2355
Nature Type ID Name Page
HasMember 120 Buffer Copy without Checking Size of Input ('Classic
Buffer Overflow')
800 304
HasMember 129 Improper Validation of Array Index 800 341
HasMember 131 Incorrect Calculation of Buffer Size 800 355
HasMember 190 Integer Overflow or Wraparound 800 472
HasMember 494 Download of Code Without Integrity Check 800 1185
HasMember 754 Improper Check for Unusual or Exceptional Conditions 800 1568
HasMember 770 Allocation of Resources Without Limits or Throttling 800 1613
HasMember 805 Buffer Access with Incorrect Length Value 800 1702
References
[REF-732]"2010 CWE/SANS Top 25 Most Dangerous Software Errors". 2010 February 4. < http://
cwe.mitre.org/top25/archive/2010/2010_cwe_sans_top25.html >.
Category-803: 2010 Top 25 - Porous Defenses
Category ID : 803
Summary
Weaknesses in this category are listed in the "Porous Defenses" section of the 2010 CWE/SANS
Top 25 Programming Errors.
Membership
Nature Type ID Name Page
MemberOf 800 Weaknesses in the 2010 CWE/SANS Top 25 Most
Dangerous Programming Errors
800 2563
HasMember 285 Improper Authorization 800 684
HasMember 306 Missing Authentication for Critical Function 800 741
HasMember 311 Missing Encryption of Sensitive Data 800 757
HasMember 327 Use of a Broken or Risky Cryptographic Algorithm 800 799
HasMember 732 Incorrect Permission Assignment for Critical Resource 800 1551
HasMember 798 Use of Hard-coded Credentials 800 1690
HasMember 807 Reliance on Untrusted Inputs in a Security Decision 800 1714
References
[REF-732]"2010 CWE/SANS Top 25 Most Dangerous Software Errors". 2010 February 4. < http://
cwe.mitre.org/top25/archive/2010/2010_cwe_sans_top25.html >.
Category-808: 2010 Top 25 - Weaknesses On the Cusp
Category ID : 808
Summary
Weaknesses in this category are not part of the general Top 25, but they were part of the original
nominee list from which the Top 25 was drawn.
Membership
CWE Version 4.14
CWE-810: OWASP Top Ten 2010 Category A1 - Injection
CWE-810: OWASP Top Ten 2010 Category A1 - Injection