The following list identifies weaknesses that may be introduced during the implementation process. Find various misconfigurations and vulnerabilities such as J2EE and ASP.NET misconfigurations, path traversal issues, and improper input validation.

CWE-5: Secure Sockets Layer (SSL) Exposure

CWE-6: Environment Vulnerability

CWE-7: Improper Error Handling

CWE-8: Declaration of Remote Entity Bean in Java EE Application

CWE-9: Least Privilege Violation

CWE-11: Environment Exposure of Sensitive Information

CWE-12: Improper Check or Handling of Exceptional Conditions

CWE-13: Configuration Security Vulnerability

CWE-14: Insecure Storage of Sensitive Data

CWE-15: SFP Secondary Cluster - Tainted Input to Variable

CWE-20: Improper Input Validation

CWE-22: Data Details

CWE-23: Relative Path Traversal

CWE-24: SFP Secondary Cluster: Path Traversal

CWE-25: Secure input validation

CWE-26: Path Traversal Security Threats and Input Validation Measures

CWE-27: Input Validation

CWE-28: Path Traversal Vulnerability

CWE-29: SFP Secondary Cluster: Path Traversal

CWE-30: Input Validation Issues

CWE-31: Path Traversal Vulnerabilities

CWE-32: Path Traversal Vulnerability

CWE-33: Path Traversal Input Validation Strategy

CWE-34: Path Traversal Security Weakness

CWE-35: Input Validation Issues

CWE-36: CWE Cross-section

CWE-37: Input Validation

CWE-38: Input Validation

CWE-39: Input Validation Vulnerabilities

CWE-40: Comprehensive File Handling Input Validation

CWE-41: Input Validation

CWE-42: SFP Secondary Cluster - Path Traversal

CWE-43: SFP Secondary Cluster: Path Traversal

CWE-44: SFP Secondary Cluster: Path Traversal

CWE-45: SFP Secondary Cluster - Path Traversal

CWE-46: SFP Secondary Cluster Path Traversal

CWE-47: Path Traversal

CWE-48: SFP Secondary Cluster: Path Traversal

CWE-49: SFP Secondary Cluster Path Traversal

CWE-50: SFP Secondary Cluster - Path Traversal

CWE-51: SFP Secondary Cluster - Path Traversal

CWE-52: SFP Secondary Cluster - Path Traversal

CWE-53: SFP Secondary Cluster - Path Traversal

CWE-54: SFP Secondary Cluster - Path Traversal

CWE-55: Path Traversal in Secondary Cluster

CWE-56: SFP Secondary Cluster: Path Traversal

CWE-57: SFP Secondary Cluster - Path Traversal

CWE-58: SFP Secondary Cluster: Path Traversal

CWE-59: Link Following

CWE-61: Comprehensive Categorization - File Handling

CWE-62: Link Following to File/Resource

CWE-65: Secure File Access Design

CWE-66: SFP Secondary Cluster - Path Traversal

CWE-67: Windows MS-DOS Device Names

CWE-69: Failure to Understand Platform Dependencies

CWE-72: SFP Secondary Cluster: Path Traversal

CWE-73: Secure Code Review

CWE-74: Injection

CWE-75: Injection

CWE-76: SFP Secondary Cluster - Tainted Input to Command

CWE-77: Weaknesses in Injection Flaws

CWE-78: OS Command Injection

CWE-79: Weaknesses Originally Used by NVD from 2008 to 2016

CWE-80: Injection

CWE-81: SFP Secondary Cluster - Tainted Input to Command

CWE-82: SFP Secondary Cluster - Tainted Input to Command

CWE-83: Injection to Command Secondary Cluster

CWE-84: XSS using Encoded URI Schemes

CWE-85: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-86: Injection to Bypass Encoding Protection Mechanisms

CWE-87: SFP Secondary Cluster - Tainted Input to Command

CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

CWE-89: SQL Injection

CWE-90: Injection

CWE-91: Input Validation Issues

CWE-93: CRLF Injection

CWE-94: Code Injection Vulnerabilities Prevention

CWE-95: Remote File Inclusion

CWE-96: Implement Input Validation to Avoid Injection

CWE-97: SFP Secondary Cluster - Tainted Input to Command

CWE-98: Improper Control of Filename for Include/Require Statement in PHP Program

CWE-99: OWASP Top Ten 2010 Category A4 - Insecure Direct Object References

CWE-102: Unvalidated Input Leading to Injection

CWE-103: Unvalidated Input

CWE-104: Unvalidated Input

CWE-105: SFP Secondary Cluster - Tainted Input to Command

CWE-106: Improper Input Validation

CWE-107: SFP Secondary Cluster - Tainted Input to Command

CWE-108: Improper Validation of Input to Command

CWE-109: Improper Input Validation

CWE-110: SFP Secondary Cluster: Tainted Input to Command

CWE-111: JNI Improper API Usage

CWE-112: XML Input Validation

CWE-113: CWE Cross-section

CWE-114: Incorporating Libraries or Frameworks Vulnerability

CWE-115: Fuzz Testing

CWE-116: Improper Encoding or Escaping of Output

CWE-117: Improper Output Neutralization for Logs

CWE-118: SFP Secondary Cluster - Faulty Buffer Access

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Explore vulnerabilities introduced during implementation process with CWE-702. Discover misconfigurations, path traversal issues, improper input validation and more. Stay informed to enhance security.

CWE-702: Weaknesses Introduced During Implementation Process

Objective

Is your System Free of Underlying Vulnerabilities?
Find Out Now

CWE-702: Weaknesses Introduced During Implementation Process

Objective

Is your System Free of Underlying Vulnerabilities? Find Out Now

Is your System Free of Underlying Vulnerabilities?
Find Out Now