Przejdź do treści
TechCalSecurity
CWECVE
Kalendarz ITO Autorze
Katalog CWE

CWE-861 · Kategoria

The CERT Oracle Secure Coding Standard for Java (2011) Chapter 18 - Miscellaneous (MSC)

Status
Przestarzały
Dodano
24 maja 2011
Ostatnia zmiana
29 czerwca 2023

Pełny wpis na cwe.mitre.org ↗

Opis

Weaknesses in this category are related to rules in the Miscellaneous (MSC) chapter of The CERT Oracle Secure Coding Standard for Java (2011).

Wpisy w tej grupie

  • CWE-259 Use of Hard-coded Password
  • CWE-311 Missing Encryption of Sensitive Data
  • CWE-330 Use of Insufficiently Random Values
  • CWE-332 Insufficient Entropy in PRNG
  • CWE-333 Improper Handling of Insufficient Entropy in TRNG
  • CWE-336 Same Seed in Pseudo-Random Number Generator (PRNG)
  • CWE-337 Predictable Seed in Pseudo-Random Number Generator (PRNG)
  • CWE-400 Uncontrolled Resource Consumption
  • CWE-401 Missing Release of Memory after Effective Lifetime
  • CWE-543 Use of Singleton Pattern Without Synchronization in a Multithreaded Context
  • CWE-770 Allocation of Resources Without Limits or Throttling
  • CWE-798 Use of Hard-coded Credentials

Źródła

Wpis z katalogu CWE 4.20.

Dane CWE: MITRE·Dane CVE: NVD·This product uses the NVD API but is not endorsed or certified by the NVD.

© 2026 Jakub Krajewski·Polityka prywatności·CWE™ i CVE® są znakami towarowymi The MITRE Corporation.

CWE content: Copyright © 2006–2026, The MITRE Corporation. CWE™ is free to use by any organization or individual for any research, development, and/or commercial purposes, per these CWE Terms of Use. Accordingly, The MITRE Corporation hereby grants you a non-exclusive, royalty-free license to use CWE for research, development, and commercial purposes. Any copy you make for such purposes is authorized on the condition that you reproduce MITRE’s copyright designation and this license in any such copy. CWE is a trademark of The MITRE Corporation. Please contact cwe@mitre.org if you require further clarification on this issue. CWE Terms of Use