CWE-635 소프트웨어 약점 상세 정보 | CVE Find

이름: Weaknesses Originally Used by NVD from 2008 to 2016

CWE nodes in this view (slice) were used by NIST to categorize vulnerabilities within NVD, from 2008 to 2016. This original version has been used by many other projects.

CWE 구성원

CWE-16: Configuration 카테고리

CWE-16: Weaknesses in this category are typically introduced during the configuration of the software.

CWE-189: Numeric Errors 카테고리

CWE-189: Weaknesses in this category are related to improper calculation or conversion of numbers.

CWE-128: Wrap-around Error 기본

CWE-190: Integer Overflow or Wraparound 기본

CWE-191: Integer Underflow (Wrap or Wraparound) 기본

CWE-193: Off-by-one Error 기본

CWE-369: Divide By Zero 기본

CWE-681: Incorrect Conversion between Numeric Types 기본

CWE-839: Numeric Range Comparison Without Minimum Check 기본

CWE-1335: Incorrect Bitwise Shift of Integer 기본

CWE-1339: Insufficient Precision or Accuracy of a Real Number 기본

CWE-1389: Incorrect Parsing of Numbers with Different Radices 기본

CWE-255: Credentials Management Errors 카테고리

CWE-255: Weaknesses in this category are related to the management of credentials.

CWE-256: Plaintext Storage of a Password 기본

CWE-257: Storing Passwords in a Recoverable Format 기본

CWE-260: Password in Configuration File 기본

CWE-261: Weak Encoding for Password 기본

CWE-262: Not Using Password Aging 기본

CWE-263: Password Aging with Long Expiration 기본

CWE-324: Use of a Key Past its Expiration Date 기본

CWE-521: Weak Password Requirements 기본

CWE-523: Unprotected Transport of Credentials 기본

CWE-549: Missing Password Field Masking 기본

CWE-620: Unverified Password Change 기본

CWE-640: Weak Password Recovery Mechanism for Forgotten Password 기본

CWE-798: Use of Hard-coded Credentials 기본

CWE-916: Use of Password Hash With Insufficient Computational Effort 기본

CWE-1392: Use of Default Credentials 기본

CWE-264: Permissions, Privileges, and Access Controls 카테고리

CWE-264: Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

CWE-310: Cryptographic Issues 카테고리

CWE-310: Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.

CWE-261: Weak Encoding for Password 기본

CWE-324: Use of a Key Past its Expiration Date 기본

CWE-325: Missing Cryptographic Step 기본

CWE-328: Use of Weak Hash 기본

CWE-331: Insufficient Entropy 기본

CWE-334: Small Space of Random Values 기본

CWE-335: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) 기본

CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) 기본

CWE-347: Improper Verification of Cryptographic Signature 기본

CWE-916: Use of Password Hash With Insufficient Computational Effort 기본

CWE-1204: Generation of Weak Initialization Vector (IV) 기본

CWE-1240: Use of a Cryptographic Primitive with a Risky Implementation 기본

CWE-399: Resource Management Errors 카테고리

CWE-399: Weaknesses in this category are related to improper management of system resources.

CWE-73: External Control of File Name or Path 기본

CWE-403: Exposure of File Descriptor to Unintended Control Sphere 기본

CWE-410: Insufficient Resource Pool 기본

CWE-470: Use of Externally-Controlled Input to Select Classes or Code 기본

CWE-502: Deserialization of Untrusted Data 기본

CWE-619: Dangling Database Cursor 기본

CWE-641: Improper Restriction of Names for Files and Other Resources 기본

CWE-694: Use of Multiple Resources with Duplicate Identifier 기본

CWE-763: Release of Invalid Pointer or Reference 기본

CWE-770: Allocation of Resources Without Limits or Throttling 기본

CWE-771: Missing Reference to Active Allocated Resource 기본

CWE-772: Missing Release of Resource after Effective Lifetime 기본

CWE-826: Premature Release of Resource During Expected Lifetime 기본

CWE-908: Use of Uninitialized Resource 기본

CWE-909: Missing Initialization of Resource 기본

CWE-910: Use of Expired File Descriptor 기본

CWE-911: Improper Update of Reference Count 기본

CWE-914: Improper Control of Dynamically-Identified Variables 기본

CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes 기본

CWE-920: Improper Restriction of Power Consumption 기본

CWE-1188: Initialization of a Resource with an Insecure Default 기본

CWE-1341: Multiple Releases of Same Resource or Handle 기본

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer 기본

CWE-134: Use of Externally-Controlled Format String 기본

CWE-20: Improper Input Validation 기본

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 기본

CWE-22: Improper Limitation of a Pathname to a Restricted Directory 기본

CWE-287: Improper Authentication 기본

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 기본

CWE-59: Improper Link Resolution Before File Access 기본

CWE-78: Improper Neutralization of Special Elements used in an OS Command 기본

CWE-79: Improper Neutralization of Input During Web Page Generation 기본

CWE-89: Improper Neutralization of Special Elements used in an SQL Command 기본

CWE-94: Improper Control of Generation of Code 기본

CWE-352: Cross-Site Request Forgery 기본

CWE 뷰 정보

취약점 매핑 메모

근거 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
댓글 : Use this View or other Views to search and navigate for the appropriate weakness.

메모

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2007-10-01 +00:00	2007-10-01 +00:00	Draft 7

수정 사항

이름	조직	날짜	댓글
CWE Content Team	MITRE	2008-09-08 +00:00	updated Maintenance_Notes, Relationships, References, View_Structure
CWE Content Team	MITRE	2017-01-19 +00:00	updated Description, Maintenance_Notes
CWE Content Team	MITRE	2017-11-08 +00:00	updated Description, Maintenance_Notes, Name
CWE Content Team	MITRE	2021-03-15 +00:00	updated Maintenance_Notes
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2025-09-09 +00:00	updated References

참고 자료

REF-1

CWE - Common Weakness Enumeration
NIST.
https://nvd.nist.gov/vuln/categories