CWE 弱点
CWE 基础字段与弱点分类查询。
| CWE ID | 名称 | 抽象级别 | 结构 | 状态 | 操作 |
|---|---|---|---|---|---|
| CWE-378 | Creation of Temporary File With Insecure Permissions | Base | Simple | Draft | |
| CWE-379 | Creation of Temporary File in Directory with Insecure Permissions | Base | Simple | Incomplete | |
| CWE-38 | Path Traversal: '\absolute\pathname\here' | Variant | Simple | Draft | |
| CWE-382 | J2EE Bad Practices: Use of System.exit() | Variant | Simple | Draft | |
| CWE-383 | J2EE Bad Practices: Direct Use of Threads | Variant | Simple | Draft | |
| CWE-384 | Session Fixation | Compound | Composite | Incomplete | |
| CWE-385 | Covert Timing Channel | Base | Simple | Incomplete | |
| CWE-386 | Symbolic Name not Mapping to Correct Object | Base | Simple | Draft | |
| CWE-39 | Path Traversal: 'C:dirname' | Variant | Simple | Draft | |
| CWE-390 | Detection of Error Condition Without Action | Base | Simple | Draft | |
| CWE-391 | Unchecked Error Condition | Base | Simple | Incomplete | |
| CWE-392 | Missing Report of Error Condition | Base | Simple | Draft | |
| CWE-393 | Return of Wrong Status Code | Base | Simple | Draft | |
| CWE-394 | Unexpected Status Code or Return Value | Base | Simple | Draft | |
| CWE-395 | Use of NullPointerException Catch to Detect NULL Pointer Dereference | Base | Simple | Draft | |
| CWE-396 | Declaration of Catch for Generic Exception | Base | Simple | Draft | |
| CWE-397 | Declaration of Throws for Generic Exception | Base | Simple | Draft | |
| CWE-40 | Path Traversal: '\\UNC\share\name\' (Windows UNC Share) | Variant | Simple | Draft | |
| CWE-400 | Uncontrolled Resource Consumption | Class | Simple | Draft | |
| CWE-401 | Missing Release of Memory after Effective Lifetime | Variant | Simple | Draft |