Detail Kategori CWE-1129

CWE-1129

CISQ Quality Measures (2016) - Reliability
2019-01-03 +00:00
Draft
2025-09-09 +00:00
CWE Mitre.org
Notifikasi untuk CWE tertentu
Tetap terinformasi tentang perubahan untuk CWE tertentu.
Kelola notifikasi

Nama: CISQ Quality Measures (2016) - Reliability

Weaknesses in this category are related to the CISQ Quality Measures for Reliability, as documented in 2016 with the Automated Source Code CISQ Reliability Measure (ASCRM) Specification 1.0. Presence of these weaknesses could reduce the reliability of the software.

Daftar Anggota CWE

CWE-120: Buffer Copy without Checking Size of Input Dasar

CWE-252: Unchecked Return Value Dasar

CWE-396: Declaration of Catch for Generic Exception Dasar

CWE-397: Declaration of Throws for Generic Exception Dasar

CWE-456: Missing Initialization of a Variable Dasar

CWE-674: Uncontrolled Recursion Dasar

CWE-704: Incorrect Type Conversion or Cast Dasar

CWE-772: Missing Release of Resource after Effective Lifetime Dasar

CWE-788: Access of Memory Location After End of Buffer Dasar

CWE-1045: Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor Dasar

CWE-1047: Modules with Circular Dependencies Dasar

CWE-1051: Initialization with Hard-Coded Network Resource Configuration Data Dasar

CWE-1056: Invokable Control Element with Variadic Parameters Dasar

CWE-1058: Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element Dasar

CWE-1062: Parent Class with References to Child Class Dasar

CWE-1065: Runtime Resource Management Control Element in a Component Built to Run on Application Servers Dasar

CWE-1066: Missing Serialization Control Element Dasar

CWE-1069: Empty Exception Block Dasar

CWE-1070: Serializable Data Element Containing non-Serializable Item Elements Dasar

CWE-1077: Floating Point Comparison with Incorrect Operator Dasar

CWE-1079: Parent Class without Virtual Destructor Method Dasar

CWE-1082: Class Instance Self Destruction Control Element Dasar

CWE-1083: Data Access from Outside Expected Data Manager Component Dasar

CWE-1087: Class with Virtual Method without a Virtual Destructor Dasar

CWE-1088: Synchronous Access of Remote Resource without Timeout Dasar

CWE-1097: Persistent Storable Data Element without Associated Comparison Control Element Dasar

CWE-1096: Singleton Class Instance Creation without Proper Locking or Synchronization Dasar

CWE-1098: Data Element containing Pointer Item without Proper Copy Control Element Dasar

Informasi CWE

Catatan Pemetaan Kerentanan

Justifikasi : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
Komentar : See member weaknesses of this category.

Pengajuan

Nama Organisasi Tanggal Tanggal rilis Version
CWE Content Team MITRE 2018-07-23 +00:00 2019-01-03 +00:00 3.2

Modifikasi

Nama Organisasi Tanggal Komentar
CWE Content Team MITRE 2020-06-25 +00:00 updated References
CWE Content Team MITRE 2021-03-15 +00:00 updated Description, Name
CWE Content Team MITRE 2023-04-27 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2025-09-09 +00:00 updated References

Referensi

REF-961

Automated Source Code Reliability Measure (ASCRM)
Object Management Group (OMG).
http://www.omg.org/spec/ASCRM/1.0/

REF-968

Automated Quality Characteristic Measures
Consortium for Information & Software Quality (CISQ).
https://www.it-cisq.org/standards/automated-quality-characteristic-measures-maintainability/

Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.