CWE 弱点
CWE 基础字段与弱点分类查询。
| CWE ID | 名称 | 抽象级别 | 结构 | 状态 | 操作 |
|---|---|---|---|---|---|
| CWE-546 | Suspicious Comment | Variant | Simple | Draft | |
| CWE-547 | Use of Hard-coded, Security-relevant Constants | Base | Simple | Draft | |
| CWE-548 | Exposure of Information Through Directory Listing | Variant | Simple | Draft | |
| CWE-549 | Missing Password Field Masking | Base | Simple | Draft | |
| CWE-55 | Path Equivalence: '/./' (Single Dot Directory) | Variant | Simple | Incomplete | |
| CWE-550 | Server-generated Error Message Containing Sensitive Information | Variant | Simple | Incomplete | |
| CWE-551 | Incorrect Behavior Order: Authorization Before Parsing and Canonicalization | Base | Simple | Incomplete | |
| CWE-552 | Files or Directories Accessible to External Parties | Base | Simple | Draft | |
| CWE-553 | Command Shell in Externally Accessible Directory | Variant | Simple | Incomplete | |
| CWE-554 | ASP.NET Misconfiguration: Not Using Input Validation Framework | Variant | Simple | Draft | |
| CWE-555 | J2EE Misconfiguration: Plaintext Password in Configuration File | Variant | Simple | Draft | |
| CWE-556 | ASP.NET Misconfiguration: Use of Identity Impersonation | Variant | Simple | Incomplete | |
| CWE-558 | Use of getlogin() in Multithreaded Application | Variant | Simple | Draft | |
| CWE-56 | Path Equivalence: 'filedir*' (Wildcard) | Variant | Simple | Incomplete | |
| CWE-560 | Use of umask() with chmod-style Argument | Variant | Simple | Draft | |
| CWE-561 | Dead Code | Base | Simple | Draft | |
| CWE-562 | Return of Stack Variable Address | Base | Simple | Draft | |
| CWE-563 | Assignment to Variable without Use | Base | Simple | Draft | |
| CWE-564 | SQL Injection: Hibernate | Variant | Simple | Incomplete | |
| CWE-565 | Reliance on Cookies without Validation and Integrity Checking | Base | Simple | Incomplete |