2415
Nature Type ID Name Page
HasMember 149 Improper Neutralization of Quoting Syntax 888 392
HasMember 150 Improper Neutralization of Escape, Meta, or Control
Sequences
888 394
HasMember 151 Improper Neutralization of Comment Delimiters 888 396
HasMember 152 Improper Neutralization of Macro Symbols 888 398
HasMember 153 Improper Neutralization of Substitution Characters 888 400
HasMember 154 Improper Neutralization of Variable Name Delimiters 888 401
HasMember 155 Improper Neutralization of Wildcards or Matching
Symbols
888 403
HasMember 156 Improper Neutralization of Whitespace 888 405
HasMember 157 Failure to Sanitize Paired Delimiters 888 407
HasMember 158 Improper Neutralization of Null Byte or NUL Character 888 409
HasMember 159 Improper Handling of Invalid Use of Special Elements 888 411
HasMember 160 Improper Neutralization of Leading Special Elements 888 413
HasMember 161 Improper Neutralization of Multiple Leading Special
Elements
888 415
HasMember 162 Improper Neutralization of Trailing Special Elements 888 417
HasMember 163 Improper Neutralization of Multiple Trailing Special
Elements
888 418
HasMember 164 Improper Neutralization of Internal Special Elements 888 420
HasMember 165 Improper Neutralization of Multiple Internal Special
Elements
888 422
HasMember 183 Permissive List of Allowed Inputs 888 458
HasMember 184 Incomplete List of Disallowed Inputs 888 459
HasMember 185 Incorrect Regular Expression 888 463
HasMember 186 Overly Restrictive Regular Expression 888 466
HasMember 444 Inconsistent Interpretation of HTTP Requests ('HTTP
Request/Response Smuggling')
888 1068
HasMember 553 Command Shell in Externally Accessible Directory 888 1269
HasMember 554 ASP.NET Misconfiguration: Not Using Input Validation
Framework
888 1269
HasMember 564 SQL Injection: Hibernate 888 1282
HasMember 601 URL Redirection to Untrusted Site ('Open Redirect') 888 1345
HasMember 611 Improper Restriction of XML External Entity Reference 888 1367
HasMember 619 Dangling Database Cursor ('Cursor Injection') 888 1382
HasMember 621 Variable Extraction Error 888 1385
HasMember 624 Executable Regular Expression Error 888 1390
HasMember 625 Permissive Regular Expression 888 1392
HasMember 626 Null Byte Interaction Error (Poison Null Byte) 888 1394
HasMember 627 Dynamic Variable Evaluation 888 1396
HasMember 641 Improper Restriction of Names for Files and Other
Resources
888 1412
HasMember 643 Improper Neutralization of Data within XPath
Expressions ('XPath Injection')
888 1419
HasMember 644 Improper Neutralization of HTTP Headers for Scripting
Syntax
888 1422
HasMember 646 Reliance on File Name or Extension of Externally-
Supplied File
888 1425
HasMember 652 Improper Neutralization of Data within XQuery
Expressions ('XQuery Injection')
888 1435
CWE Version 4.14
CWE-991: SFP Secondary Cluster: Tainted Input to Environment
CWE-991: SFP Secondary Cluster: Tainted Input to Environment