CWE 弱点
CWE 基础字段与弱点分类查询。
| CWE ID | 名称 | 抽象级别 | 结构 | 状态 | 操作 |
|---|---|---|---|---|---|
| CWE-81 | Improper Neutralization of Script in an Error Message Web Page | Variant | Simple | Incomplete | |
| CWE-82 | Improper Neutralization of Script in Attributes of IMG Tags in a Web Page | Variant | Simple | Incomplete | |
| CWE-820 | Missing Synchronization | Base | Simple | Incomplete | |
| CWE-821 | Incorrect Synchronization | Base | Simple | Incomplete | |
| CWE-822 | Untrusted Pointer Dereference | Base | Simple | Incomplete | |
| CWE-823 | Use of Out-of-range Pointer Offset | Base | Simple | Incomplete | |
| CWE-824 | Access of Uninitialized Pointer | Base | Simple | Incomplete | |
| CWE-825 | Expired Pointer Dereference | Base | Simple | Incomplete | |
| CWE-826 | Premature Release of Resource During Expected Lifetime | Base | Simple | Incomplete | |
| CWE-827 | Improper Control of Document Type Definition | Variant | Simple | Incomplete | |
| CWE-828 | Signal Handler with Functionality that is not Asynchronous-Safe | Variant | Simple | Incomplete | |
| CWE-829 | Inclusion of Functionality from Untrusted Control Sphere | Base | Simple | Incomplete | |
| CWE-83 | Improper Neutralization of Script in Attributes in a Web Page | Variant | Simple | Draft | |
| CWE-830 | Inclusion of Web Functionality from an Untrusted Source | Variant | Simple | Incomplete | |
| CWE-831 | Signal Handler Function Associated with Multiple Signals | Variant | Simple | Incomplete | |
| CWE-832 | Unlock of a Resource that is not Locked | Base | Simple | Incomplete | |
| CWE-833 | Deadlock | Base | Simple | Incomplete | |
| CWE-834 | Excessive Iteration | Class | Simple | Incomplete | |
| CWE-835 | Loop with Unreachable Exit Condition ('Infinite Loop') | Base | Simple | Incomplete | |
| CWE-836 | Use of Password Hash Instead of Password for Authentication | Base | Simple | Incomplete |