CWE-1435 · Widok
Weaknesses in the 2025 CWE Top 25 Most Dangerous Software Weaknesses
- Status
- Szkic
- Dodano
- 1 grudnia 2025
- Ostatnia zmiana
- 21 stycznia 2026
Opis
CWE entries in this view are listed in the 2025 CWE Top 25 Most Dangerous Software Weaknesses.
Wpisy w tej grupie
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- CWE-352 Cross-Site Request Forgery (CSRF)
- CWE-862 Missing Authorization
- CWE-787 Out-of-bounds Write
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CWE-416 Use After Free
- CWE-125 Out-of-bounds Read
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
- CWE-94 Improper Control of Generation of Code ('Code Injection')
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
- CWE-434 Unrestricted Upload of File with Dangerous Type
- CWE-476 NULL Pointer Dereference
- CWE-121 Stack-based Buffer Overflow
- CWE-502 Deserialization of Untrusted Data
- CWE-122 Heap-based Buffer Overflow
- CWE-863 Incorrect Authorization
- CWE-20 Improper Input Validation
- CWE-284 Improper Access Control
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
- CWE-306 Missing Authentication for Critical Function
- CWE-918 Server-Side Request Forgery (SSRF)
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
- CWE-639 Authorization Bypass Through User-Controlled Key
- CWE-770 Allocation of Resources Without Limits or Throttling
Źródła
Wpis z katalogu CWE 4.20.