Detail Tampilan CWE-1200

CWE-1200

Weaknesses in the 2019 CWE Top 25 Most Dangerous Software Errors
2019-09-18 +00:00
Stable
Graph
2024-11-19 +00:00
CWE Mitre.org
Notifikasi untuk CWE tertentu
Tetap terinformasi tentang perubahan untuk CWE tertentu.
Kelola notifikasi

Nama: Weaknesses in the 2019 CWE Top 25 Most Dangerous Software Errors

CWE entries in this view are listed in the 2019 CWE Top 25 Most Dangerous Software Errors.

Anggota CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Dasar

CWE-79: Improper Neutralization of Input During Web Page Generation Dasar

CWE-20: Improper Input Validation Dasar

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor Dasar

CWE-125: Out-of-bounds Read Dasar

CWE-89: Improper Neutralization of Special Elements used in an SQL Command Dasar

CWE-416: Use After Free Dasar

CWE-190: Integer Overflow or Wraparound Dasar

CWE-352: Cross-Site Request Forgery Dasar

CWE-22: Improper Limitation of a Pathname to a Restricted Directory Dasar

CWE-78: Improper Neutralization of Special Elements used in an OS Command Dasar

CWE-787: Out-of-bounds Write Dasar

CWE-287: Improper Authentication Dasar

CWE-476: NULL Pointer Dereference Dasar

CWE-732: Incorrect Permission Assignment for Critical Resource Dasar

CWE-434: Unrestricted Upload of File with Dangerous Type Dasar

CWE-611: Improper Restriction of XML External Entity Reference Dasar

CWE-94: Improper Control of Generation of Code Dasar

CWE-798: Use of Hard-coded Credentials Dasar

CWE-400: Uncontrolled Resource Consumption Dasar

CWE-772: Missing Release of Resource after Effective Lifetime Dasar

CWE-426: Untrusted Search Path Dasar

CWE-502: Deserialization of Untrusted Data Dasar

CWE-269: Improper Privilege Management Dasar

CWE-295: Improper Certificate Validation Dasar

Informasi Tampilan CWE

Catatan Pemetaan Kerentanan

Justifikasi : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
Komentar : Use this View or other Views to search and navigate for the appropriate weakness.

Audiens

Pemangku kepentingan Deskripsi
Software Developers By following the Top 25, developers will be able to significantly reduce the number of weaknesses that occur in their software.
Product Customers If a software developer claims to be following the Top 25, then customers can use the weaknesses in this view in order to formulate independent evidence of that claim.
Educators Educators can use this view in multiple ways. For example, if there is a focus on teaching weaknesses, the educator could focus on the Top 25.

Pengajuan

Nama Organisasi Tanggal Tanggal rilis Version
CWE Content Team MITRE 2019-09-18 +00:00 2019-09-19 +00:00 3.4

Modifikasi

Nama Organisasi Tanggal Komentar
CWE Content Team MITRE 2020-02-24 +00:00 updated View_Audience
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2024-11-19 +00:00 updated References

Referensi

REF-1028

2019 CWE Top 25 Most Dangerous Software Errors
https://cwe.mitre.org/top25/archive/2019/2019_cwe_top25.html

Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.