Categories (CWE)

Search

Categories (CWE)

CWE Name Actions
CWE-506 Embedded Malicious Code
CWE-505 DEPRECATED: Intentionally Introduced Weakness
CWE-504 DEPRECATED: Motivation/Intent
CWE-503 DEPRECATED: Byte/Object Code
CWE-502 Deserialization of Untrusted Data
CWE-501 Trust Boundary Violation
CWE-500 Public Static Field Not Marked Final
CWE-50 Path Equivalence: '//multiple/leading/slash'
CWE-5 J2EE Misconfiguration: Data Transmission Without Encryption
CWE-499 Serializable Class Containing Sensitive Data
CWE-498 Cloneable Class Containing Sensitive Information
CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
CWE-496 Public Data Assigned to Private Array-Typed Field
CWE-495 Private Data Structure Returned From A Public Method
CWE-494 Download of Code Without Integrity Check
CWE-493 Critical Public Variable Without Final Modifier
CWE-492 Use of Inner Class Containing Sensitive Data
CWE-491 Public cloneable() Method Without Final ('Object Hijack')
CWE-490 DEPRECATED: Mobile Code Issues
CWE-49 Path Equivalence: 'filename/' (Trailing Slash)
CWE-489 Active Debug Code
CWE-488 Exposure of Data Element to Wrong Session
CWE-487 Reliance on Package-level Scope
CWE-486 Comparison of Classes by Name
CWE-485 7PK - Encapsulation
CWE-484 Omitted Break Statement in Switch
CWE-483 Incorrect Block Delimitation
CWE-482 Comparing instead of Assigning
CWE-481 Assigning instead of Comparing
CWE-480 Use of Incorrect Operator
CWE-48 Path Equivalence: 'file name' (Internal Whitespace)
CWE-479 Signal Handler Use of a Non-reentrant Function
CWE-478 Missing Default Case in Multiple Condition Expression
CWE-477 Use of Obsolete Function
CWE-476 NULL Pointer Dereference
CWE-475 Undefined Behavior for Input to API
CWE-474 Use of Function with Inconsistent Implementations
CWE-473 PHP External Variable Modification
CWE-472 External Control of Assumed-Immutable Web Parameter
CWE-471 Modification of Assumed-Immutable Data (MAID)