970 indexed

CWECWE weaknesses

970 MITRE CWE entries — software weakness types that underlie vulnerabilities (CVE→CWE link). Filter by category. Authored by Adam Lundqvist.

Showing 851–900 of 970 · page 18 of 20

IDTitleSummary
CWE-759Use of a One-Way Hash without a SaltThe product uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the product does not also use a salt as p…
CWE-76Improper Neutralization of Equivalent Special ElementsThe product correctly neutralizes certain special elements, but it improperly neutralizes equivalent special elements. The product may have a fixed list of sp…
CWE-760Use of a One-Way Hash with a Predictable SaltThe product uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the product uses a predictable salt as pa…
CWE-761Free of Pointer not at Start of BufferThe product calls free() on a pointer to a memory resource that was allocated on the heap, but the pointer is not at the start of the buffer.
CWE-762Mismatched Memory Management RoutinesThe product attempts to return a memory resource to the system, but it calls a release function that is not compatible with the function that was originally us…
CWE-763Release of Invalid Pointer or ReferenceThe product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.
CWE-764Multiple Locks of a Critical ResourceThe product locks a critical resource more times than intended, leading to an unexpected state in the system. When a product is operating in a concurrent envi…
CWE-765Multiple Unlocks of a Critical ResourceThe product unlocks a critical resource more times than intended, leading to an unexpected state in the system. When the product is operating in a concurrent …
CWE-766Critical Data Element Declared PublicThe product declares a critical variable, field, or member to be public when intended security policy requires it to be private.
CWE-767Access to Critical Private Variable via Public MethodThe product defines a public method that reads or modifies a private variable. If an attacker modifies the variable to contain unexpected values, this could v…
CWE-768Incorrect Short Circuit EvaluationThe product contains a conditional statement with multiple logical expressions in which one of the non-leading expressions may produce side effects. This may l…
CWE-769DEPRECATED: Uncontrolled File Descriptor ConsumptionThis entry has been deprecated because it was a duplicate of CWE-774. All content has been transferred to CWE-774.
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutral…
CWE-770Allocation of Resources Without Limits or ThrottlingThe product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resou…
CWE-771Missing Reference to Active Allocated ResourceThe product does not properly maintain a reference to a resource that has been allocated, which prevents the resource from being reclaimed. This does not nece…
CWE-772Missing Release of Resource after Effective LifetimeThe product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.
CWE-773Missing Reference to Active File Descriptor or HandleThe product does not properly maintain references to a file descriptor or handle, which prevents that file descriptor/handle from being reclaimed. This can ca…
CWE-774Allocation of File Descriptors or Handles Without Limits or ThrottlingThe product allocates file descriptors or handles on behalf of an actor without imposing any restrictions on how many descriptors can be allocated, in violatio…
CWE-775Missing Release of File Descriptor or Handle after Effective LifetimeThe product does not release a file descriptor or handle after its effective lifetime has ended, i.e., after the file descriptor/handle is no longer needed. W…
CWE-776Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of r…
CWE-777Regular Expression without AnchorsThe product uses a regular expression to perform neutralization, but the regular expression is not anchored and may allow malicious or malformed data to slip t…
CWE-778Insufficient LoggingWhen a security-critical event occurs, the product either does not record the event or omits important details about the event when logging it.
CWE-779Logging of Excessive DataThe product logs too much information, making log files hard to process and possibly hindering recovery efforts or forensic analysis after an attack. While lo…
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neu…
CWE-780Use of RSA Algorithm without OAEPThe product uses the RSA algorithm but does not incorporate Optimal Asymmetric Encryption Padding (OAEP), which might weaken the encryption. Padding schemes a…
CWE-781Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control CodeThe product defines an IOCTL that uses METHOD_NEITHER for I/O, but it does not validate or incorrectly validates the addresses that are provided. When an IOCT…
CWE-782Exposed IOCTL with Insufficient Access ControlThe product implements an IOCTL with functionality that should be restricted, but it does not properly enforce access control for the IOCTL.
CWE-783Operator Precedence Logic ErrorThe product uses an expression in which operator precedence causes incorrect logic to be used. While often just a bug, operator precedence logic errors can ha…
CWE-784Reliance on Cookies without Validation and Integrity Checking in a Security DecisionThe product uses a protection mechanism that relies on the existence or values of a cookie, but it does not properly ensure that the cookie is valid for the as…
CWE-785Use of Path Manipulation Function without Maximum-sized BufferThe product invokes a function for normalizing paths or file names, but it provides an output buffer that is smaller than the maximum possible size, such as PA…
CWE-786Access of Memory Location Before Start of BufferThe product reads or writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer. This typically occur…
CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
CWE-788Access of Memory Location After End of BufferThe product reads or writes to a buffer using an index or pointer that references a memory location after the end of the buffer. This typically occurs when a …
CWE-789Memory Allocation with Excessive Size ValueThe product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amount…
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to o…
CWE-790Improper Filtering of Special ElementsThe product receives data from an upstream component, but does not filter or incorrectly filters special elements before sending it to a downstream component.
CWE-791Incomplete Filtering of Special ElementsThe product receives data from an upstream component, but does not completely filter special elements before sending it to a downstream component.
CWE-792Incomplete Filtering of One or More Instances of Special ElementsThe product receives data from an upstream component, but does not completely filter one or more instances of special elements before sending it to a downstrea…
CWE-793Only Filtering One Instance of a Special ElementThe product receives data from an upstream component, but only filters a single instance of a special element before sending it to a downstream component. Inc…
CWE-794Incomplete Filtering of Multiple Instances of Special ElementsThe product receives data from an upstream component, but does not filter all instances of a special element before sending it to a downstream component.
CWE-795Only Filtering Special Elements at a Specified LocationThe product receives data from an upstream component, but only accounts for special elements at a specified location, thereby missing remaining special element…
CWE-796Only Filtering Special Elements Relative to a MarkerThe product receives data from an upstream component, but only accounts for special elements positioned relative to a marker (e.g. "at the beginning/end of a s…
CWE-797Only Filtering Special Elements at an Absolute PositionThe product receives data from an upstream component, but only accounts for special elements at an absolute position (e.g. "byte number 10"), thereby missing r…
CWE-798Use of Hard-coded CredentialsThe product contains hard-coded credentials, such as a password or cryptographic key.
CWE-799Improper Control of Interaction FrequencyThe product does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests. This can allow…
CWE-8J2EE Misconfiguration: Entity Bean Declared RemoteWhen an application exposes a remote interface for an entity bean, it might also expose methods that get or set the bean's data. These methods could be leverag…
CWE-80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that …
CWE-804Guessable CAPTCHAThe product uses a CAPTCHA challenge, but the challenge can be guessed or automatically recognized by a non-human actor.
CWE-805Buffer Access with Incorrect Length ValueThe product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the…
CWE-806Buffer Access Using Size of Source BufferThe product uses the size of a source buffer when reading from or writing to a destination buffer, which may cause it to access memory that is outside of the b…
Sourced from MITRE CWE 4.x XML. Curated by Adam Lundqvist, Founder at SQUR.