view release on metacpan or  search on metacpan

lib/CSAF/Util/CWE.pm  view on Meta::CPAN

    'CWE-941'  => q"Incorrectly Specified Destination in a Communication Channel",
    'CWE-942'  => q"Permissive Cross-domain Policy with Untrusted Domains",
    'CWE-943'  => q"Improper Neutralization of Special Elements in Data Query Logic",
    'CWE-1004' => q"Sensitive Cookie Without 'HttpOnly' Flag",
    'CWE-1007' => q"Insufficient Visual Distinction of Homoglyphs Presented to User",
    'CWE-1021' => q"Improper Restriction of Rendered UI Layers or Frames",
    'CWE-1022' => q"Use of Web Link to Untrusted Target with window.opener Access",
    'CWE-1023' => q"Incomplete Comparison with Missing Factors",
    'CWE-1024' => q"Comparison of Incompatible Types",
    'CWE-1025' => q"Comparison Using Wrong Factors",
    'CWE-1037' => q"Processor Optimization Removal or Modification of Security-critical Code",
    'CWE-1038' => q"Insecure Automated Optimizations",
    'CWE-1039' =>
        "Automated Recognition Mechanism with Inadequate Detection or Handling of Adversarial Input Perturbations",
    'CWE-1041' => q"Use of Redundant Code",
    'CWE-1042' => q"Static Member Data Element outside of a Singleton Class Element",
    'CWE-1043' => q"Data Element Aggregating an Excessively Large Number of Non-Primitive Elements",
    'CWE-1044' => q"Architecture with Number of Horizontal Layers Outside of Expected Range",
    'CWE-1045' => q"Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor",
    'CWE-1046' => q"Creation of Immutable Text Using String Concatenation",
    'CWE-1047' => q"Modules with Circular Dependencies",
    'CWE-1048' => q"Invokable Control Element with Large Number of Outward Calls",
    'CWE-1049' => q"Excessive Data Query Operations in a Large Data Table",
    'CWE-1050' => q"Excessive Platform Resource Consumption within a Loop",
    'CWE-1051' => q"Initialization with Hard-Coded Network Resource Configuration Data",
    'CWE-1052' => q"Excessive Use of Hard-Coded Literals in Initialization",
    'CWE-1053' => q"Missing Documentation for Design",
    'CWE-1054' => q"Invocation of a Control Element at an Unnecessarily Deep Horizontal Layer",
    'CWE-1055' => q"Multiple Inheritance from Concrete Classes",
    'CWE-1056' => q"Invokable Control Element with Variadic Parameters",
    'CWE-1057' => q"Data Access Operations Outside of Expected Data Manager Component",
    'CWE-1058' => q"Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element",
    'CWE-1059' => q"Insufficient Technical Documentation",
    'CWE-1060' => q"Excessive Number of Inefficient Server-Side Data Accesses",
    'CWE-1061' => q"Insufficient Encapsulation",
    'CWE-1062' => q"Parent Class with References to Child Class",
    'CWE-1063' => q"Creation of Class Instance within a Static Code Block",
    'CWE-1064' => q"Invokable Control Element with Signature Containing an Excessive Number of Parameters",
    'CWE-1065' => q"Runtime Resource Management Control Element in a Component Built to Run on Application Servers",
    'CWE-1066' => q"Missing Serialization Control Element",
    'CWE-1067' => q"Excessive Execution of Sequential Searches of Data Resource",
    'CWE-1068' => q"Inconsistency Between Implementation and Documented Design",
    'CWE-1069' => q"Empty Exception Block",
    'CWE-1070' => q"Serializable Data Element Containing non-Serializable Item Elements",
    'CWE-1071' => q"Empty Code Block",
    'CWE-1072' => q"Data Resource Access without Use of Connection Pooling",
    'CWE-1073' => q"Non-SQL Invokable Control Element with Excessive Number of Data Resource Accesses",
    'CWE-1074' => q"Class with Excessively Deep Inheritance",
    'CWE-1075' => q"Unconditional Control Flow Transfer outside of Switch Block",
    'CWE-1076' => q"Insufficient Adherence to Expected Conventions",
    'CWE-1077' => q"Floating Point Comparison with Incorrect Operator",
    'CWE-1078' => q"Inappropriate Source Code Style or Formatting",
    'CWE-1079' => q"Parent Class without Virtual Destructor Method",
    'CWE-1080' => q"Source Code File with Excessive Number of Lines of Code",
    'CWE-1082' => q"Class Instance Self Destruction Control Element",
    'CWE-1083' => q"Data Access from Outside Expected Data Manager Component",
    'CWE-1084' => q"Invokable Control Element with Excessive File or Data Access Operations",
