Common Weakness Enumeration

708

Incorrect Ownership Assignment

710

Improper Adherence to Coding Standards

732

Incorrect Permission Assignment for Critical Resource

733

Compiler Optimization Removal or Modification of Security-critical Code

749

Exposed Dangerous Method or Function

754

Improper Check for Unusual or Exceptional Conditions

755

Improper Handling of Exceptional Conditions

756

Missing Custom Error Page

757

Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')

758

Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

759

Use of a One-Way Hash without a Salt

760

Use of a One-Way Hash with a Predictable Salt

761

Free of Pointer not at Start of Buffer

762

Mismatched Memory Management Routines

763

Release of Invalid Pointer or Reference

764

Multiple Locks of a Critical Resource

765

Multiple Unlocks of a Critical Resource

766

Critical Data Element Declared Public

767

Access to Critical Private Variable via Public Method

768

Incorrect Short Circuit Evaluation

770

Allocation of Resources Without Limits or Throttling

771

Missing Reference to Active Allocated Resource

772

Missing Release of Resource after Effective Lifetime

773

Missing Reference to Active File Descriptor or Handle

774

Allocation of File Descriptors or Handles Without Limits or Throttling

775

Missing Release of File Descriptor or Handle after Effective Lifetime

776

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

777

Regular Expression without Anchors

778

Insufficient Logging

779

Logging of Excessive Data

780

Use of RSA Algorithm without OAEP

781

Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code

782

Exposed IOCTL with Insufficient Access Control

783

Operator Precedence Logic Error

784

Reliance on Cookies without Validation and Integrity Checking in a Security Decision

785

Use of Path Manipulation Function without Maximum-sized Buffer

786

Access of Memory Location Before Start of Buffer

787

Out-of-bounds Write

788

Access of Memory Location After End of Buffer

789

Memory Allocation with Excessive Size Value

790

Improper Filtering of Special Elements

791

Incomplete Filtering of Special Elements

792

Incomplete Filtering of One or More Instances of Special Elements

793

Only Filtering One Instance of a Special Element

794

Incomplete Filtering of Multiple Instances of Special Elements

795

Only Filtering Special Elements at a Specified Location

796

Only Filtering Special Elements Relative to a Marker

797

Only Filtering Special Elements at an Absolute Position

798

Use of Hard-coded Credentials

799

Improper Control of Interaction Frequency