CWE-1416 · Kategoria
Comprehensive Categorization: Resource Lifecycle Management
- Status
- Niekompletny
- Dodano
- 25 kwietnia 2023
- Ostatnia zmiana
- 29 lutego 2024
Opis
Weaknesses in this category are related to resource lifecycle management.
Wpisy w tej grupie
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
- CWE-118 Incorrect Access of Indexable Resource ('Range Error')
- CWE-178 Improper Handling of Case Sensitivity
- CWE-192 Integer Coercion Error
- CWE-194 Unexpected Sign Extension
- CWE-195 Signed to Unsigned Conversion Error
- CWE-196 Unsigned to Signed Conversion Error
- CWE-197 Numeric Truncation Error
- CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer
- CWE-221 Information Loss or Omission
- CWE-226 Sensitive Information in Resource Not Removed Before Reuse
- CWE-243 Creation of chroot Jail Without Changing Working Directory
- CWE-372 Incomplete Internal State Distinction
- CWE-386 Symbolic Name not Mapping to Correct Object
- CWE-400 Uncontrolled Resource Consumption
- CWE-404 Improper Resource Shutdown or Release
- CWE-405 Asymmetric Resource Consumption (Amplification)
- CWE-406 Insufficient Control of Network Message Volume (Network Amplification)
- CWE-407 Inefficient Algorithmic Complexity
- CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)
- CWE-410 Insufficient Resource Pool
- CWE-434 Unrestricted Upload of File with Dangerous Type
- CWE-453 Insecure Default Variable Initialization
- CWE-454 External Initialization of Trusted Variables or Data Stores
- CWE-456 Missing Initialization of a Variable
- CWE-457 Use of Uninitialized Variable
- CWE-459 Incomplete Cleanup
- CWE-460 Improper Cleanup on Thrown Exception
- CWE-471 Modification of Assumed-Immutable Data (MAID)
- CWE-487 Reliance on Package-level Scope
- CWE-495 Private Data Structure Returned From A Public Method
- CWE-496 Public Data Assigned to Private Array-Typed Field
- CWE-501 Trust Boundary Violation
- CWE-568 finalize() Method Without super.finalize()
- CWE-580 clone() Method Without super.clone()
- CWE-588 Attempt to Access Child of a Non-structure Pointer
- CWE-607 Public Static Final Field References Mutable Object
- CWE-610 Externally Controlled Reference to a Resource in Another Sphere
- CWE-618 Exposed Unsafe ActiveX Method
- CWE-662 Improper Synchronization
- CWE-664 Improper Control of a Resource Through its Lifetime
- CWE-665 Improper Initialization
- CWE-666 Operation on Resource in Wrong Phase of Lifetime
- CWE-669 Incorrect Resource Transfer Between Spheres
- CWE-673 External Influence of Sphere Definition
- CWE-681 Incorrect Conversion between Numeric Types
- CWE-704 Incorrect Type Conversion or Cast
- CWE-706 Use of Incorrectly-Resolved Name or Reference
- CWE-749 Exposed Dangerous Method or Function
- CWE-770 Allocation of Resources Without Limits or Throttling
- CWE-771 Missing Reference to Active Allocated Resource
- CWE-772 Missing Release of Resource after Effective Lifetime
- CWE-773 Missing Reference to Active File Descriptor or Handle
- CWE-774 Allocation of File Descriptors or Handles Without Limits or Throttling
- CWE-775 Missing Release of File Descriptor or Handle after Effective Lifetime
- CWE-776 Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
- CWE-779 Logging of Excessive Data
- CWE-782 Exposed IOCTL with Insufficient Access Control
- CWE-827 Improper Control of Document Type Definition
- CWE-829 Inclusion of Functionality from Untrusted Control Sphere
- CWE-830 Inclusion of Web Functionality from an Untrusted Source
- CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')
- CWE-908 Use of Uninitialized Resource
- CWE-909 Missing Initialization of Resource
- CWE-911 Improper Update of Reference Count
- CWE-913 Improper Control of Dynamically-Managed Code Resources
- CWE-920 Improper Restriction of Power Consumption
- CWE-922 Insecure Storage of Sensitive Information
- CWE-1042 Static Member Data Element outside of a Singleton Class Element
- CWE-1046 Creation of Immutable Text Using String Concatenation
- CWE-1049 Excessive Data Query Operations in a Large Data Table
- CWE-1050 Excessive Platform Resource Consumption within a Loop
- CWE-1051 Initialization with Hard-Coded Network Resource Configuration Data
- CWE-1052 Excessive Use of Hard-Coded Literals in Initialization
- CWE-1063 Creation of Class Instance within a Static Code Block
- CWE-1067 Excessive Execution of Sequential Searches of Data Resource
- CWE-1072 Data Resource Access without Use of Connection Pooling
- CWE-1073 Non-SQL Invokable Control Element with Excessive Number of Data Resource Accesses
- CWE-1084 Invokable Control Element with Excessive File or Data Access Operations
- CWE-1089 Large Data Table with Excessive Number of Indices
- CWE-1091 Use of Object without Invoking Destructor Method
- CWE-1094 Excessive Index Range Scan for a Data Resource
- CWE-1176 Inefficient CPU Computation
- CWE-1188 Initialization of a Resource with an Insecure Default
- CWE-1221 Incorrect Register Defaults or Module Parameters
- CWE-1229 Creation of Emergent Resource
- CWE-1235 Incorrect Use of Autoboxing and Unboxing for Performance Critical Operations
- CWE-1239 Improper Zeroization of Hardware Register
- CWE-1246 Improper Write Handling in Limited-write Non-Volatile Memories
- CWE-1250 Improper Preservation of Consistency Between Independent Representations of Shared State
- CWE-1258 Exposure of Sensitive System Information Due to Uncleared Debug Information
- CWE-1266 Improper Scrubbing of Sensitive Data from Decommissioned Device
- CWE-1271 Uninitialized Value on Reset for Registers Holding Security Settings
- CWE-1272 Sensitive Information Uncleared Before Debug/Power State Transition
- CWE-1279 Cryptographic Operations are run Before Supporting Units are Ready
- CWE-1301 Insufficient or Incomplete Data Removal within Hardware Component
- CWE-1325 Improperly Controlled Sequential Memory Allocation
- CWE-1330 Remanent Data Readable after Memory Erase
- CWE-1333 Inefficient Regular Expression Complexity
- CWE-1342 Information Exposure through Microarchitectural State after Transient Execution
- CWE-1386 Insecure Operation on Windows Junction / Mount Point
- CWE-1389 Incorrect Parsing of Numbers with Different Radices
- CWE-1419 Incorrect Initialization of Resource
- CWE-1420 Exposure of Sensitive Information during Transient Execution
- CWE-1421 Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution
- CWE-1422 Exposure of Sensitive Information caused by Incorrect Data Forwarding during Transient Execution
- CWE-1423 Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution
Źródła
Wpis z katalogu CWE 4.20.