CWE-1412 · Kategoria
Comprehensive Categorization: Poor Coding Practices
- Status
- Niekompletny
- Dodano
- 25 kwietnia 2023
- Ostatnia zmiana
- 9 września 2025
Opis
Weaknesses in this category are related to poor coding practices.
Wpisy w tej grupie
- CWE-11 ASP.NET Misconfiguration: Creating Debug Binary
- CWE-103 Struts: Incomplete validate() Method Definition
- CWE-104 Struts: Form Bean Does Not Extend Validation Class
- CWE-107 Struts: Unused Validation Form
- CWE-110 Struts: Validator Without Form Field
- CWE-111 Direct Use of Unsafe JNI
- CWE-242 Use of Inherently Dangerous Function
- CWE-245 J2EE Bad Practices: Direct Management of Connections
- CWE-246 J2EE Bad Practices: Direct Use of Sockets
- CWE-253 Incorrect Check of Function Return Value
- CWE-358 Improperly Implemented Security Check for Standard
- CWE-383 J2EE Bad Practices: Direct Use of Threads
- CWE-392 Missing Report of Error Condition
- CWE-393 Return of Wrong Status Code
- CWE-440 Expected Behavior Violation
- CWE-446 UI Discrepancy for Security Feature
- CWE-448 Obsolete Feature in UI
- CWE-449 The UI Performs the Wrong Action
- CWE-451 User Interface (UI) Misrepresentation of Critical Information
- CWE-462 Duplicate Key in Associative List (Alist)
- CWE-474 Use of Function with Inconsistent Implementations
- CWE-475 Undefined Behavior for Input to API
- CWE-476 NULL Pointer Dereference
- CWE-477 Use of Obsolete Function
- CWE-484 Omitted Break Statement in Switch
- CWE-489 Active Debug Code
- CWE-506 Embedded Malicious Code
- CWE-507 Trojan Horse
- CWE-508 Non-Replicating Malicious Code
- CWE-509 Replicating Malicious Code (Virus or Worm)
- CWE-510 Trapdoor
- CWE-511 Logic/Time Bomb
- CWE-512 Spyware
- CWE-546 Suspicious Comment
- CWE-547 Use of Hard-coded, Security-relevant Constants
- CWE-560 Use of umask() with chmod-style Argument
- CWE-561 Dead Code
- CWE-563 Assignment to Variable without Use
- CWE-570 Expression is Always False
- CWE-571 Expression is Always True
- CWE-573 Improper Following of Specification by Caller
- CWE-575 EJB Bad Practices: Use of AWT Swing
- CWE-576 EJB Bad Practices: Use of Java I/O
- CWE-577 EJB Bad Practices: Use of Sockets
- CWE-578 EJB Bad Practices: Use of Class Loader
- CWE-579 J2EE Bad Practices: Non-serializable Object Stored in Session
- CWE-581 Object Model Violation: Just One of Equals and Hashcode Defined
- CWE-585 Empty Synchronized Block
- CWE-586 Explicit Call to Finalize()
- CWE-589 Call to Non-ubiquitous API
- CWE-594 J2EE Framework: Saving Unserializable Objects to Disk
- CWE-605 Multiple Binds to the Same Port
- CWE-628 Function Call with Incorrectly Specified Arguments
- CWE-675 Multiple Operations on Resource in Single-Operation Context
- CWE-676 Use of Potentially Dangerous Function
- CWE-683 Function Call With Incorrect Order of Arguments
- CWE-684 Incorrect Provision of Specified Functionality
- CWE-685 Function Call With Incorrect Number of Arguments
- CWE-686 Function Call With Incorrect Argument Type
- CWE-687 Function Call With Incorrectly Specified Argument Value
- CWE-688 Function Call With Incorrect Variable or Reference as Argument
- CWE-695 Use of Low-Level Functionality
- CWE-710 Improper Adherence to Coding Standards
- CWE-758 Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
- CWE-766 Critical Data Element Declared Public
- CWE-785 Use of Path Manipulation Function without Maximum-sized Buffer
- CWE-912 Hidden Functionality
- CWE-1007 Insufficient Visual Distinction of Homoglyphs Presented to User
- CWE-1041 Use of Redundant Code
- CWE-1043 Data Element Aggregating an Excessively Large Number of Non-Primitive Elements
- CWE-1044 Architecture with Number of Horizontal Layers Outside of Expected Range
- CWE-1045 Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor
- CWE-1047 Modules with Circular Dependencies
- CWE-1048 Invokable Control Element with Large Number of Outward Calls
- CWE-1053 Missing Documentation for Design
