Secondary Cluster: Exposed Data

964SFP Secondary Cluster: Exposure Temporary File

965SFP Secondary Cluster: Insecure Session Management

966SFP Secondary Cluster: Other Exposures

967SFP Secondary Cluster: State Disclosure

968SFP Secondary Cluster: Covert Channel

969SFP Secondary Cluster: Faulty Memory Release

970SFP Secondary Cluster: Faulty Buffer Access

971SFP Secondary Cluster: Faulty Pointer Use

972SFP Secondary Cluster: Faulty String Expansion

973SFP Secondary Cluster: Improper NULL Termination

974SFP Secondary Cluster: Incorrect Buffer Length Computation

975SFP Secondary Cluster: Architecture

976SFP Secondary Cluster: Compiler

977SFP Secondary Cluster: Design

978SFP Secondary Cluster: Implementation

979SFP Secondary Cluster: Failed Chroot Jail

980SFP Secondary Cluster: Link in Resource Name Resolution

981SFP Secondary Cluster: Path Traversal

982SFP Secondary Cluster: Failure to Release Resource

983SFP Secondary Cluster: Faulty Resource Use

984SFP Secondary Cluster: Life Cycle

985SFP Secondary Cluster: Unrestricted Consumption

986SFP Secondary Cluster: Missing Lock

987SFP Secondary Cluster: Multiple Locks/Unlocks

988SFP Secondary Cluster: Race Condition Window

989SFP Secondary Cluster: Unrestricted Lock

990SFP Secondary Cluster: Tainted Input to Command

991SFP Secondary Cluster: Tainted Input to Environment

992SFP Secondary Cluster: Faulty Input Transformation

993SFP Secondary Cluster: Incorrect Input Handling

994SFP Secondary Cluster: Tainted Input to Variable

995SFP Secondary Cluster: Feature

996SFP Secondary Cluster: Security

997SFP Secondary Cluster: Information Loss

998SFP Secondary Cluster: Glitch in Computation

999Weaknesses without Software Fault Patterns

1000Research Concepts

1001SFP Secondary Cluster: Use of an Improper API

1002SFP Secondary Cluster: Unexpected Entry Points

1003Weaknesses for Simplified Mapping of Published Vulnerabilities

1004Sensitive Cookie Without 'HttpOnly' Flag

1005Input Validation and Representation

Verify Message Integrity

CWE Matches

Filter

Match Counts