CWE弱点浏览
Common Weakness Enumeration（通用弱点枚举）- 软件和硬件安全弱点的社区开发列表
总弱点数
969
分类数
410
视图数
56
CWE弱点列表 共 969 条
| CWE ID | 名称 | 抽象级别 | 状态 | 操作 |
|---|---|---|---|---|
| CWE-75 | Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) | Class | Draft | 查看详情 |
| CWE-76 | Improper Neutralization of Equivalent Special Elements | Base | Draft | 查看详情 |
| CWE-77 | Improper Neutralization of Special Elements used in a Command ('Command Injection') | Class | Draft | 查看详情 |
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | Base | Stable | 查看详情 |
| CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Base | Stable | 查看详情 |
| CWE-80 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | Variant | Incomplete | 查看详情 |
| CWE-81 | Improper Neutralization of Script in an Error Message Web Page | Variant | Incomplete | 查看详情 |
| CWE-82 | Improper Neutralization of Script in Attributes of IMG Tags in a Web Page | Variant | Incomplete | 查看详情 |
| CWE-83 | Improper Neutralization of Script in Attributes in a Web Page | Variant | Draft | 查看详情 |
| CWE-84 | Improper Neutralization of Encoded URI Schemes in a Web Page | Variant | Draft | 查看详情 |
| CWE-85 | Doubled Character XSS Manipulations | Variant | Draft | 查看详情 |
| CWE-86 | Improper Neutralization of Invalid Characters in Identifiers in Web Pages | Variant | Draft | 查看详情 |
| CWE-87 | Improper Neutralization of Alternate XSS Syntax | Variant | Draft | 查看详情 |
| CWE-88 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') | Base | Draft | 查看详情 |
| CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | Base | Stable | 查看详情 |
| CWE-90 | Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') | Base | Draft | 查看详情 |
| CWE-91 | XML Injection (aka Blind XPath Injection) | Base | Draft | 查看详情 |
| CWE-92 | DEPRECATED: Improper Sanitization of Custom Special Characters | Base | Deprecated | 查看详情 |
| CWE-93 | Improper Neutralization of CRLF Sequences ('CRLF Injection') | Base | Draft | 查看详情 |
| CWE-94 | Improper Control of Generation of Code ('Code Injection') | Base | Draft | 查看详情 |