CWE-1435 Weaknesses in the 2025 CWE Top 25 Most Dangerous Software Weaknesses

Has member · CWE (25)

• CWE-120 Buffer Copy without Checking Size of Input weakness
• CWE-121 Stack-based Buffer Overflow weakness
• CWE-122 Heap-based Buffer Overflow weakness
• CWE-125 Out-of-bounds Read weakness
• CWE-20 Improper Input Validation weakness
• CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
• CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
• CWE-284 Improper Access Control weakness
• CWE-306 Missing Authentication for Critical Functionality weakness
• CWE-352 Cross-Site Request Forgery weakness
• CWE-416 Use After Free weakness
• CWE-434 Unrestricted Upload of File with Dangerous Type weakness
• CWE-476 NULL Pointer Dereference weakness
• CWE-502 Deserialization of Untrusted Data weakness
• CWE-639 Authorization Bypass Through User-Controlled Key weakness
• CWE-77 Improper Neutralization of Special Elements used in a Command weakness
• CWE-770 Allocation of Resources Without Limits or Throttling weakness
• CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
• CWE-787 Out-of-bounds Write weakness
• CWE-79 Improper Neutralization of Input During Web Page Generation weakness
• CWE-862 Missing Authorization weakness
• CWE-863 Incorrect Authorization weakness
• CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
• CWE-918 Server-Side Request Forgery weakness
• CWE-94 Improper Control of Generation of Code weakness