이름: CWE Cross-section

This view contains a selection of weaknesses that represent the variety of weaknesses that are captured in CWE, at a level of abstraction that is likely to be useful to most audiences. It can be used by researchers to determine how broad their theories, models, or tools are. It will also be used by the CWE content team in 2012 to focus quality improvement efforts for individual CWE entries.

CWE 구성원

CWE-14: Compiler Removal of Code to Clear Buffers 기본

CWE-22: Improper Limitation of a Pathname to a Restricted Directory 기본

CWE-23: Relative Path Traversal 기본

CWE-36: Absolute Path Traversal 기본

CWE-41: Improper Resolution of Path Equivalence 기본

CWE-59: Improper Link Resolution Before File Access 기본

CWE-78: Improper Neutralization of Special Elements used in an OS Command 기본

CWE-79: Improper Neutralization of Input During Web Page Generation 기본

CWE-88: Improper Neutralization of Argument Delimiters in a Command 기본

CWE-89: Improper Neutralization of Special Elements used in an SQL Command 기본

CWE-90: Improper Neutralization of Special Elements used in an LDAP Query 기본

CWE-94: Improper Control of Generation of Code 기본

CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code 기본

CWE-96: Improper Neutralization of Directives in Statically Saved Code 기본

CWE-99: Improper Control of Resource Identifiers 기본

CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers 기본

CWE-117: Improper Output Neutralization for Logs 기본

CWE-120: Buffer Copy without Checking Size of Input 기본

CWE-129: Improper Validation of Array Index 기본

CWE-131: Incorrect Calculation of Buffer Size 기본

CWE-134: Use of Externally-Controlled Format String 기본

CWE-135: Incorrect Calculation of Multi-Byte String Length 기본

CWE-170: Improper Null Termination 기본

CWE-173: Improper Handling of Alternate Encoding 기본

CWE-174: Double Decoding of the Same Data 기본

CWE-175: Improper Handling of Mixed Encoding 기본

CWE-179: Incorrect Behavior Order: Early Validation 기본

CWE-185: Incorrect Regular Expression 기본

CWE-190: Integer Overflow or Wraparound 기본

CWE-191: Integer Underflow (Wrap or Wraparound) 기본

CWE-193: Off-by-one Error 기본

CWE-203: Observable Discrepancy 기본

CWE-209: Generation of Error Message Containing Sensitive Information 기본

CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer 기본

CWE-222: Truncation of Security-relevant Information 기본

CWE-223: Omission of Security-relevant Information 기본

CWE-228: Improper Handling of Syntactically Invalid Structure 기본

CWE-244: Improper Clearing of Heap Memory Before Release 기본

CWE-248: Uncaught Exception 기본

CWE-250: Execution with Unnecessary Privileges 기본

CWE-252: Unchecked Return Value 기본

CWE-253: Incorrect Check of Function Return Value 기본

CWE-262: Not Using Password Aging 기본

CWE-263: Password Aging with Long Expiration 기본

CWE-266: Incorrect Privilege Assignment 기본

CWE-267: Privilege Defined With Unsafe Actions 기본

CWE-268: Privilege Chaining 기본

CWE-270: Privilege Context Switching Error 기본

CWE-271: Privilege Dropping / Lowering Errors 기본

CWE-273: Improper Check for Dropped Privileges 기본

CWE-283: Unverified Ownership 기본

CWE-290: Authentication Bypass by Spoofing 기본

CWE-294: Authentication Bypass by Capture-replay 기본

CWE-296: Improper Following of a Certificate's Chain of Trust 기본

CWE-299: Improper Check for Certificate Revocation 기본

CWE-300: Channel Accessible by Non-Endpoint 기본

CWE-301: Reflection Attack in an Authentication Protocol 기본

CWE-304: Missing Critical Step in Authentication 기본

CWE-306: Missing Authentication for Critical Functionality 기본

CWE-307: Improper Restriction of Excessive Authentication Attempts 기본

CWE-308: Use of Single-factor Authentication 기본

CWE-312: Cleartext Storage of Sensitive Information 기본

CWE-319: Cleartext Transmission of Sensitive Information 기본

CWE-322: Key Exchange without Entity Authentication 기본

CWE-323: Reusing a Nonce, Key Pair in Encryption 기본

CWE-325: Missing Cryptographic Step 기본

CWE-327: Use of a Broken or Risky Cryptographic Algorithm 기본

CWE-331: Insufficient Entropy 기본

CWE-334: Small Space of Random Values 기본

CWE-335: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) 기본

CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) 기본

CWE-341: Predictable from Observable State 기본

CWE-347: Improper Verification of Cryptographic Signature 기본

CWE-348: Use of Less Trusted Source 기본

CWE-349: Acceptance of Extraneous Untrusted Data With Trusted Data 기본

CWE-352: Cross-Site Request Forgery 기본

CWE-353: Missing Support for Integrity Check 기본

CWE-354: Improper Validation of Integrity Check Value 기본

CWE-364: Signal Handler Race Condition 기본

CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition 기본

CWE-369: Divide By Zero 기본

CWE-390: Detection of Error Condition Without Action 기본

CWE-392: Missing Report of Error Condition 기본

CWE-393: Return of Wrong Status Code 기본

CWE-400: Uncontrolled Resource Consumption 기본

CWE-406: Insufficient Control of Network Message Volume (Network Amplification) 기본

