CWE弱点浏览
Common Weakness Enumeration（通用弱点枚举）- 软件和硬件安全弱点的社区开发列表
总弱点数
969
分类数
410
视图数
56
CWE弱点列表 共 969 条
| CWE ID | 名称 | 抽象级别 | 状态 | 操作 |
|---|---|---|---|---|
| CWE-767 | Access to Critical Private Variable via Public Method | Base | Incomplete | 查看详情 |
| CWE-768 | Incorrect Short Circuit Evaluation | Variant | Incomplete | 查看详情 |
| CWE-769 | DEPRECATED: Uncontrolled File Descriptor Consumption | Base | Deprecated | 查看详情 |
| CWE-770 | Allocation of Resources Without Limits or Throttling | Base | Incomplete | 查看详情 |
| CWE-771 | Missing Reference to Active Allocated Resource | Base | Incomplete | 查看详情 |
| CWE-772 | Missing Release of Resource after Effective Lifetime | Base | Draft | 查看详情 |
| CWE-773 | Missing Reference to Active File Descriptor or Handle | Variant | Incomplete | 查看详情 |
| CWE-774 | Allocation of File Descriptors or Handles Without Limits or Throttling | Variant | Incomplete | 查看详情 |
| CWE-775 | Missing Release of File Descriptor or Handle after Effective Lifetime | Variant | Incomplete | 查看详情 |
| CWE-776 | Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') | Base | Draft | 查看详情 |
| CWE-777 | Regular Expression without Anchors | Variant | Incomplete | 查看详情 |
| CWE-778 | Insufficient Logging | Base | Draft | 查看详情 |
| CWE-779 | Logging of Excessive Data | Base | Draft | 查看详情 |
| CWE-780 | Use of RSA Algorithm without OAEP | Variant | Incomplete | 查看详情 |
| CWE-781 | Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code | Variant | Draft | 查看详情 |
| CWE-782 | Exposed IOCTL with Insufficient Access Control | Variant | Draft | 查看详情 |
| CWE-783 | Operator Precedence Logic Error | Base | Draft | 查看详情 |
| CWE-784 | Reliance on Cookies without Validation and Integrity Checking in a Security Decision | Variant | Draft | 查看详情 |
| CWE-785 | Use of Path Manipulation Function without Maximum-sized Buffer | Variant | Incomplete | 查看详情 |
| CWE-786 | Access of Memory Location Before Start of Buffer | Base | Incomplete | 查看详情 |