CAPEC-513 Categoriedetail

CAPEC-513

Software
Draft
2014-06-23
00h00 +00:00
2022-09-29
00h00 +00:00
CAPEC Mitre.org
Melding voor een CAPEC
Blijf op de hoogte van wijzigingen voor een specifieke CAPEC.
Meldingen beheren

Naam: Software

Attack patterns within this category focus on the exploitation of software applications. The techniques defined by each pattern are used to exploit these weaknesses in the application's design or implementation in an attempt to achieve a desired negative technical impact.

Ledenlijst CAPEC

CAPEC-21: Exploitation of Trusted Identifiers Base

CAPEC-22: Exploiting Trust in Client Base

CAPEC-25: Forced Deadlock Base

CAPEC-26: Leveraging Race Conditions Base

CAPEC-28: Fuzzing Base

CAPEC-74: Manipulating State Base

CAPEC-94: Adversary in the Middle (AiTM) Base

CAPEC-112: Brute Force Base

CAPEC-113: Interface Manipulation Base

CAPEC-114: Authentication Abuse Base

CAPEC-115: Authentication Bypass Base

CAPEC-116: Excavation Base

CAPEC-117: Interception Base

CAPEC-122: Privilege Abuse Base

CAPEC-123: Buffer Manipulation Base

CAPEC-124: Shared Resource Manipulation Base

CAPEC-125: Flooding Base

CAPEC-129: Pointer Manipulation Base

CAPEC-130: Excessive Allocation Base

CAPEC-131: Resource Leak Exposure Base

CAPEC-137: Parameter Injection Base

CAPEC-148: Content Spoofing Base

CAPEC-151: Identity Spoofing Base

CAPEC-153: Input Data Manipulation Base

CAPEC-154: Resource Location Spoofing Base

CAPEC-161: Infrastructure Manipulation Base

CAPEC-165: File Manipulation Base

CAPEC-169: Footprinting Base

CAPEC-173: Action Spoofing Base

CAPEC-175: Code Inclusion Base

CAPEC-176: Configuration/Environment Manipulation Base

CAPEC-184: Software Integrity Attack Base

CAPEC-188: Reverse Engineering Base

CAPEC-212: Functionality Misuse Base

CAPEC-224: Fingerprinting Base

CAPEC-227: Sustained Client Engagement Base

CAPEC-233: Privilege Escalation Base

CAPEC-240: Resource Injection Base

CAPEC-242: Code Injection Base

CAPEC-248: Command Injection Base

CAPEC-272: Protocol Manipulation Base

CAPEC-410: Information Elicitation Base

CAPEC-438: Modification During Manufacture Base

CAPEC-441: Malicious Logic Insertion Base

CAPEC-548: Contaminate Resource Base

CAPEC-549: Local Execution of Code Base

CAPEC-554: Functionality Bypass Base

CAPEC-560: Use of Known Domain Credentials Base

CAPEC-586: Object Injection Base

CAPEC-594: Traffic Injection Base

CAPEC-607: Obstruction Base

CAPEC-690: Metadata Spoofing Base

Informatie CAPEC

Indiening

Naam Organisatie Datum Releasedatum
CAPEC Content Team The MITRE Corporation 2014-06-23 +00:00

Wijzigingen

Naam Organisatie Datum Opmerking
CAPEC Content Team The MITRE Corporation 2015-11-09 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2017-01-09 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2018-07-31 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2019-04-04 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2019-09-30 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2020-07-30 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2022-09-29 +00:00 Updated Relationships
De informatie die op CVE Find wordt gepresenteerd, is afkomstig van verschillende zorgvuldig geselecteerde referentiebronnen. CVE-gegevens worden geleverd door MITRE Corporation en de National Vulnerability Database (NVD). De Known Exploited Vulnerabilities (KEV)-catalogus is afkomstig van de Cybersecurity and Infrastructure Security Agency (CISA), terwijl EPSS-scores afkomstig zijn van FIRST.org. Daarnaast worden gegevens over softwarezwakheden (CWE) en veelvoorkomende aanvalspatronen (CAPEC) bijgehouden door MITRE Corporation, en informatie over hardware- en softwareconfiguraties (CPE) wordt geleverd door de NVD.