繁體中文

CWE-1425 檢視詳細資料

CWE-1425

Weaknesses in the 2023 CWE Top 25 Most Dangerous Software Weaknesses
2023-06-26 +00:00
Draft
Graph
2024-11-19 +00:00
CWE Mitre.org
指定 CWE 通知
掌握特定 CWE 的任何變更。
管理通知

名稱: Weaknesses in the 2023 CWE Top 25 Most Dangerous Software Weaknesses

CWE entries in this view are listed in the 2023 CWE Top 25 Most Dangerous Software Weaknesses.

CWE 成員

CWE-787: Out-of-bounds Write 基礎

CWE-79: Improper Neutralization of Input During Web Page Generation 基礎

CWE-89: Improper Neutralization of Special Elements used in an SQL Command 基礎

CWE-416: Use After Free 基礎

CWE-78: Improper Neutralization of Special Elements used in an OS Command 基礎

CWE-20: Improper Input Validation 基礎

CWE-125: Out-of-bounds Read 基礎

CWE-22: Improper Limitation of a Pathname to a Restricted Directory 基礎

CWE-352: Cross-Site Request Forgery 基礎

CWE-434: Unrestricted Upload of File with Dangerous Type 基礎

CWE-862: Missing Authorization 基礎

CWE-476: NULL Pointer Dereference 基礎

CWE-287: Improper Authentication 基礎

CWE-190: Integer Overflow or Wraparound 基礎

CWE-502: Deserialization of Untrusted Data 基礎

CWE-77: Improper Neutralization of Special Elements used in a Command 基礎

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer 基礎

CWE-798: Use of Hard-coded Credentials 基礎

CWE-918: Server-Side Request Forgery 基礎

CWE-306: Missing Authentication for Critical Functionality 基礎

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 基礎

CWE-269: Improper Privilege Management 基礎

CWE-94: Improper Control of Generation of Code 基礎

CWE-863: Incorrect Authorization 基礎

CWE-276: Incorrect Default Permissions 基礎

CWE 檢視資訊

漏洞對應備注

理由說明 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
備註 : Use this View or other Views to search and navigate for the appropriate weakness.

受眾

相關方 描述
Software Developers By following the CWE Top 25, developers are able to significantly reduce the number of weaknesses that occur in their software.
Product Customers Customers can use the weaknesses in this view in order to formulate independent evidence of a claim by a product vendor to have eliminated / mitigated the most dangerous weaknesses.
Educators Educators can use this view to focus curriculum and teachings on the most dangerous weaknesses.

提交

名稱 機構 日期 發布日期 Version
CWE Content Team MITRE 2023-06-26 +00:00 2023-06-29 +00:00 4.12

修改記錄

名稱 機構 日期 備註
CWE Content Team MITRE 2024-11-19 +00:00 updated References

參考資料

REF-1344

2023 CWE Top 25 Most Dangerous Software Weaknesses
https://cwe.mitre.org/top25/archive/2023/2023_cwe_top25.html

cvefind.com 上呈現的資訊來自多個精心挑選的參考來源。CVE 資料由 MITRE Corporation 和 國家漏洞資料庫（NVD）提供。已知被利用漏洞（KEV）目錄來自 網路安全暨基礎設施安全局（CISA），而 EPSS 評分來自 FIRST.org。此外，軟體弱點（CWE）和常見攻擊模式（CAPEC）的資料由 MITRE Corporation 維護，硬軟體配置（CPE）資訊由 NVD 提供。