CWE-137 · Kategoria
Data Neutralization Issues
- Status
- Szkic
- Dodano
- 19 lipca 2006
- Ostatnia zmiana
- 29 czerwca 2023
Opis
Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.
Wpisy w tej grupie
- CWE-76 Improper Neutralization of Equivalent Special Elements
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- CWE-90 Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
- CWE-91 XML Injection (aka Blind XPath Injection)
- CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection')
- CWE-94 Improper Control of Generation of Code ('Code Injection')
- CWE-117 Improper Output Neutralization for Logs
- CWE-140 Improper Neutralization of Delimiters
- CWE-170 Improper Null Termination
- CWE-463 Deletion of Data Structure Sentinel
- CWE-464 Addition of Data Structure Sentinel
- CWE-641 Improper Restriction of Names for Files and Other Resources
- CWE-694 Use of Multiple Resources with Duplicate Identifier
- CWE-791 Incomplete Filtering of Special Elements
- CWE-838 Inappropriate Encoding for Output Context
- CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File
Wpis z katalogu CWE 4.20.