- CWE-1054 Invocation of a Control Element at an Unnecessarily Deep Horizontal Layer
- CWE-1055 Multiple Inheritance from Concrete Classes
- CWE-1056 Invokable Control Element with Variadic Parameters
- CWE-1057 Data Access Operations Outside of Expected Data Manager Component
- CWE-1059 Insufficient Technical Documentation
- CWE-1060 Excessive Number of Inefficient Server-Side Data Accesses
- CWE-1061 Insufficient Encapsulation
- CWE-1062 Parent Class with References to Child Class
- CWE-1064 Invokable Control Element with Signature Containing an Excessive Number of Parameters
- CWE-1065 Runtime Resource Management Control Element in a Component Built to Run on Application Servers
- CWE-1066 Missing Serialization Control Element
- CWE-1068 Inconsistency Between Implementation and Documented Design
- CWE-1069 Empty Exception Block
- CWE-1070 Serializable Data Element Containing non-Serializable Item Elements
- CWE-1071 Empty Code Block
- CWE-1074 Class with Excessively Deep Inheritance
- CWE-1075 Unconditional Control Flow Transfer outside of Switch Block
- CWE-1076 Insufficient Adherence to Expected Conventions
- CWE-1078 Inappropriate Source Code Style or Formatting
- CWE-1079 Parent Class without Virtual Destructor Method
- CWE-1080 Source Code File with Excessive Number of Lines of Code
- CWE-1082 Class Instance Self Destruction Control Element
- CWE-1083 Data Access from Outside Expected Data Manager Component
- CWE-1085 Invokable Control Element with Excessive Volume of Commented-out Code
- CWE-1086 Class with Excessive Number of Child Classes
- CWE-1087 Class with Virtual Method without a Virtual Destructor
- CWE-1090 Method Containing Access of a Member Element from Another Class
- CWE-1092 Use of Same Invokable Control Element in Multiple Architectural Layers
- CWE-1093 Excessively Complex Data Representation
- CWE-1095 Loop Condition Value Update within the Loop
- CWE-1097 Persistent Storable Data Element without Associated Comparison Control Element
- CWE-1098 Data Element containing Pointer Item without Proper Copy Control Element
- CWE-1099 Inconsistent Naming Conventions for Identifiers
- CWE-1100 Insufficient Isolation of System-Dependent Functions
- CWE-1101 Reliance on Runtime Component in Generated Code
- CWE-1102 Reliance on Machine-Dependent Data Representation
- CWE-1103 Use of Platform-Dependent Third Party Components
- CWE-1105 Insufficient Encapsulation of Machine-Dependent Functionality
- CWE-1106 Insufficient Use of Symbolic Constants
- CWE-1107 Insufficient Isolation of Symbolic Constant Definitions
- CWE-1108 Excessive Reliance on Global Variables
- CWE-1109 Use of Same Variable for Multiple Purposes
- CWE-1110 Incomplete Design Documentation
- CWE-1111 Incomplete I/O Documentation
- CWE-1112 Incomplete Documentation of Program Execution
- CWE-1113 Inappropriate Comment Style
- CWE-1114 Inappropriate Whitespace Style
- CWE-1115 Source Code Element without Standard Prologue
- CWE-1116 Inaccurate Source Code Comments
- CWE-1117 Callable with Insufficient Behavioral Summary
- CWE-1118 Insufficient Documentation of Error Handling Techniques
- CWE-1119 Excessive Use of Unconditional Branching
- CWE-1120 Excessive Code Complexity
- CWE-1121 Excessive McCabe Cyclomatic Complexity
- CWE-1122 Excessive Halstead Complexity
- CWE-1123 Excessive Use of Self-Modifying Code
- CWE-1124 Excessively Deep Nesting
- CWE-1125 Excessive Attack Surface
- CWE-1126 Declaration of Variable with Unnecessarily Wide Scope
- CWE-1127 Compilation with Insufficient Warnings or Errors
- CWE-1164 Irrelevant Code
- CWE-1177 Use of Prohibited Code
- CWE-1209 Failure to Disable Reserved Bits
- CWE-1245 Improper Finite State Machines (FSMs) in Hardware Logic
- CWE-1341 Multiple Releases of Same Resource or Handle
- CWE-1357 Reliance on Insufficiently Trustworthy Component
- CWE-1434 Insecure Setting of Generative AI/ML Model Inference Parameters
Źródła
Wpis z katalogu CWE 4.20.