Search
Weaknesses
| CWE | Weakness | Actions |
|---|---|---|
| CWE-423 |
DEPRECATED: Proxied Trusted Channel
This entry has been deprecated because it was a duplicate of CWE-441. All content has been transferred to CWE-441. |
|
| CWE-249 |
DEPRECATED: Often Misused: Path Manipulation
This entry has been deprecated because of name confusion and an accidental combination of multiple weaknesses. Most of its content has been transferred to CWE-785. |
|
| CWE-132 |
DEPRECATED: Miscalculated Null Termination
This entry has been deprecated because it was a duplicate of CWE-170. All content has been transferred to CWE-170. |
|
| CWE-533 |
DEPRECATED: Information Exposure Through Server Log Files
This entry has been deprecated because its abstraction was too low-level. See CWE-532. |
|
| CWE-534 |
DEPRECATED: Information Exposure Through Debug Log Files
This entry has been deprecated because its abstraction was too low-level. See CWE-532. |
|
| CWE-542 |
DEPRECATED: Information Exposure Through Cleanup Log Files
This entry has been deprecated because its abstraction was too low-level. See CWE-532. |
|
| CWE-596 |
DEPRECATED: Incorrect Semantic Object Comparison
This weakness has been deprecated. It was poorly described and difficult to distinguish from other entries. It was also inappropriate to assign a separate ID solely because of domain-specific considerations. Its closest equivalent is CWE-1023. |
|
| CWE-458 |
DEPRECATED: Incorrect Initialization
This weakness has been deprecated because its name and description did not match. The description duplicated CWE-454, while the name suggested a more abstract initialization problem. Please refer to CWE-665 for the more abstract problem. |
|
| CWE-92 |
DEPRECATED: Improper Sanitization of Custom Special Characters
This entry has been deprecated. It originally came from PLOVER, which sometimes defined "other" and "miscellaneous" categories in order to satisfy exhaustiveness requirements for taxonomies. Within the context of CWE, the use of a more abstract entry is preferred in mapping situations. CWE-75 is a more appropriate mapping. |
|
| CWE-443 |
DEPRECATED: HTTP response splitting
This weakness can be found at CWE-113. |
|
| CWE-225 |
DEPRECATED: General Information Management Problems
This weakness can be found at CWE-199. |
|
| CWE-218 |
DEPRECATED: Failure to provide confidentiality for stored data
This weakness has been deprecated because it was a duplicate of CWE-493. All content has been transferred to CWE-493. |
|
| CWE-217 |
DEPRECATED: Failure to Protect Stored Data from Modification
This entry has been deprecated because it incorporated and confused multiple weaknesses. The issues formerly covered in this entry can be found at CWE-766 and CWE-767. |
|
| CWE-516 |
DEPRECATED: Covert Timing Channel
This weakness can be found at CWE-385. |
|
| CWE-216 |
DEPRECATED: Containment Errors (Container Errors)
This entry has been deprecated, as it was not effective as a weakness and was structured more like a category. In addition, the name is inappropriate, since the "container" term is widely understood by developers in different ways than originally intended by PLOVER, the original source for this entry. |
|
| CWE-592 |
DEPRECATED: Authentication Bypass Issues
This weakness has been deprecated because it covered redundant concepts already described in CWE-287. |
|
| CWE-71 |
DEPRECATED: Apple '.DS_Store'
This entry has been deprecated as it represents a specific observed example of a UNIX Hard Link weakness type rather than its own individual weakness type. Please refer to CWE-62. |
|
| CWE-1279 |
Cryptographic Operations are run Before Supporting Units are Ready
Performing cryptographic operations without ensuring that the supporting inputs are ready to supply valid data may compromise the cryptographic result. |
|
| CWE-352 |
Cross-Site Request Forgery (CSRF)
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor. |
|
| CWE-493 |
Critical Public Variable Without Final Modifier
The product has a critical public variable that is not final, which allows the variable to be modified to contain unexpected values. |