CWE 弱点
CWE 基础字段与弱点分类查询。
| CWE ID | 名称 | 抽象级别 | 结构 | 状态 | 操作 |
|---|---|---|---|---|---|
| CWE-319 | Cleartext Transmission of Sensitive Information | Base | Simple | Draft | |
| CWE-32 | Path Traversal: '...' (Triple Dot) | Variant | Simple | Incomplete | |
| CWE-321 | Use of Hard-coded Cryptographic Key | Variant | Simple | Draft | |
| CWE-322 | Key Exchange without Entity Authentication | Base | Simple | Draft | |
| CWE-323 | Reusing a Nonce, Key Pair in Encryption | Base | Simple | Incomplete | |
| CWE-324 | Use of a Key Past its Expiration Date | Base | Simple | Draft | |
| CWE-325 | Missing Cryptographic Step | Base | Simple | Draft | |
| CWE-326 | Inadequate Encryption Strength | Class | Simple | Draft | |
| CWE-327 | Use of a Broken or Risky Cryptographic Algorithm | Class | Simple | Draft | |
| CWE-328 | Use of Weak Hash | Base | Simple | Draft | |
| CWE-329 | Generation of Predictable IV with CBC Mode | Variant | Simple | Draft | |
| CWE-33 | Path Traversal: '....' (Multiple Dot) | Variant | Simple | Incomplete | |
| CWE-330 | Use of Insufficiently Random Values | Class | Simple | Stable | |
| CWE-331 | Insufficient Entropy | Base | Simple | Draft | |
| CWE-332 | Insufficient Entropy in PRNG | Variant | Simple | Draft | |
| CWE-333 | Improper Handling of Insufficient Entropy in TRNG | Variant | Simple | Draft | |
| CWE-334 | Small Space of Random Values | Base | Simple | Draft | |
| CWE-335 | Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) | Base | Simple | Draft | |
| CWE-336 | Same Seed in Pseudo-Random Number Generator (PRNG) | Variant | Simple | Draft | |
| CWE-337 | Predictable Seed in Pseudo-Random Number Generator (PRNG) | Variant | Simple | Draft |