Szczegóły widoku CWE-1425

CWE-1425

Weaknesses in the 2023 CWE Top 25 Most Dangerous Software Weaknesses
Draft
Graph
2023-06-26 +00:00
2024-11-19 +00:00
CWE Mitre.org
Powiadomienia dla konkretnego CWE
Bądź na bieżąco z wszelkimi zmianami dotyczącymi konkretnego CWE.
Zarządzaj powiadomieniami

Nazwa: Weaknesses in the 2023 CWE Top 25 Most Dangerous Software Weaknesses

CWE entries in this view are listed in the 2023 CWE Top 25 Most Dangerous Software Weaknesses.

Członkowie CWE

CWE-787: Out-of-bounds Write Base

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Base

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Base

CWE-416: Use After Free Base

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Base

CWE-20: Improper Input Validation Base

CWE-125: Out-of-bounds Read Base

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Base

CWE-352: Cross-Site Request Forgery (CSRF) Base

CWE-434: Unrestricted Upload of File with Dangerous Type Base

CWE-862: Missing Authorization Base

CWE-476: NULL Pointer Dereference Base

CWE-287: Improper Authentication Base

CWE-190: Integer Overflow or Wraparound Base

CWE-502: Deserialization of Untrusted Data Base

CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') Base

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Base

CWE-798: Use of Hard-coded Credentials Base

CWE-918: Server-Side Request Forgery (SSRF) Base

CWE-306: Missing Authentication for Critical Function Base

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Base

CWE-269: Improper Privilege Management Base

CWE-94: Improper Control of Generation of Code ('Code Injection') Base

CWE-863: Incorrect Authorization Base

CWE-276: Incorrect Default Permissions Base

Informacje o widoku CWE

Uwagi dotyczące mapowania podatności

Uzasadnienie : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
Komentarz : Use this View or other Views to search and navigate for the appropriate weakness.

Odbiorcy

Interesariusz Opis
Software Developers By following the CWE Top 25, developers are able to significantly reduce the number of weaknesses that occur in their software.
Product Customers Customers can use the weaknesses in this view in order to formulate independent evidence of a claim by a product vendor to have eliminated / mitigated the most dangerous weaknesses.
Educators Educators can use this view to focus curriculum and teachings on the most dangerous weaknesses.

Zgłoszenie

Nazwa Organizacja Data Data wydania Version
CWE Content Team MITRE 2023-06-26 +00:00 2023-06-29 +00:00 4.12

Modyfikacje

Nazwa Organizacja Data Komentarz
CWE Content Team MITRE 2024-11-19 +00:00 updated References

Odniesienia

REF-1344

2023 CWE Top 25 Most Dangerous Software Weaknesses
https://cwe.mitre.org/top25/archive/2023/2023_cwe_top25.html

Informacje prezentowane na CVE Find pochodzą z kilku starannie wybranych źródeł referencyjnych. Dane CVE są dostarczane przez MITRE Corporation i Narodową Bazę Podatności (NVD). Katalog znanych eksploatowanych podatności (KEV) pochodzi z Agencji ds. Bezpieczeństwa Cyberprzestrzeni i Infrastruktury (CISA), natomiast wyniki EPSS pochodzą z FIRST.org. Ponadto dane dotyczące słabości oprogramowania (CWE) i typowych wzorców ataków (CAPEC) są utrzymywane przez MITRE Corporation, a informacje o konfiguracjach sprzętu i oprogramowania (CPE) są dostarczane przez NVD.