Tên: Weaknesses Addressed by the SEI CERT Perl Coding Standard

CWE entries in this view (graph) are fully or partially eliminated by following the guidance presented in the online wiki that reflects that current rules and recommendations of the SEI CERT Perl Coding Standard.

Thành viên CWE

CWE-1179: SEI CERT Perl Coding Standard - Guidelines 01. Input Validation and Data Sanitization (IDS) Danh mục

CWE-1179: Weaknesses in this category are related to the rules and recommendations in the Input Validation and Data Sanitization (IDS) section of the SEI CERT Perl Coding Standard.

CWE-22: Improper Limitation of a Pathname to a Restricted Directory Cơ sở

CWE-134: Use of Externally-Controlled Format String Cơ sở

CWE-129: Improper Validation of Array Index Cơ sở

CWE-789: Memory Allocation with Excessive Size Value Cơ sở

CWE-116: Improper Encoding or Escaping of Output Cơ sở

CWE-77: Improper Neutralization of Special Elements used in a Command Cơ sở

CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code Cơ sở

CWE-1180: SEI CERT Perl Coding Standard - Guidelines 02. Declarations and Initialization (DCL) Danh mục

CWE-1180: Weaknesses in this category are related to the rules and recommendations in the Declarations and Initialization (DCL) section of the SEI CERT Perl Coding Standard.

CWE-628: Function Call with Incorrectly Specified Arguments Cơ sở

CWE-456: Missing Initialization of a Variable Cơ sở

CWE-457: Use of Uninitialized Variable Cơ sở

CWE-477: Use of Obsolete Function Cơ sở

CWE-1181: SEI CERT Perl Coding Standard - Guidelines 03. Expressions (EXP) Danh mục

CWE-1181: Weaknesses in this category are related to the rules and recommendations in the Expressions (EXP) section of the SEI CERT Perl Coding Standard.

CWE-394: Unexpected Status Code or Return Value Cơ sở

CWE-783: Operator Precedence Logic Error Cơ sở

CWE-477: Use of Obsolete Function Cơ sở

CWE-248: Uncaught Exception Cơ sở

CWE-391: DEPRECATED: Unchecked Error Condition Cơ sở

CWE-460: Improper Cleanup on Thrown Exception Cơ sở

CWE-705: Incorrect Control Flow Scoping Cơ sở

CWE-754: Improper Check for Unusual or Exceptional Conditions Cơ sở

CWE-252: Unchecked Return Value Cơ sở

CWE-690: Unchecked Return Value to NULL Pointer Dereference Cơ sở

CWE-628: Function Call with Incorrectly Specified Arguments Cơ sở

CWE-375: Returning a Mutable Object to an Untrusted Caller Cơ sở

CWE-597: Use of Wrong Operator in String Comparison Cơ sở

CWE-1182: SEI CERT Perl Coding Standard - Guidelines 04. Integers (INT) Danh mục

CWE-1182: Weaknesses in this category are related to the rules and recommendations in the Integers (INT) section of the SEI CERT Perl Coding Standard.

CWE-189: Numeric Errors Danh mục

CWE-1183: SEI CERT Perl Coding Standard - Guidelines 05. Strings (STR) Danh mục

CWE-1183: Weaknesses in this category are related to the rules and recommendations in the Strings (STR) section of the SEI CERT Perl Coding Standard.

CWE-1184: SEI CERT Perl Coding Standard - Guidelines 06. Object-Oriented Programming (OOP) Danh mục

CWE-1184: Weaknesses in this category are related to the rules and recommendations in the Object-Oriented Programming (OOP) section of the SEI CERT Perl Coding Standard.

CWE-767: Access to Critical Private Variable via Public Method Cơ sở

CWE-1185: SEI CERT Perl Coding Standard - Guidelines 07. File Input and Output (FIO) Danh mục

CWE-1185: Weaknesses in this category are related to the rules and recommendations in the File Input and Output (FIO) section of the SEI CERT Perl Coding Standard.

CWE-59: Improper Link Resolution Before File Access Cơ sở

CWE-1186: SEI CERT Perl Coding Standard - Guidelines 50. Miscellaneous (MSC) Danh mục

CWE-1186: Weaknesses in this category are related to the rules and recommendations in the Miscellaneous (MSC) section of the SEI CERT Perl Coding Standard.

CWE-561: Dead Code Cơ sở

CWE-563: Assignment to Variable without Use Cơ sở

Thông tin chế độ xem CWE

Ghi chú ánh xạ lỗ hổng

Lý do : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
Bình luận : Use this View or other Views to search and navigate for the appropriate weakness.

Ghi chú

The relationships in this view were determined based on specific statements within the rules from the standard. Not all rules have direct relationships to individual weaknesses, although they likely have chaining relationships in specific circumstances.

Đối tượng

Bên liên quan	Mô tả
Software Developers	By following the SEI CERT Perl Coding Standard, developers will be able to fully or partially prevent the weaknesses that are identified in this view. In addition, developers can use a CWE coverage graph to determine which weaknesses are not directly addressed by the standard, which will help identify and resolve remaining gaps in training, tool acquisition, or other approaches for reducing weaknesses.
Product Customers	If a software developer claims to be following the SEI CERT Perl Coding Standard, then customers can search for the weaknesses in this view in order to formulate independent evidence of that claim.
Educators	Educators can use this view in multiple ways. For example, if there is a focus on teaching weaknesses, the educator could link them to the relevant Secure Coding Standard.

Gửi

Tên	Tổ chức	Ngày	Ngày phát hành	Version
CWE Content Team	MITRE	2019-01-08 +00:00	2019-06-20 +00:00	3.3

Sửa đổi

Tên	Tổ chức	Ngày	Bình luận
CWE Content Team	MITRE	2020-02-24 +00:00	updated View_Audience
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes

Tài liệu tham khảo

REF-1011

SEI CERT Perl Coding Standard
The Software Engineering Institute.
https://wiki.sei.cmu.edu/confluence/display/perl/SEI+CERT+Perl+Coding+Standard

Chi tiết chế độ xem CWE-1178

CWE-1178