Detail Tampilan CWE-1305

CWE-1305

CISQ Quality Measures (2020)
2020-08-18 +00:00
Incomplete
Graph
2023-06-29 +00:00
CWE Mitre.org
Notifikasi untuk CWE tertentu
Tetap terinformasi tentang perubahan untuk CWE tertentu.
Kelola notifikasi

Nama: CISQ Quality Measures (2020)

This view outlines the most important software quality issues as identified by the Consortium for Information & Software Quality (CISQ) Automated Quality Characteristic Measures, released in 2020. These measures are derived from Object Management Group (OMG) standards.

Anggota CWE

CWE-1306: Weaknesses in this category are related to the CISQ Quality Measures for Reliability. Presence of these weaknesses could reduce the reliability of the software.
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Dasar
CWE-170: Improper Null Termination Dasar
CWE-252: Unchecked Return Value Dasar
CWE-390: Detection of Error Condition Without Action Dasar
CWE-394: Unexpected Status Code or Return Value Dasar
CWE-404: Improper Resource Shutdown or Release Dasar
CWE-424: Improper Protection of Alternate Path Dasar
CWE-459: Incomplete Cleanup Dasar
CWE-476: NULL Pointer Dereference Dasar
CWE-480: Use of Incorrect Operator Dasar
CWE-484: Omitted Break Statement in Switch Dasar
CWE-562: Return of Stack Variable Address Dasar
CWE-595: Comparison of Object References Instead of Object Contents Dasar
CWE-662: Improper Synchronization Dasar
CWE-665: Improper Initialization Dasar
CWE-672: Operation on a Resource after Expiration or Release Dasar
CWE-681: Incorrect Conversion between Numeric Types Dasar
CWE-682: Incorrect Calculation Dasar
CWE-703: Improper Check or Handling of Exceptional Conditions Dasar
CWE-704: Incorrect Type Conversion or Cast Dasar
CWE-758: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior Dasar
CWE-835: Loop with Unreachable Exit Condition Dasar
CWE-908: Use of Uninitialized Resource Dasar
CWE-1045: Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor Dasar
CWE-1051: Initialization with Hard-Coded Network Resource Configuration Data Dasar
CWE-1066: Missing Serialization Control Element Dasar
CWE-1070: Serializable Data Element Containing non-Serializable Item Elements Dasar
CWE-1077: Floating Point Comparison with Incorrect Operator Dasar
CWE-1079: Parent Class without Virtual Destructor Method Dasar
CWE-1082: Class Instance Self Destruction Control Element Dasar
CWE-1083: Data Access from Outside Expected Data Manager Component Dasar
CWE-1087: Class with Virtual Method without a Virtual Destructor Dasar
CWE-1088: Synchronous Access of Remote Resource without Timeout Dasar
CWE-1098: Data Element containing Pointer Item without Proper Copy Control Element Dasar
CWE-1307: Weaknesses in this category are related to the CISQ Quality Measures for Maintainability. Presence of these weaknesses could reduce the maintainability of the software.
CWE-407: Inefficient Algorithmic Complexity Dasar
CWE-478: Missing Default Case in Multiple Condition Expression Dasar
CWE-480: Use of Incorrect Operator Dasar
CWE-484: Omitted Break Statement in Switch Dasar
CWE-561: Dead Code Dasar
CWE-570: Expression is Always False Dasar
CWE-571: Expression is Always True Dasar
CWE-783: Operator Precedence Logic Error Dasar
CWE-1041: Use of Redundant Code Dasar
CWE-1045: Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor Dasar
CWE-1047: Modules with Circular Dependencies Dasar
CWE-1048: Invokable Control Element with Large Number of Outward Calls Dasar
CWE-1051: Initialization with Hard-Coded Network Resource Configuration Data Dasar
CWE-1052: Excessive Use of Hard-Coded Literals in Initialization Dasar
CWE-1054: Invocation of a Control Element at an Unnecessarily Deep Horizontal Layer Dasar
CWE-1055: Multiple Inheritance from Concrete Classes Dasar
CWE-1062: Parent Class with References to Child Class Dasar
CWE-1064: Invokable Control Element with Signature Containing an Excessive Number of Parameters Dasar
CWE-1074: Class with Excessively Deep Inheritance Dasar
