2571
Nature Type ID Name Page
HasMember 627 Dynamic Variable Evaluation 1396
HasMember 628 Function Call with Incorrectly Specified Arguments 1398
HasMember 642 External Control of Critical State Data 1414
HasMember 648 Incorrect Use of Privileged APIs 1428
HasMember 667 Improper Locking 1464
HasMember 672 Operation on a Resource after Expiration or Release 1479
HasMember 674 Uncontrolled Recursion 1484
HasMember 676 Use of Potentially Dangerous Function 1489
HasMember 681 Incorrect Conversion between Numeric Types 1495
HasMember 698 Execution After Redirect (EAR) 1533
HasMember 708 Incorrect Ownership Assignment 1548
HasMember 732 Incorrect Permission Assignment for Critical Resource 1551
HasMember 756 Missing Custom Error Page 1579
HasMember 763 Release of Invalid Pointer or Reference 1599
HasMember 770 Allocation of Resources Without Limits or Throttling 1613
HasMember 772 Missing Release of Resource after Effective Lifetime 1624
HasMember 783 Operator Precedence Logic Error 1650
HasMember 786 Access of Memory Location Before Start of Buffer 1658
HasMember 788 Access of Memory Location After End of Buffer 1669
HasMember 798 Use of Hard-coded Credentials 1690
HasMember 805 Buffer Access with Incorrect Length Value 1702
HasMember 807 Reliance on Untrusted Inputs in a Security Decision 1714
HasMember 822 Untrusted Pointer Dereference 1723
HasMember 825 Expired Pointer Dereference 1732
HasMember 829 Inclusion of Functionality from Untrusted Control Sphere 1741
HasMember 835 Loop with Unreachable Exit Condition ('Infinite Loop') 1757
HasMember 838 Inappropriate Encoding for Output Context 1764
HasMember 839 Numeric Range Comparison Without Minimum Check 1767
HasMember 841 Improper Enforcement of Behavioral Workflow 1772
HasMember 862 Missing Authorization 1780
HasMember 863 Incorrect Authorization 1787
Metrics
CWEs in this view Total CWEs
Weaknesses 157 out of 938
Categories 0 out of 374
Views 0 out of 50
Total 157 out of 1362
View-888: Software Fault Pattern (SFP) Clusters
View ID : 888
Type : Graph
Objective
CWE identifiers in this view are associated with clusters of Software Fault Patterns (SFPs).
Audience
Applied Researchers
CWE Version 4.14
CWE-900: Weaknesses in the 2011 CWE/SANS Top 25 Most Dangerous Software Errors
CWE-900: Weaknesses in the 2011 CWE/
SANS Top 25 Most Dangerous Software Errors 2572
Academic Researchers
Product Vendors
Membership
Nature Type ID Name Page
HasMember 885 SFP Primary Cluster: Risky Values 2382
HasMember 886 SFP Primary Cluster: Unused entities 2382
HasMember 887 SFP Primary Cluster: API 2382
HasMember 889 SFP Primary Cluster: Exception Management 2382
HasMember 890 SFP Primary Cluster: Memory Access 2383
HasMember 891 SFP Primary Cluster: Memory Management 2383
HasMember 892 SFP Primary Cluster: Resource Management 2383
HasMember 893 SFP Primary Cluster: Path Resolution 2384
HasMember 894 SFP Primary Cluster: Synchronization 2384
HasMember 895 SFP Primary Cluster: Information Leak 2384
HasMember 896 SFP Primary Cluster: Tainted Input 2385
HasMember 897 SFP Primary Cluster: Entry Points 2385
HasMember 898 SFP Primary Cluster: Authentication 2385
HasMember 899 SFP Primary Cluster: Access Control 2386
HasMember 901 SFP Primary Cluster: Privilege 2386
HasMember 902 SFP Primary Cluster: Channel 2387
HasMember 903 SFP Primary Cluster: Cryptography 2387
HasMember 904 SFP Primary Cluster: Malware 2387
HasMember 905 SFP Primary Cluster: Predictability 2388
HasMember 906 SFP Primary Cluster: UI 2388
HasMember 907 SFP Primary Cluster: Other 2388
HasMember 1237 SFP Primary Cluster: Faulty Resource Release 2482
HasMember 1238 SFP Primary Cluster: Failure to Release Memory 2482
References
[REF-19]Nikolai Mansourov and Djenana Campara. "System Assurance". 2010 December 6. <
https://www.elsevier.com/books/system-assurance/mansourov/978-0-12-381414-2 >.
[REF-20]Ben Calloni, Nikolai Mansourov and Djenana Campara. "Task Order 0006: Vulnerability
Path Analysis and Demonstration (VPAD). Volume 2 - White Box Definitions of Software Fault
Patterns". 2011 December. < https://apps.dtic.mil/docs/citations/ADB381215 >.
Metrics
CWEs in this view Total CWEs
Weaknesses 614 out of 938
Categories 83 out of 374
Views 0 out of 50
Total 697 out of 1362
View-900: Weaknesses in the 2011 CWE/SANS Top 25 Most Dangerous
Software Errors
View ID : 900
Type : Graph
Objective
CWE Version 4.14
CWE-919: Weaknesses in Mobile Applications
CWE-919: Weaknesses in Mobile Applications