2010 Top 25 - Weaknesses On the Cusp

Opis

Weaknesses in this category are not part of the general Top 25, but they were part of the original nominee list from which the Top 25 was drawn.

Wpisy w tej grupie

• CWE-134 Use of Externally-Controlled Format String
• CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer
• CWE-307 Improper Restriction of Excessive Authentication Attempts
• CWE-330 Use of Insufficiently Random Values
• CWE-416 Use After Free
• CWE-426 Untrusted Search Path
• CWE-454 External Initialization of Trusted Variables or Data Stores
• CWE-456 Missing Initialization of a Variable
• CWE-476 NULL Pointer Dereference
• CWE-59 Improper Link Resolution Before File Access ('Link Following')
• CWE-672 Operation on a Resource after Expiration or Release
• CWE-681 Incorrect Conversion between Numeric Types
• CWE-749 Exposed Dangerous Method or Function
• CWE-772 Missing Release of Resource after Effective Lifetime
• CWE-799 Improper Control of Interaction Frequency
• CWE-804 Guessable CAPTCHA

Źródła