CWE-1337 Weaknesses in the 2021 CWE Top 25 Most Dangerous Software Weaknesses

Has member · CWE (25)

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
• CWE-125 Out-of-bounds Read weakness
• CWE-190 Integer Overflow or Wraparound weakness
• CWE-20 Improper Input Validation weakness
• CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
• CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
• CWE-276 Incorrect Default Permissions weakness
• CWE-287 Improper Authentication weakness
• CWE-306 Missing Authentication for Critical Functionality weakness
• CWE-352 Cross-Site Request Forgery weakness
• CWE-416 Use After Free weakness
• CWE-434 Unrestricted Upload of File with Dangerous Type weakness
• CWE-476 NULL Pointer Dereference weakness
• CWE-502 Deserialization of Untrusted Data weakness
• CWE-522 Insufficiently Protected Credentials weakness
• CWE-611 Improper Restriction of XML External Entity Reference weakness
• CWE-732 Incorrect Permission Assignment for Critical Resource weakness
• CWE-77 Improper Neutralization of Special Elements used in a Command weakness
• CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
• CWE-787 Out-of-bounds Write weakness
• CWE-79 Improper Neutralization of Input During Web Page Generation weakness
• CWE-798 Use of Hard-coded Credentials weakness
• CWE-862 Missing Authorization weakness
• CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
• CWE-918 Server-Side Request Forgery weakness