CWEview

CWE-884 CWE Cross-section

Official page ↗
Type
Explicit
Status
Incomplete
Members
157
CWE version
5.0

Objective

This view contains a selection of weaknesses that represent the variety of weaknesses that are captured in CWE, at a level of abstraction that is likely to be useful to most audiences. It can be used by researchers to determine how broad their theories, models, or tools are. It will also be used by the CWE content team in 2012 to focus quality improvement efforts for individual CWE entries.

Related

Has member · CWE (157)

  • CWE-113 Improper Neutralization of CRLF Sequences in HTTP Headers weakness
  • CWE-117 Improper Output Neutralization for Logs weakness
  • CWE-120 Buffer Copy without Checking Size of Input weakness
  • CWE-129 Improper Validation of Array Index weakness
  • CWE-131 Incorrect Calculation of Buffer Size weakness
  • CWE-134 Use of Externally-Controlled Format String weakness
  • CWE-135 Incorrect Calculation of Multi-Byte String Length weakness
  • CWE-14 Compiler Removal of Code to Clear Buffers weakness
  • CWE-170 Improper Null Termination weakness
  • CWE-173 Improper Handling of Alternate Encoding weakness
  • CWE-174 Double Decoding of the Same Data weakness
  • CWE-175 Improper Handling of Mixed Encoding weakness
  • CWE-179 Incorrect Behavior Order: Early Validation weakness
  • CWE-185 Incorrect Regular Expression weakness
  • CWE-190 Integer Overflow or Wraparound weakness
  • CWE-191 Integer Underflow (Wrap or Wraparound) weakness
  • CWE-193 Off-by-one Error weakness
  • CWE-203 Observable Discrepancy weakness
  • CWE-209 Generation of Error Message Containing Sensitive Information weakness
  • CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer weakness
  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
  • CWE-222 Truncation of Security-relevant Information weakness
  • CWE-223 Omission of Security-relevant Information weakness
  • CWE-228 Improper Handling of Syntactically Invalid Structure weakness
  • CWE-23 Relative Path Traversal weakness
  • CWE-244 Improper Clearing of Heap Memory Before Release weakness
  • CWE-248 Uncaught Exception weakness
  • CWE-250 Execution with Unnecessary Privileges weakness
  • CWE-252 Unchecked Return Value weakness
  • CWE-253 Incorrect Check of Function Return Value weakness
Show all 157 ›