| CWE |
Name |
|
Actions |
| CWE-579 |
J2EE Bad Practices: Non-serializable Object Stored in Session |
|
|
| CWE-578 |
EJB Bad Practices: Use of Class Loader |
|
|
| CWE-577 |
EJB Bad Practices: Use of Sockets |
|
|
| CWE-576 |
EJB Bad Practices: Use of Java I/O |
|
|
| CWE-575 |
EJB Bad Practices: Use of AWT Swing |
|
|
| CWE-574 |
EJB Bad Practices: Use of Synchronization Primitives |
|
|
| CWE-573 |
Improper Following of Specification by Caller |
|
|
| CWE-572 |
Call to Thread run() instead of start() |
|
|
| CWE-571 |
Expression is Always True |
|
|
| CWE-570 |
Expression is Always False |
|
|
| CWE-57 |
Path Equivalence: 'fakedir/../realdir/filename' |
|
|
| CWE-569 |
Expression Issues |
|
|
| CWE-568 |
finalize() Method Without super.finalize() |
|
|
| CWE-567 |
Unsynchronized Access to Shared Data in a Multithreaded Context |
|
|
| CWE-566 |
Authorization Bypass Through User-Controlled SQL Primary Key |
|
|
| CWE-565 |
Reliance on Cookies without Validation and Integrity Checking |
|
|
| CWE-564 |
SQL Injection: Hibernate |
|
|
| CWE-563 |
Assignment to Variable without Use |
|
|
| CWE-562 |
Return of Stack Variable Address |
|
|
| CWE-561 |
Dead Code |
|
|
| CWE-560 |
Use of umask() with chmod-style Argument |
|
|
| CWE-56 |
Path Equivalence: 'filedir*' (Wildcard) |
|
|
| CWE-559 |
DEPRECATED: Often Misused: Arguments and Parameters |
|
|
| CWE-558 |
Use of getlogin() in Multithreaded Application |
|
|
| CWE-557 |
Concurrency Issues |
|
|
| CWE-556 |
ASP.NET Misconfiguration: Use of Identity Impersonation |
|
|
| CWE-555 |
J2EE Misconfiguration: Plaintext Password in Configuration File |
|
|
| CWE-554 |
ASP.NET Misconfiguration: Not Using Input Validation Framework |
|
|
| CWE-553 |
Command Shell in Externally Accessible Directory |
|
|
| CWE-552 |
Files or Directories Accessible to External Parties |
|
|
| CWE-551 |
Incorrect Behavior Order: Authorization Before Parsing and Canonicalization |
|
|
| CWE-550 |
Server-generated Error Message Containing Sensitive Information |
|
|
| CWE-55 |
Path Equivalence: '/./' (Single Dot Directory) |
|
|
| CWE-549 |
Missing Password Field Masking |
|
|
| CWE-548 |
Exposure of Information Through Directory Listing |
|
|
| CWE-547 |
Use of Hard-coded, Security-relevant Constants |
|
|
| CWE-546 |
Suspicious Comment |
|
|
| CWE-545 |
DEPRECATED: Use of Dynamic Class Loading |
|
|
| CWE-544 |
Missing Standardized Error Handling Mechanism |
|
|
| CWE-543 |
Use of Singleton Pattern Without Synchronization in a Multithreaded Context |
|
|
