Common Weakness Enumeration

804

Guessable CAPTCHA

805

Buffer Access with Incorrect Length Value

806

Buffer Access Using Size of Source Buffer

807

Reliance on Untrusted Inputs in a Security Decision

820

Missing Synchronization

821

Incorrect Synchronization

822

Untrusted Pointer Dereference

823

Use of Out-of-range Pointer Offset

824

Access of Uninitialized Pointer

825

Expired Pointer Dereference

826

Premature Release of Resource During Expected Lifetime

827

Improper Control of Document Type Definition

828

Signal Handler with Functionality that is not Asynchronous-Safe

829

Inclusion of Functionality from Untrusted Control Sphere

830

Inclusion of Web Functionality from an Untrusted Source

831

Signal Handler Function Associated with Multiple Signals

832

Unlock of a Resource that is not Locked

833

Deadlock

834

Excessive Iteration

835

Loop with Unreachable Exit Condition ('Infinite Loop')

836

Use of Password Hash Instead of Password for Authentication

837

Improper Enforcement of a Single, Unique Action

838

Inappropriate Encoding for Output Context

839

Numeric Range Comparison Without Minimum Check

841

Improper Enforcement of Behavioral Workflow

842

Placement of User into Incorrect Group

843

Access of Resource Using Incompatible Type ('Type Confusion')

862

Missing Authorization

863

Incorrect Authorization

908

Use of Uninitialized Resource

909

Missing Initialization of Resource

910

Use of Expired File Descriptor

911

Improper Update of Reference Count

912

Hidden Functionality

913

Improper Control of Dynamically-Managed Code Resources

914

Improper Control of Dynamically-Identified Variables

915

Improperly Controlled Modification of Dynamically-Determined Object Attributes

916

Use of Password Hash With Insufficient Computational Effort

917

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

918

Server-Side Request Forgery (SSRF)

920

Improper Restriction of Power Consumption

921

Storage of Sensitive Data in a Mechanism without Access Control

922

Insecure Storage of Sensitive Information

923

Improper Restriction of Communication Channel to Intended Endpoints

924

Improper Enforcement of Message Integrity During Transmission in a Communication Channel

925

Improper Verification of Intent by Broadcast Receiver

926

Improper Export of Android Application Components

927

Use of Implicit Intent for Sensitive Communication

939

Improper Authorization in Handler for Custom URL Scheme

940

Improper Verification of Source of a Communication Channel