CWE-407: Inefficient Algorithmic Complexity 기본

CWE-408: Incorrect Behavior Order: Early Amplification 기본

CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) 기본

CWE-434: Unrestricted Upload of File with Dangerous Type 기본

CWE-444: Inconsistent Interpretation of HTTP Requests 기본

CWE-451: User Interface (UI) Misrepresentation of Critical Information 기본

CWE-453: Insecure Default Variable Initialization 기본

CWE-454: External Initialization of Trusted Variables or Data Stores 기본

CWE-455: Non-exit on Failed Initialization 기본

CWE-456: Missing Initialization of a Variable 기본

CWE-467: Use of sizeof() on a Pointer Type 기본

CWE-468: Incorrect Pointer Scaling 기본

CWE-469: Use of Pointer Subtraction to Determine Size 기본

CWE-470: Use of Externally-Controlled Input to Select Classes or Code 기본

CWE-476: NULL Pointer Dereference 기본

CWE-478: Missing Default Case in Multiple Condition Expression 기본

CWE-480: Use of Incorrect Operator 기본

CWE-483: Incorrect Block Delimitation 기본

CWE-484: Omitted Break Statement in Switch 기본

CWE-486: Comparison of Classes by Name 기본

CWE-494: Download of Code Without Integrity Check 기본

CWE-495: Private Data Structure Returned From A Public Method 기본

CWE-496: Public Data Assigned to Private Array-Typed Field 기본

CWE-498: Cloneable Class Containing Sensitive Information 기본

CWE-499: Serializable Class Containing Sensitive Data 기본

CWE-502: Deserialization of Untrusted Data 기본

CWE-521: Weak Password Requirements 기본

CWE-522: Insufficiently Protected Credentials 기본

CWE-546: Suspicious Comment 기본

CWE-547: Use of Hard-coded, Security-relevant Constants 기본

CWE-561: Dead Code 기본

CWE-563: Assignment to Variable without Use 기본

CWE-567: Unsynchronized Access to Shared Data in a Multithreaded Context 기본

CWE-587: Assignment of a Fixed Address to a Pointer 기본

CWE-595: Comparison of Object References Instead of Object Contents 기본

CWE-601: URL Redirection to Untrusted Site 기본

CWE-602: Client-Side Enforcement of Server-Side Security 기본

CWE-605: Multiple Binds to the Same Port 기본

CWE-617: Reachable Assertion 기본

CWE-621: Variable Extraction Error 기본

CWE-627: Dynamic Variable Evaluation 기본

CWE-628: Function Call with Incorrectly Specified Arguments 기본

CWE-642: External Control of Critical State Data 기본

CWE-648: Incorrect Use of Privileged APIs 기본

CWE-667: Improper Locking 기본

CWE-672: Operation on a Resource after Expiration or Release 기본

CWE-674: Uncontrolled Recursion 기본

CWE-676: Use of Potentially Dangerous Function 기본

CWE-681: Incorrect Conversion between Numeric Types 기본

CWE-698: Execution After Redirect (EAR) 기본

CWE-708: Incorrect Ownership Assignment 기본

CWE-732: Incorrect Permission Assignment for Critical Resource 기본

CWE-756: Missing Custom Error Page 기본

CWE-763: Release of Invalid Pointer or Reference 기본

CWE-770: Allocation of Resources Without Limits or Throttling 기본

CWE-772: Missing Release of Resource after Effective Lifetime 기본

CWE-783: Operator Precedence Logic Error 기본

CWE-786: Access of Memory Location Before Start of Buffer 기본

CWE-788: Access of Memory Location After End of Buffer 기본

CWE-798: Use of Hard-coded Credentials 기본

CWE-805: Buffer Access with Incorrect Length Value 기본

CWE-807: Reliance on Untrusted Inputs in a Security Decision 기본

CWE-822: Untrusted Pointer Dereference 기본

CWE-825: Expired Pointer Dereference 기본

CWE-829: Inclusion of Functionality from Untrusted Control Sphere 기본

CWE-835: Loop with Unreachable Exit Condition 기본

CWE-838: Inappropriate Encoding for Output Context 기본

CWE-839: Numeric Range Comparison Without Minimum Check 기본

CWE-841: Improper Enforcement of Behavioral Workflow 기본

CWE-862: Missing Authorization 기본

CWE-863: Incorrect Authorization 기본

CWE 뷰 정보

취약점 매핑 메모

근거 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
댓글 : Use this View or other Views to search and navigate for the appropriate weakness.

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2011-12-15 +00:00	2012-05-14 +00:00	2.2

수정 사항

이름	조직	날짜	댓글
CWE Content Team	MITRE	2017-05-03 +00:00	updated Relationships
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes

CWE-884 뷰 상세 정보

CWE-884