2011 Top 25 - Weaknesses On the Cusp

Opis

Weaknesses in this category are not part of the general Top 25, but they were part of the original nominee list from which the Top 25 was drawn.

Wpisy w tej grupie

• CWE-129 Improper Validation of Array Index
• CWE-209 Generation of Error Message Containing Sensitive Information
• CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer
• CWE-330 Use of Insufficiently Random Values
• CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
• CWE-456 Missing Initialization of a Variable
• CWE-476 NULL Pointer Dereference
• CWE-681 Incorrect Conversion between Numeric Types
• CWE-754 Improper Check for Unusual or Exceptional Conditions
• CWE-770 Allocation of Resources Without Limits or Throttling
• CWE-772 Missing Release of Resource after Effective Lifetime
• CWE-805 Buffer Access with Incorrect Length Value
• CWE-822 Untrusted Pointer Dereference
• CWE-825 Expired Pointer Dereference
• CWE-838 Inappropriate Encoding for Output Context
• CWE-841 Improper Enforcement of Behavioral Workflow

Źródła