繁體中文

CWE-1128 檢視詳細資料

CWE-1128

CISQ Quality Measures (2016)
2018-07-23 +00:00
Incomplete
Graph
2025-09-09 +00:00
CWE Mitre.org
指定 CWE 通知
掌握特定 CWE 的任何變更。
管理通知

名稱: CISQ Quality Measures (2016)

This view outlines the most important software quality issues as identified by the Consortium for Information & Software Quality (CISQ) Automated Quality Characteristic Measures, released in 2016. These measures are derived from Object Management Group (OMG) standards.

CWE 成員

CWE-1129: Weaknesses in this category are related to the CISQ Quality Measures for Reliability, as documented in 2016 with the Automated Source Code CISQ Reliability Measure (ASCRM) Specification 1.0. Presence of these weaknesses could reduce the reliability of the software.
CWE-120: Buffer Copy without Checking Size of Input 基礎
CWE-252: Unchecked Return Value 基礎
CWE-396: Declaration of Catch for Generic Exception 基礎
CWE-397: Declaration of Throws for Generic Exception 基礎
CWE-456: Missing Initialization of a Variable 基礎
CWE-674: Uncontrolled Recursion 基礎
CWE-704: Incorrect Type Conversion or Cast 基礎
CWE-772: Missing Release of Resource after Effective Lifetime 基礎
CWE-788: Access of Memory Location After End of Buffer 基礎
CWE-1045: Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor 基礎
CWE-1047: Modules with Circular Dependencies 基礎
CWE-1051: Initialization with Hard-Coded Network Resource Configuration Data 基礎
CWE-1056: Invokable Control Element with Variadic Parameters 基礎
CWE-1058: Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element 基礎
CWE-1062: Parent Class with References to Child Class 基礎
CWE-1065: Runtime Resource Management Control Element in a Component Built to Run on Application Servers 基礎
CWE-1066: Missing Serialization Control Element 基礎
CWE-1069: Empty Exception Block 基礎
CWE-1070: Serializable Data Element Containing non-Serializable Item Elements 基礎
CWE-1077: Floating Point Comparison with Incorrect Operator 基礎
CWE-1079: Parent Class without Virtual Destructor Method 基礎
CWE-1082: Class Instance Self Destruction Control Element 基礎
CWE-1083: Data Access from Outside Expected Data Manager Component 基礎
CWE-1087: Class with Virtual Method without a Virtual Destructor 基礎
CWE-1088: Synchronous Access of Remote Resource without Timeout 基礎
CWE-1097: Persistent Storable Data Element without Associated Comparison Control Element 基礎
CWE-1096: Singleton Class Instance Creation without Proper Locking or Synchronization 基礎
CWE-1098: Data Element containing Pointer Item without Proper Copy Control Element 基礎
CWE-1130: Weaknesses in this category are related to the CISQ Quality Measures for Maintainability, as documented in 2016 with the Automated Source Code Maintainability Measure (ASCMM) Specification 1.0. Presence of these weaknesses could reduce the maintainability of the software.
CWE-561: Dead Code 基礎
CWE-1041: Use of Redundant Code 基礎
CWE-1044: Architecture with Number of Horizontal Layers Outside of Expected Range 基礎
CWE-1047: Modules with Circular Dependencies 基礎
CWE-1048: Invokable Control Element with Large Number of Outward Calls 基礎
CWE-1052: Excessive Use of Hard-Coded Literals in Initialization 基礎
CWE-1054: Invocation of a Control Element at an Unnecessarily Deep Horizontal Layer 基礎
CWE-1055: Multiple Inheritance from Concrete Classes 基礎
CWE-1064: Invokable Control Element with Signature Containing an Excessive Number of Parameters 基礎
CWE-1074: Class with Excessively Deep Inheritance 基礎
CWE-1075: Unconditional Control Flow Transfer outside of Switch Block 基礎
CWE-1080: Source Code File with Excessive Number of Lines of Code 基礎
CWE-766: Critical Data Element Declared Public 基礎
CWE-1084: Invokable Control Element with Excessive File or Data Access Operations 基礎
CWE-1085: Invokable Control Element with Excessive Volume of Commented-out Code 基礎
CWE-1086: Class with Excessive Number of Child Classes 基礎
CWE-1090: Method Containing Access of a Member Element from Another Class 基礎
CWE-1092: Use of Same Invokable Control Element in Multiple Architectural Layers 基礎
CWE-1095: Loop Condition Value Update within the Loop 基礎
CWE-1121: Excessive McCabe Cyclomatic Complexity 基礎
CWE-1131: Weaknesses in this category are related to the CISQ Quality Measures for Security, as documented in 2016 with the Automated Source Code Security Measure (ASCSM) Specification 1.0. Presence of these weaknesses could reduce the security of the software.
CWE-22: Improper Limitation of a Pathname to a Restricted Directory 基礎
CWE-78: Improper Neutralization of Special Elements used in an OS Command 基礎
CWE-79: Improper Neutralization of Input During Web Page Generation 基礎
CWE-89: Improper Neutralization of Special Elements used in an SQL Command 基礎
CWE-99: Improper Control of Resource Identifiers 基礎
CWE-120: Buffer Copy without Checking Size of Input 基礎
CWE-129: Improper Validation of Array Index 基礎
CWE-134: Use of Externally-Controlled Format String 基礎
CWE-252: Unchecked Return Value 基礎
CWE-327: Use of a Broken or Risky Cryptographic Algorithm 基礎
CWE-396: Declaration of Catch for Generic Exception 基礎
CWE-397: Declaration of Throws for Generic Exception 基礎
CWE-434: Unrestricted Upload of File with Dangerous Type 基礎
CWE-456: Missing Initialization of a Variable 基礎
CWE-606: Unchecked Input for Loop Condition 基礎
CWE-667: Improper Locking 基礎
CWE-672: Operation on a Resource after Expiration or Release 基礎
CWE-681: Incorrect Conversion between Numeric Types 基礎
CWE-772: Missing Release of Resource after Effective Lifetime 基礎
CWE-789: Memory Allocation with Excessive Size Value 基礎
CWE-798: Use of Hard-coded Credentials 基礎
CWE-835: Loop with Unreachable Exit Condition 基礎

