Common Weakness Enumeration

941

Incorrectly Specified Destination in a Communication Channel

942

Permissive Cross-domain Security Policy with Untrusted Domains

943

Improper Neutralization of Special Elements in Data Query Logic

1004

Sensitive Cookie Without 'HttpOnly' Flag

1007

Insufficient Visual Distinction of Homoglyphs Presented to User

1021

Improper Restriction of Rendered UI Layers or Frames

1022

Use of Web Link to Untrusted Target with window.opener Access

1023

Incomplete Comparison with Missing Factors

1024

Comparison of Incompatible Types

1025

Comparison Using Wrong Factors

1037

Processor Optimization Removal or Modification of Security-critical Code

1038

Insecure Automated Optimizations

1039

Inadequate Detection or Handling of Adversarial Input Perturbations in Automated Recognition Mechanism

1041

Use of Redundant Code

1042

Static Member Data Element outside of a Singleton Class Element

1043

Data Element Aggregating an Excessively Large Number of Non-Primitive Elements

1044

Architecture with Number of Horizontal Layers Outside of Expected Range

1045

Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor

1046

Creation of Immutable Text Using String Concatenation

1047

Modules with Circular Dependencies

1048

Invokable Control Element with Large Number of Outward Calls

1049

Excessive Data Query Operations in a Large Data Table

1050

Excessive Platform Resource Consumption within a Loop

1051

Initialization with Hard-Coded Network Resource Configuration Data

1052

Excessive Use of Hard-Coded Literals in Initialization

1053

Missing Documentation for Design

1054

Invocation of a Control Element at an Unnecessarily Deep Horizontal Layer

1055

Multiple Inheritance from Concrete Classes

1056

Invokable Control Element with Variadic Parameters

1057

Data Access Operations Outside of Expected Data Manager Component

1058

Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element

1059

Insufficient Technical Documentation

1060

Excessive Number of Inefficient Server-Side Data Accesses

1061

Insufficient Encapsulation

1062

Parent Class with References to Child Class

1063

Creation of Class Instance within a Static Code Block

1064

Invokable Control Element with Signature Containing an Excessive Number of Parameters

1065

Runtime Resource Management Control Element in a Component Built to Run on Application Servers

1066

Missing Serialization Control Element

1067

Excessive Execution of Sequential Searches of Data Resource

1068

Inconsistency Between Implementation and Documented Design

1069

Empty Exception Block

1070

Serializable Data Element Containing non-Serializable Item Elements

1071

Empty Code Block

1072

Data Resource Access without Use of Connection Pooling

1073

Non-SQL Invokable Control Element with Excessive Number of Data Resource Accesses

1074

Class with Excessively Deep Inheritance

1075

Unconditional Control Flow Transfer outside of Switch Block

1076

Insufficient Adherence to Expected Conventions

1077

Floating Point Comparison with Incorrect Operator