Common Weakness Enumeration

408

Incorrect Behavior Order: Early Amplification

409

Improper Handling of Highly Compressed Data (Data Amplification)

410

Insufficient Resource Pool

412

Unrestricted Externally Accessible Lock

413

Improper Resource Locking

414

Missing Lock Check

415

Double Free

416

Use After Free

419

Unprotected Primary Channel

420

Unprotected Alternate Channel

421

Race Condition During Access to Alternate Channel

422

Unprotected Windows Messaging Channel

424

Improper Protection of Alternate Path

425

Direct Request

426

Untrusted Search Path

427

Uncontrolled Search Path Element

428

Unquoted Search Path or Element

430

Deployment of Wrong Handler

431

Missing Handler

432

Dangerous Signal Handler not Disabled During Sensitive Operations

433

Unparsed Raw Web Content Delivery

434

Unrestricted Upload of File with Dangerous Type

435

Improper Interaction Between Multiple Correctly-Behaving Entities

436

Interpretation Conflict

437

Incomplete Model of Endpoint Features

439

Behavioral Change in New Version or Environment

440

Expected Behavior Violation

441

Unintended Proxy or Intermediary

444

Inconsistent Interpretation of HTTP Requests

446

UI Discrepancy for Security Feature

447

Unimplemented or Unsupported Feature in UI

448

Obsolete Feature in UI

449

The UI Performs the Wrong Action

450

Multiple Interpretations of UI Input

451

User Interface (UI) Misrepresentation of Critical Information

453

Insecure Default Variable Initialization

454

External Initialization of Trusted Variables or Data Stores

455

Non-exit on Failed Initialization

456

Missing Initialization of a Variable

457

Use of Uninitialized Variable

459

Incomplete Cleanup

460

Improper Cleanup on Thrown Exception

462

Duplicate Key in Associative List (Alist)

463

Deletion of Data Structure Sentinel

464

Addition of Data Structure Sentinel

466

Return of Pointer Value Outside of Expected Range

467

Use of sizeof() on a Pointer Type

468

Incorrect Pointer Scaling

469

Use of Pointer Subtraction to Determine Size

470

Use of Externally-Controlled Input to Select Classes or Code