CWE-1430 · Widok
Weaknesses in the 2024 CWE Top 25 Most Dangerous Software Weaknesses
- Status
- Szkic
- Dodano
- 19 listopada 2024
- Ostatnia zmiana
- 11 grudnia 2025
Opis
CWE entries in this view are listed in the 2024 CWE Top 25 Most Dangerous Software Weaknesses.
Wpisy w tej grupie
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- CWE-787 Out-of-bounds Write
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- CWE-352 Cross-Site Request Forgery (CSRF)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CWE-125 Out-of-bounds Read
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
- CWE-416 Use After Free
- CWE-862 Missing Authorization
- CWE-434 Unrestricted Upload of File with Dangerous Type
- CWE-94 Improper Control of Generation of Code ('Code Injection')
- CWE-20 Improper Input Validation
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
- CWE-287 Improper Authentication
- CWE-269 Improper Privilege Management
- CWE-502 Deserialization of Untrusted Data
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
- CWE-863 Incorrect Authorization
- CWE-918 Server-Side Request Forgery (SSRF)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-476 NULL Pointer Dereference
- CWE-798 Use of Hard-coded Credentials
- CWE-190 Integer Overflow or Wraparound
- CWE-400 Uncontrolled Resource Consumption
- CWE-306 Missing Authentication for Critical Function
Źródła
Wpis z katalogu CWE 4.20.