简体中文

CWE-1306 类别详情

CWE-1306

CISQ Quality Measures - Reliability
2020-08-20 +00:00
Incomplete
2023-06-29 +00:00
CWE Mitre.org
指定 CWE 通知
随时了解指定 CWE 的变更。
管理通知

名称: CISQ Quality Measures - Reliability

Weaknesses in this category are related to the CISQ Quality Measures for Reliability. Presence of these weaknesses could reduce the reliability of the software.

CWE 成员列表

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer 基础

CWE-170: Improper Null Termination 基础

CWE-252: Unchecked Return Value 基础

CWE-390: Detection of Error Condition Without Action 基础

CWE-394: Unexpected Status Code or Return Value 基础

CWE-404: Improper Resource Shutdown or Release 基础

CWE-424: Improper Protection of Alternate Path 基础

CWE-459: Incomplete Cleanup 基础

CWE-476: NULL Pointer Dereference 基础

CWE-480: Use of Incorrect Operator 基础

CWE-484: Omitted Break Statement in Switch 基础

CWE-562: Return of Stack Variable Address 基础

CWE-595: Comparison of Object References Instead of Object Contents 基础

CWE-662: Improper Synchronization 基础

CWE-665: Improper Initialization 基础

CWE-672: Operation on a Resource after Expiration or Release 基础

CWE-681: Incorrect Conversion between Numeric Types 基础

CWE-682: Incorrect Calculation 基础

CWE-703: Improper Check or Handling of Exceptional Conditions 基础

CWE-704: Incorrect Type Conversion or Cast 基础

CWE-758: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior 基础

CWE-835: Loop with Unreachable Exit Condition 基础

CWE-908: Use of Uninitialized Resource 基础

CWE-1045: Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor 基础

CWE-1051: Initialization with Hard-Coded Network Resource Configuration Data 基础

CWE-1066: Missing Serialization Control Element 基础

CWE-1070: Serializable Data Element Containing non-Serializable Item Elements 基础

CWE-1077: Floating Point Comparison with Incorrect Operator 基础

CWE-1079: Parent Class without Virtual Destructor Method 基础

CWE-1082: Class Instance Self Destruction Control Element 基础

CWE-1083: Data Access from Outside Expected Data Manager Component 基础

CWE-1087: Class with Virtual Method without a Virtual Destructor 基础

CWE-1088: Synchronous Access of Remote Resource without Timeout 基础

CWE-1098: Data Element containing Pointer Item without Proper Copy Control Element 基础

CWE 信息

漏洞映射说明

依据 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
备注 : See member weaknesses of this category.

提交记录

名称 组织 日期 发布日期 Version
CWE Content Team MITRE 2020-08-18 +00:00 2020-08-20 +00:00 4.2

修改记录

名称 组织 日期 备注
CWE Content Team MITRE 2023-04-27 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes

参考资料

REF-1133

Automated Source Code Quality Measures
Consortium for Information & Software Quality (CISQ).
https://www.omg.org/spec/ASCQM/

cvefind.com 上展示的信息来源于多个精心选择的权威数据源。CVE 数据由 MITRE Corporation 和 National Vulnerability Database (NVD) 提供。已知被利用漏洞（KEV）目录来源于 Cybersecurity and Infrastructure Security Agency (CISA)，EPSS 评分来自 FIRST.org。此外，软件弱点（CWE）和常见攻击模式（CAPEC）数据由 MITRE Corporation 维护，硬件和软件配置（CPE）信息由 NVD 提供。