CWE 弱点
CWE 基础字段与弱点分类查询。
| CWE ID | 名称 | 抽象级别 | 结构 | 状态 | 操作 |
|---|---|---|---|---|---|
| CWE-357 | Insufficient UI Warning of Dangerous Operations | Base | Simple | Draft | |
| CWE-358 | Improperly Implemented Security Check for Standard | Base | Simple | Draft | |
| CWE-359 | Exposure of Private Personal Information to an Unauthorized Actor | Base | Simple | Incomplete | |
| CWE-36 | Absolute Path Traversal | Base | Simple | Draft | |
| CWE-360 | Trust of System Event Data | Base | Simple | Incomplete | |
| CWE-362 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') | Class | Simple | Draft | |
| CWE-363 | Race Condition Enabling Link Following | Base | Simple | Draft | |
| CWE-364 | Signal Handler Race Condition | Base | Simple | Incomplete | |
| CWE-365 | DEPRECATED: Race Condition in Switch | Base | Simple | Deprecated | |
| CWE-366 | Race Condition within a Thread | Base | Simple | Draft | |
| CWE-367 | Time-of-check Time-of-use (TOCTOU) Race Condition | Base | Simple | Incomplete | |
| CWE-368 | Context Switching Race Condition | Base | Simple | Draft | |
| CWE-369 | Divide By Zero | Base | Simple | Draft | |
| CWE-37 | Path Traversal: '/absolute/pathname/here' | Variant | Simple | Draft | |
| CWE-370 | Missing Check for Certificate Revocation after Initial Check | Variant | Simple | Draft | |
| CWE-372 | Incomplete Internal State Distinction | Base | Simple | Draft | |
| CWE-373 | DEPRECATED: State Synchronization Error | Base | Simple | Deprecated | |
| CWE-374 | Passing Mutable Objects to an Untrusted Method | Base | Simple | Draft | |
| CWE-375 | Returning a Mutable Object to an Untrusted Caller | Base | Simple | Draft | |
| CWE-377 | Insecure Temporary File | Class | Simple | Incomplete |