Common Weakness Enumeration

176

Improper Handling of Unicode Encoding

177

Improper Handling of URL Encoding (Hex Encoding)

178

Improper Handling of Case Sensitivity

179

Incorrect Behavior Order: Early Validation

180

Incorrect Behavior Order: Validate Before Canonicalize

181

Incorrect Behavior Order: Validate Before Filter

182

Collapse of Data into Unsafe Value

183

Permissive List of Allowed Inputs

184

Incomplete List of Disallowed Inputs

185

Incorrect Regular Expression

186

Overly Restrictive Regular Expression

187

Partial String Comparison

188

Reliance on Data/Memory Layout

190

Integer Overflow or Wraparound

191

Integer Underflow (Wrap or Wraparound)

192

Integer Coercion Error

193

Off-by-one Error

194

Unexpected Sign Extension

195

Signed to Unsigned Conversion Error

196

Unsigned to Signed Conversion Error

197

Numeric Truncation Error

198

Use of Incorrect Byte Ordering

200

Exposure of Sensitive Information to an Unauthorized Actor

201

Insertion of Sensitive Information Into Sent Data

202

Exposure of Sensitive Information Through Data Queries

203

Observable Discrepancy

204

Observable Response Discrepancy

205

Observable Behavioral Discrepancy

206

Observable Internal Behavioral Discrepancy

207

Observable Behavioral Discrepancy With Equivalent Products

208

Observable Timing Discrepancy

209

Generation of Error Message Containing Sensitive Information

210

Self-generated Error Message Containing Sensitive Information

211

Externally-Generated Error Message Containing Sensitive Information

212

Improper Removal of Sensitive Information Before Storage or Transfer

213

Exposure of Sensitive Information Due to Incompatible Policies

214

Invocation of Process Using Visible Sensitive Information

215

Insertion of Sensitive Information Into Debugging Code

219

Storage of File with Sensitive Data Under Web Root

220

Storage of File With Sensitive Data Under FTP Root

221

Information Loss or Omission

222

Truncation of Security-relevant Information

223

Omission of Security-relevant Information

224

Obscured Security-relevant Information by Alternate Name

226

Sensitive Information in Resource Not Removed Before Reuse

228

Improper Handling of Syntactically Invalid Structure

229

Improper Handling of Values

230

Improper Handling of Missing Values

231

Improper Handling of Extra Values

232

Improper Handling of Undefined Values