CWE 弱点
CWE 基础字段与弱点分类查询。
| CWE ID | 名称 | 抽象级别 | 结构 | 状态 | 操作 |
|---|---|---|---|---|---|
| CWE-566 | Authorization Bypass Through User-Controlled SQL Primary Key | Variant | Simple | Incomplete | |
| CWE-567 | Unsynchronized Access to Shared Data in a Multithreaded Context | Base | Simple | Draft | |
| CWE-568 | finalize() Method Without super.finalize() | Variant | Simple | Draft | |
| CWE-57 | Path Equivalence: 'fakedir/../realdir/filename' | Variant | Simple | Incomplete | |
| CWE-570 | Expression is Always False | Base | Simple | Draft | |
| CWE-571 | Expression is Always True | Base | Simple | Draft | |
| CWE-572 | Call to Thread run() instead of start() | Variant | Simple | Draft | |
| CWE-573 | Improper Following of Specification by Caller | Class | Simple | Draft | |
| CWE-574 | EJB Bad Practices: Use of Synchronization Primitives | Variant | Simple | Draft | |
| CWE-575 | EJB Bad Practices: Use of AWT Swing | Variant | Simple | Draft | |
| CWE-576 | EJB Bad Practices: Use of Java I/O | Variant | Simple | Draft | |
| CWE-577 | EJB Bad Practices: Use of Sockets | Variant | Simple | Draft | |
| CWE-578 | EJB Bad Practices: Use of Class Loader | Variant | Simple | Draft | |
| CWE-579 | J2EE Bad Practices: Non-serializable Object Stored in Session | Variant | Simple | Draft | |
| CWE-58 | Path Equivalence: Windows 8.3 Filename | Variant | Simple | Incomplete | |
| CWE-580 | clone() Method Without super.clone() | Variant | Simple | Draft | |
| CWE-581 | Object Model Violation: Just One of Equals and Hashcode Defined | Variant | Simple | Draft | |
| CWE-582 | Array Declared Public, Final, and Static | Variant | Simple | Draft | |
| CWE-583 | finalize() Method Declared Public | Variant | Simple | Incomplete | |
| CWE-584 | Return Inside Finally Block | Base | Simple | Draft |