2356
Nature Type ID Name Page
MemberOf 800 Weaknesses in the 2010 CWE/SANS Top 25 Most
Dangerous Programming Errors
800 2563
HasMember 59 Improper Link Resolution Before File Access ('Link
Following')
800 111
HasMember 134 Use of Externally-Controlled Format String 800 365
HasMember 212 Improper Removal of Sensitive Information Before
Storage or Transfer
800 544
HasMember 307 Improper Restriction of Excessive Authentication
Attempts
800 747
HasMember 330 Use of Insufficiently Random Values 800 814
HasMember 416 Use After Free 800 1012
HasMember 426 Untrusted Search Path 800 1028
HasMember 454 External Initialization of Trusted Variables or Data
Stores
800 1085
HasMember 456 Missing Initialization of a Variable 800 1089
HasMember 476 NULL Pointer Dereference 800 1132
HasMember 672 Operation on a Resource after Expiration or Release 800 1479
HasMember 681 Incorrect Conversion between Numeric Types 800 1495
HasMember 749 Exposed Dangerous Method or Function 800 1564
HasMember 772 Missing Release of Resource after Effective Lifetime 800 1624
HasMember 799 Improper Control of Interaction Frequency 800 1699
HasMember 804 Guessable CAPTCHA 800 1701
References
[REF-732]"2010 CWE/SANS Top 25 Most Dangerous Software Errors". 2010 February 4. < http://
cwe.mitre.org/top25/archive/2010/2010_cwe_sans_top25.html >.
Category-810: OWASP Top Ten 2010 Category A1 - Injection
Category ID : 810
Summary
Weaknesses in this category are related to the A1 category in the OWASP Top Ten 2010.
Membership
Nature Type ID Name Page
MemberOf 809 Weaknesses in OWASP Top Ten (2010) 809 2563
HasMember 78 Improper Neutralization of Special Elements used in an
OS Command ('OS Command Injection')
809 151
HasMember 88 Improper Neutralization of Argument Delimiters in a
Command ('Argument Injection')
809 194
HasMember 89 Improper Neutralization of Special Elements used in an
SQL Command ('SQL Injection')
809 201
HasMember 90 Improper Neutralization of Special Elements used in an
LDAP Query ('LDAP Injection')
809 212
HasMember 91 XML Injection (aka Blind XPath Injection) 809 215
References
[REF-761]OWASP. "Top 10 2010-A1-Injection". < http://www.owasp.org/index.php/Top_10_2010-
A1-Injection >.
CWE Version 4.14
CWE-811: OWASP Top Ten 2010 Category A2 - Cross-Site Scripting (XSS)
CWE-811: OWASP Top Ten 2010 Category A2 - Cross-Site Scripting (XSS)