Common Weakness Enumeration

344

Use of Invariant Value in Dynamically Changing Context

345

Insufficient Verification of Data Authenticity

346

Origin Validation Error

347

Improper Verification of Cryptographic Signature

348

Use of Less Trusted Source

349

Acceptance of Extraneous Untrusted Data With Trusted Data

350

Reliance on Reverse DNS Resolution for a Security-Critical Action

351

Insufficient Type Distinction

352

Cross-Site Request Forgery (CSRF)

353

Missing Support for Integrity Check

354

Improper Validation of Integrity Check Value

356

Product UI does not Warn User of Unsafe Actions

357

Insufficient UI Warning of Dangerous Operations

358

Improperly Implemented Security Check for Standard

359

Exposure of Private Personal Information to an Unauthorized Actor

360

Trust of System Event Data

362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

363

Race Condition Enabling Link Following

364

Signal Handler Race Condition

366

Race Condition within a Thread

367

Time-of-check Time-of-use (TOCTOU) Race Condition

368

Context Switching Race Condition

369

Divide By Zero

370

Missing Check for Certificate Revocation after Initial Check

372

Incomplete Internal State Distinction

374

Passing Mutable Objects to an Untrusted Method

375

Returning a Mutable Object to an Untrusted Caller

377

Insecure Temporary File

378

Creation of Temporary File With Insecure Permissions

379

Creation of Temporary File in Directory with Insecure Permissions

382

J2EE Bad Practices: Use of System.exit()

383

J2EE Bad Practices: Direct Use of Threads

384

Session Fixation

385

Covert Timing Channel

386

Symbolic Name not Mapping to Correct Object

390

Detection of Error Condition Without Action

391

Unchecked Error Condition

392

Missing Report of Error Condition

393

Return of Wrong Status Code

394

Unexpected Status Code or Return Value

395

Use of NullPointerException Catch to Detect NULL Pointer Dereference

396

Declaration of Catch for Generic Exception

397

Declaration of Throws for Generic Exception

400

Uncontrolled Resource Consumption

401

Missing Release of Memory after Effective Lifetime

402

Transmission of Private Resources into a New Sphere ('Resource Leak')

403

Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')

404

Improper Resource Shutdown or Release

405

Asymmetric Resource Consumption (Amplification)

406

Insufficient Control of Network Message Volume (Network Amplification)