CWE 檢視資訊

漏洞對應備注

理由說明 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
備註 : Use this View or other Views to search and navigate for the appropriate weakness.

受眾

相關方 描述
Software Developers This view provides a good starting point for anyone involved in software development (including architects, designers, coders, and testers) to ensure that code quality issues are considered during the development process.
Product Vendors This view can help product vendors understand code quality issues and convey an overall status of their software.
Assessment Tool Vendors This view provides a good starting point for assessment tool vendors (e.g., vendors selling static analysis tools) who wish to understand what constitutes software with good code quality, and which quality issues may be of concern.

提交

名稱 機構 日期 發布日期 Version
CWE Content Team MITRE 2018-07-23 +00:00 2019-01-03 +00:00 3.2

修改記錄

名稱 機構 日期 備註
CWE Content Team MITRE 2020-02-24 +00:00 updated Description, View_Audience
CWE Content Team MITRE 2020-06-25 +00:00 updated References
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2025-09-09 +00:00 updated References

參考資料

REF-968

Automated Quality Characteristic Measures
Consortium for Information & Software Quality (CISQ).
https://www.it-cisq.org/standards/automated-quality-characteristic-measures-maintainability/

cvefind.com 上呈現的資訊來自多個精心挑選的參考來源。CVE 資料由 MITRE Corporation 和 國家漏洞資料庫（NVD）提供。已知被利用漏洞（KEV）目錄來自 網路安全暨基礎設施安全局（CISA），而 EPSS 評分來自 FIRST.org。此外，軟體弱點（CWE）和常見攻擊模式（CAPEC）的資料由 MITRE Corporation 維護，硬軟體配置（CPE）資訊由 NVD 提供。