繁體中文

CWE-1306 類別詳細資料

CWE-1306

CISQ Quality Measures - Reliability
2020-08-20 +00:00
Incomplete
2023-06-29 +00:00
CWE Mitre.org
指定 CWE 通知
掌握特定 CWE 的任何變更。
管理通知

名稱: CISQ Quality Measures - Reliability

Weaknesses in this category are related to the CISQ Quality Measures for Reliability. Presence of these weaknesses could reduce the reliability of the software.

CWE 成員列表

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer 基礎

CWE-170: Improper Null Termination 基礎

CWE-252: Unchecked Return Value 基礎

CWE-390: Detection of Error Condition Without Action 基礎

CWE-394: Unexpected Status Code or Return Value 基礎

CWE-404: Improper Resource Shutdown or Release 基礎

CWE-424: Improper Protection of Alternate Path 基礎

CWE-459: Incomplete Cleanup 基礎

CWE-476: NULL Pointer Dereference 基礎

CWE-480: Use of Incorrect Operator 基礎

CWE-484: Omitted Break Statement in Switch 基礎

CWE-562: Return of Stack Variable Address 基礎

CWE-595: Comparison of Object References Instead of Object Contents 基礎

CWE-662: Improper Synchronization 基礎

CWE-665: Improper Initialization 基礎

CWE-672: Operation on a Resource after Expiration or Release 基礎

CWE-681: Incorrect Conversion between Numeric Types 基礎

CWE-682: Incorrect Calculation 基礎

CWE-703: Improper Check or Handling of Exceptional Conditions 基礎

CWE-704: Incorrect Type Conversion or Cast 基礎

CWE-758: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior 基礎

CWE-835: Loop with Unreachable Exit Condition 基礎

CWE-908: Use of Uninitialized Resource 基礎

CWE-1045: Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor 基礎

CWE-1051: Initialization with Hard-Coded Network Resource Configuration Data 基礎

CWE-1066: Missing Serialization Control Element 基礎

CWE-1070: Serializable Data Element Containing non-Serializable Item Elements 基礎

CWE-1077: Floating Point Comparison with Incorrect Operator 基礎

CWE-1079: Parent Class without Virtual Destructor Method 基礎

CWE-1082: Class Instance Self Destruction Control Element 基礎

CWE-1083: Data Access from Outside Expected Data Manager Component 基礎

CWE-1087: Class with Virtual Method without a Virtual Destructor 基礎

CWE-1088: Synchronous Access of Remote Resource without Timeout 基礎

CWE-1098: Data Element containing Pointer Item without Proper Copy Control Element 基礎

CWE 資訊

漏洞對應備注

理由說明 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
備註 : See member weaknesses of this category.

提交

名稱 機構 日期 發布日期 Version
CWE Content Team MITRE 2020-08-18 +00:00 2020-08-20 +00:00 4.2

修改記錄

名稱 機構 日期 備註
CWE Content Team MITRE 2023-04-27 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes

參考資料

REF-1133

Automated Source Code Quality Measures
Consortium for Information & Software Quality (CISQ).
https://www.omg.org/spec/ASCQM/

cvefind.com 上呈現的資訊來自多個精心挑選的參考來源。CVE 資料由 MITRE Corporation 和 國家漏洞資料庫（NVD）提供。已知被利用漏洞（KEV）目錄來自 網路安全暨基礎設施安全局（CISA），而 EPSS 評分來自 FIRST.org。此外，軟體弱點（CWE）和常見攻擊模式（CAPEC）的資料由 MITRE Corporation 維護，硬軟體配置（CPE）資訊由 NVD 提供。