2310
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 130 Improper Handling of Length Parameter Inconsistency 699 351
HasMember 166 Improper Handling of Missing Special Element 699 423
HasMember 167 Improper Handling of Additional Special Element 699 425
HasMember 168 Improper Handling of Inconsistent Special Elements 699 426
HasMember 178 Improper Handling of Case Sensitivity 699 445
HasMember 182 Collapse of Data into Unsafe Value 699 455
HasMember 186 Overly Restrictive Regular Expression 699 466
HasMember 229 Improper Handling of Values 699 570
HasMember 233 Improper Handling of Parameters 699 574
HasMember 237 Improper Handling of Structural Elements 699 580
HasMember 241 Improper Handling of Unexpected Data Type 699 584
HasMember 409 Improper Handling of Highly Compressed Data (Data
Amplification)
699 996
HasMember 472 External Control of Assumed-Immutable Web
Parameter
699 1123
HasMember 601 URL Redirection to Untrusted Site ('Open Redirect') 699 1345
HasMember 611 Improper Restriction of XML External Entity Reference 699 1367
HasMember 624 Executable Regular Expression Error 699 1390
HasMember 625 Permissive Regular Expression 699 1392
HasMember 776 Improper Restriction of Recursive Entity References in
DTDs ('XML Entity Expansion')
699 1633
HasMember 1024 Comparison of Incompatible Types 699 1867
Category-133: String Errors
Category ID : 133
Summary
Weaknesses in this category are related to the creation and modification of strings.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 134 Use of Externally-Controlled Format String 699 365
HasMember 135 Incorrect Calculation of Multi-Byte String Length 699 370
HasMember 480 Use of Incorrect Operator 699 1150
Category-136: Type Errors
Category ID : 136
Summary
Weaknesses in this category are caused by improper data type transformation or improper
handling of multiple data types.
Membership
CWE Version 4.14
CWE-137: Data Neutralization Issues
CWE-137: Data Neutralization Issues