CWE-1387 · Widok
Weaknesses in the 2022 CWE Top 25 Most Dangerous Software Weaknesses
- Status
- Szkic
- Dodano
- 22 czerwca 2022
- Ostatnia zmiana
- 19 listopada 2024
Opis
CWE entries in this view are listed in the 2022 CWE Top 25 Most Dangerous Software Weaknesses.
Wpisy w tej grupie
- CWE-787 Out-of-bounds Write
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- CWE-20 Improper Input Validation
- CWE-125 Out-of-bounds Read
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
- CWE-416 Use After Free
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CWE-352 Cross-Site Request Forgery (CSRF)
- CWE-434 Unrestricted Upload of File with Dangerous Type
- CWE-476 NULL Pointer Dereference
- CWE-502 Deserialization of Untrusted Data
- CWE-190 Integer Overflow or Wraparound
- CWE-287 Improper Authentication
- CWE-798 Use of Hard-coded Credentials
- CWE-862 Missing Authorization
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
- CWE-306 Missing Authentication for Critical Function
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-276 Incorrect Default Permissions
- CWE-918 Server-Side Request Forgery (SSRF)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
- CWE-400 Uncontrolled Resource Consumption
- CWE-611 Improper Restriction of XML External Entity Reference
- CWE-94 Improper Control of Generation of Code ('Code Injection')
Źródła
Wpis z katalogu CWE 4.20.