    'CWE-1085' => q"Invokable Control Element with Excessive Volume of Commented-out Code",
    'CWE-1086' => q"Class with Excessive Number of Child Classes",
    'CWE-1087' => q"Class with Virtual Method without a Virtual Destructor",
    'CWE-1088' => q"Synchronous Access of Remote Resource without Timeout",
    'CWE-1089' => q"Large Data Table with Excessive Number of Indices",
    'CWE-1090' => q"Method Containing Access of a Member Element from Another Class",
    'CWE-1091' => q"Use of Object without Invoking Destructor Method",
    'CWE-1092' => q"Use of Same Invokable Control Element in Multiple Architectural Layers",
    'CWE-1093' => q"Excessively Complex Data Representation",
    'CWE-1094' => q"Excessive Index Range Scan for a Data Resource",
    'CWE-1095' => q"Loop Condition Value Update within the Loop",
    'CWE-1096' => q"Singleton Class Instance Creation without Proper Locking or Synchronization",
    'CWE-1097' => q"Persistent Storable Data Element without Associated Comparison Control Element",
    'CWE-1098' => q"Data Element containing Pointer Item without Proper Copy Control Element",
    'CWE-1099' => q"Inconsistent Naming Conventions for Identifiers",
    'CWE-1100' => q"Insufficient Isolation of System-Dependent Functions",
    'CWE-1101' => q"Reliance on Runtime Component in Generated Code",
    'CWE-1102' => q"Reliance on Machine-Dependent Data Representation",
    'CWE-1103' => q"Use of Platform-Dependent Third Party Components",
    'CWE-1104' => q"Use of Unmaintained Third Party Components",
    'CWE-1105' => q"Insufficient Encapsulation of Machine-Dependent Functionality",
    'CWE-1106' => q"Insufficient Use of Symbolic Constants",
    'CWE-1107' => q"Insufficient Isolation of Symbolic Constant Definitions",
    'CWE-1108' => q"Excessive Reliance on Global Variables",
    'CWE-1109' => q"Use of Same Variable for Multiple Purposes",
    'CWE-1110' => q"Incomplete Design Documentation",
    'CWE-1111' => q"Incomplete I/O Documentation",
    'CWE-1112' => q"Incomplete Documentation of Program Execution",
    'CWE-1113' => q"Inappropriate Comment Style",
    'CWE-1114' => q"Inappropriate Whitespace Style",
    'CWE-1115' => q"Source Code Element without Standard Prologue",
    'CWE-1116' => q"Inaccurate Comments",
    'CWE-1117' => q"Callable with Insufficient Behavioral Summary",
    'CWE-1118' => q"Insufficient Documentation of Error Handling Techniques",
    'CWE-1119' => q"Excessive Use of Unconditional Branching",
    'CWE-1120' => q"Excessive Code Complexity",
    'CWE-1121' => q"Excessive McCabe Cyclomatic Complexity",
    'CWE-1122' => q"Excessive Halstead Complexity",
    'CWE-1123' => q"Excessive Use of Self-Modifying Code",
    'CWE-1124' => q"Excessively Deep Nesting",
    'CWE-1125' => q"Excessive Attack Surface",
    'CWE-1126' => q"Declaration of Variable with Unnecessarily Wide Scope",
    'CWE-1127' => q"Compilation with Insufficient Warnings or Errors",
    'CWE-1164' => q"Irrelevant Code",
    'CWE-1173' => q"Improper Use of Validation Framework",
    'CWE-1174' => q"ASP.NET Misconfiguration: Improper Model Validation",
    'CWE-1176' => q"Inefficient CPU Computation",
    'CWE-1177' => q"Use of Prohibited Code",
    'CWE-1187' => q"DEPRECATED: Use of Uninitialized Resource",
    'CWE-1188' => q"Initialization of a Resource with an Insecure Default",
    'CWE-1189' => q"Improper Isolation of Shared Resources on System-on-a-Chip (SoC)",
    'CWE-1190' => q"DMA Device Enabled Too Early in Boot Phase",
    'CWE-1191' => q"On-Chip Debug and Test Interface With Improper Access Control",
    'CWE-1192' => q"Improper Identifier for IP Block used in System-On-Chip (SOC)",
    'CWE-1193' => q"Power-On of Untrusted Execution Core Before Enabling Fabric Access Control",
    'CWE-1204' => q"Generation of Weak Initialization Vector (IV)",
    'CWE-1209' => q"Failure to Disable Reserved Bits",
    'CWE-1220' => q"Insufficient Granularity of Access Control",
    'CWE-1221' => q"Incorrect Register Defaults or Module Parameters",
    'CWE-1222' => q"Insufficient Granularity of Address Regions Protected by Register Locks",
    'CWE-1223' => q"Race Condition for Write-Once Attributes",
    'CWE-1224' => q"Improper Restriction of Write-Once Bit Fields",
    'CWE-1229' => q"Creation of Emergent Resource",
    'CWE-1230' => q"Exposure of Sensitive Information Through Metadata",