| CWE |
Name |
|
Actions |
| CWE-542 |
DEPRECATED: Information Exposure Through Cleanup Log Files |
|
|
| CWE-541 |
Inclusion of Sensitive Information in an Include File |
|
|
| CWE-540 |
Inclusion of Sensitive Information in Source Code |
|
|
| CWE-54 |
Path Equivalence: 'filedir\' (Trailing Backslash) |
|
|
| CWE-539 |
Use of Persistent Cookies Containing Sensitive Information |
|
|
| CWE-538 |
Insertion of Sensitive Information into Externally-Accessible File or Directory |
|
|
| CWE-537 |
Java Runtime Error Message Containing Sensitive Information |
|
|
| CWE-536 |
Servlet Runtime Error Message Containing Sensitive Information |
|
|
| CWE-535 |
Exposure of Information Through Shell Error Message |
|
|
| CWE-534 |
DEPRECATED: Information Exposure Through Debug Log Files |
|
|
| CWE-533 |
DEPRECATED: Information Exposure Through Server Log Files |
|
|
| CWE-532 |
Insertion of Sensitive Information into Log File |
|
|
| CWE-531 |
Inclusion of Sensitive Information in Test Code |
|
|
| CWE-530 |
Exposure of Backup File to an Unauthorized Control Sphere |
|
|
| CWE-53 |
Path Equivalence: '\multiple\\internal\backslash' |
|
|
| CWE-529 |
Exposure of Access Control List Files to an Unauthorized Control Sphere |
|
|
| CWE-528 |
Exposure of Core Dump File to an Unauthorized Control Sphere |
|
|
| CWE-527 |
Exposure of Version-Control Repository to an Unauthorized Control Sphere |
|
|
| CWE-526 |
Cleartext Storage of Sensitive Information in an Environment Variable |
|
|
| CWE-525 |
Use of Web Browser Cache Containing Sensitive Information |
|
|
| CWE-524 |
Use of Cache Containing Sensitive Information |
|
|
| CWE-523 |
Unprotected Transport of Credentials |
|
|
| CWE-522 |
Insufficiently Protected Credentials |
|
|
| CWE-521 |
Weak Password Requirements |
|
|
| CWE-520 |
.NET Misconfiguration: Use of Impersonation |
|
|
| CWE-52 |
Path Equivalence: '/multiple/trailing/slash//' |
|
|
| CWE-519 |
DEPRECATED: .NET Environment Issues |
|
|
| CWE-518 |
DEPRECATED: Inadvertently Introduced Weakness |
|
|
| CWE-517 |
DEPRECATED: Other Intentional, Nonmalicious Weakness |
|
|
| CWE-516 |
DEPRECATED: Covert Timing Channel |
|
|
| CWE-515 |
Covert Storage Channel |
|
|
| CWE-514 |
Covert Channel |
|
|
| CWE-513 |
DEPRECATED: Intentionally Introduced Nonmalicious Weakness |
|
|
| CWE-512 |
Spyware |
|
|
| CWE-511 |
Logic/Time Bomb |
|
|
| CWE-510 |
Trapdoor |
|
|
| CWE-51 |
Path Equivalence: '/multiple//internal/slash' |
|
|
| CWE-509 |
Replicating Malicious Code (Virus or Worm) |
|
|
| CWE-508 |
Non-Replicating Malicious Code |
|
|
| CWE-507 |
Trojan Horse |
|
|
