Dettaglio categoria CAPEC-513

CAPEC-513

Software
Draft
2014-06-23
00h00 +00:00
2022-09-29
00h00 +00:00
CAPEC Mitre.org
Avviso per un CAPEC specifico
Rimani informato su qualsiasi modifica relativa a un CAPEC specifico.
Gestione notifiche

Nome: Software

Attack patterns within this category focus on the exploitation of software applications. The techniques defined by each pattern are used to exploit these weaknesses in the application's design or implementation in an attempt to achieve a desired negative technical impact.

Elenco membri CAPEC

CAPEC-21: Exploitation of Trusted Identifiers Base

CAPEC-22: Exploiting Trust in Client Base

CAPEC-25: Forced Deadlock Base

CAPEC-26: Leveraging Race Conditions Base

CAPEC-28: Fuzzing Base

CAPEC-74: Manipulating State Base

CAPEC-94: Adversary in the Middle (AiTM) Base

CAPEC-112: Brute Force Base

CAPEC-113: Interface Manipulation Base

CAPEC-114: Authentication Abuse Base

CAPEC-115: Authentication Bypass Base

CAPEC-116: Excavation Base

CAPEC-117: Interception Base

CAPEC-122: Privilege Abuse Base

CAPEC-123: Buffer Manipulation Base

CAPEC-124: Shared Resource Manipulation Base

CAPEC-125: Flooding Base

CAPEC-129: Pointer Manipulation Base

CAPEC-130: Excessive Allocation Base

CAPEC-131: Resource Leak Exposure Base

CAPEC-137: Parameter Injection Base

CAPEC-148: Content Spoofing Base

CAPEC-151: Identity Spoofing Base

CAPEC-153: Input Data Manipulation Base

CAPEC-154: Resource Location Spoofing Base

CAPEC-161: Infrastructure Manipulation Base

CAPEC-165: File Manipulation Base

CAPEC-169: Footprinting Base

CAPEC-173: Action Spoofing Base

CAPEC-175: Code Inclusion Base

CAPEC-176: Configuration/Environment Manipulation Base

CAPEC-184: Software Integrity Attack Base

CAPEC-188: Reverse Engineering Base

CAPEC-212: Functionality Misuse Base

CAPEC-224: Fingerprinting Base

CAPEC-227: Sustained Client Engagement Base

CAPEC-233: Privilege Escalation Base

CAPEC-240: Resource Injection Base

CAPEC-242: Code Injection Base

CAPEC-248: Command Injection Base

CAPEC-272: Protocol Manipulation Base

CAPEC-410: Information Elicitation Base

CAPEC-438: Modification During Manufacture Base

CAPEC-441: Malicious Logic Insertion Base

CAPEC-548: Contaminate Resource Base

CAPEC-549: Local Execution of Code Base

CAPEC-554: Functionality Bypass Base

CAPEC-560: Use of Known Domain Credentials Base

CAPEC-586: Object Injection Base

CAPEC-594: Traffic Injection Base

CAPEC-607: Obstruction Base

CAPEC-690: Metadata Spoofing Base

Informazioni CAPEC

Invio

Nome Organizzazione Data Data di rilascio
CAPEC Content Team The MITRE Corporation 2014-06-23 +00:00

Modifiche

Nome Organizzazione Data Commento
CAPEC Content Team The MITRE Corporation 2015-11-09 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2017-01-09 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2018-07-31 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2019-04-04 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2019-09-30 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2020-07-30 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2022-09-29 +00:00 Updated Relationships
Le informazioni presentate su CVE Find provengono da diverse fonti di riferimento attentamente selezionate. I dati CVE sono forniti da MITRE Corporation e dal National Vulnerability Database (NVD). Il catalogo delle vulnerabilità sfruttate conosciute (KEV) proviene dalla Cybersecurity and Infrastructure Security Agency (CISA), mentre i punteggi EPSS provengono da FIRST.org. Inoltre, i dati relativi alle vulnerabilità software (CWE) e ai pattern di attacco comuni (CAPEC) sono mantenuti da MITRE Corporation, e le informazioni sulle configurazioni hardware e software (CPE) sono fornite da NVD.