CWE-1075: Unconditional Control Flow Transfer outside of Switch Block Dasar
CWE-1079: Parent Class without Virtual Destructor Method Dasar
CWE-1080: Source Code File with Excessive Number of Lines of Code Dasar
CWE-1084: Invokable Control Element with Excessive File or Data Access Operations Dasar
CWE-1085: Invokable Control Element with Excessive Volume of Commented-out Code Dasar
CWE-1086: Class with Excessive Number of Child Classes Dasar
CWE-1087: Class with Virtual Method without a Virtual Destructor Dasar
CWE-1090: Method Containing Access of a Member Element from Another Class Dasar
CWE-1095: Loop Condition Value Update within the Loop Dasar
CWE-1308: Weaknesses in this category are related to the CISQ Quality Measures for Security. Presence of these weaknesses could reduce the security of the software.
CWE-22: Improper Limitation of a Pathname to a Restricted Directory Dasar
CWE-77: Improper Neutralization of Special Elements used in a Command Dasar
CWE-89: Improper Neutralization of Special Elements used in an SQL Command Dasar
CWE-90: Improper Neutralization of Special Elements used in an LDAP Query Dasar
CWE-91: XML Injection Dasar
CWE-99: Improper Control of Resource Identifiers Dasar
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Dasar
CWE-129: Improper Validation of Array Index Dasar
CWE-134: Use of Externally-Controlled Format String Dasar
CWE-252: Unchecked Return Value Dasar
CWE-404: Improper Resource Shutdown or Release Dasar
CWE-424: Improper Protection of Alternate Path Dasar
CWE-434: Unrestricted Upload of File with Dangerous Type Dasar
CWE-477: Use of Obsolete Function Dasar
CWE-480: Use of Incorrect Operator Dasar
CWE-502: Deserialization of Untrusted Data Dasar
CWE-570: Expression is Always False Dasar
CWE-571: Expression is Always True Dasar
CWE-606: Unchecked Input for Loop Condition Dasar
CWE-611: Improper Restriction of XML External Entity Reference Dasar
CWE-643: Improper Neutralization of Data within XPath Expressions Dasar
CWE-652: Improper Neutralization of Data within XQuery Expressions Dasar
CWE-662: Improper Synchronization Dasar
CWE-665: Improper Initialization Dasar
CWE-672: Operation on a Resource after Expiration or Release Dasar
CWE-681: Incorrect Conversion between Numeric Types Dasar
CWE-682: Incorrect Calculation Dasar
CWE-732: Incorrect Permission Assignment for Critical Resource Dasar
CWE-778: Insufficient Logging Dasar
CWE-783: Operator Precedence Logic Error Dasar
CWE-789: Memory Allocation with Excessive Size Value Dasar
CWE-79: Improper Neutralization of Input During Web Page Generation Dasar
CWE-798: Use of Hard-coded Credentials Dasar
CWE-835: Loop with Unreachable Exit Condition Dasar

Informasi Tampilan CWE

Catatan Pemetaan Kerentanan

Justifikasi : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
Komentar : Use this View or other Views to search and navigate for the appropriate weakness.

Audiens

Pemangku kepentingan Deskripsi
Software Developers This view provides a good starting point for anyone involved in software development (including architects, designers, coders, and testers) to ensure that code quality issues are considered during the development process.
Product Vendors This view can help product vendors understand code quality issues and convey an overall status of their software.
Assessment Tool Vendors This view provides a good starting point for assessment tool vendors (e.g., vendors selling static analysis tools) who wish to understand what constitutes software with good code quality, and which quality issues may be of concern.

Pengajuan

Nama Organisasi Tanggal Tanggal rilis Version
CWE Content Team MITRE 2020-08-18 +00:00 2020-08-20 +00:00 4.2

Modifikasi

Nama Organisasi Tanggal Komentar
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes

Referensi

REF-1133

Automated Source Code Quality Measures
Consortium for Information & Software Quality (CISQ).
https://www.omg.org/spec/ASCQM/

Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.