Common Weakness Enumeration

470

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

471

Modification of Assumed-Immutable Data (MAID)

472

External Control of Assumed-Immutable Web Parameter

473

PHP External Variable Modification

474

Use of Function with Inconsistent Implementations

475

Undefined Behavior for Input to API

476

NULL Pointer Dereference

477

Use of Obsolete Function

478

Missing Default Case in Multiple Condition Expression

479

Signal Handler Use of a Non-reentrant Function

480

Use of Incorrect Operator

481

Assigning instead of Comparing

482

Comparing instead of Assigning

483

Incorrect Block Delimitation

484

Omitted Break Statement in Switch

486

Comparison of Classes by Name

487

Reliance on Package-level Scope

488

Exposure of Data Element to Wrong Session

489

Active Debug Code

491

Public cloneable() Method Without Final ('Object Hijack')

492

Use of Inner Class Containing Sensitive Data

493

Critical Public Variable Without Final Modifier

494

Download of Code Without Integrity Check

495

Private Data Structure Returned From A Public Method

496

Public Data Assigned to Private Array-Typed Field

497

Exposure of Sensitive System Information to an Unauthorized Control Sphere

498

Cloneable Class Containing Sensitive Information

499

Serializable Class Containing Sensitive Data

500

Public Static Field Not Marked Final

501

Trust Boundary Violation

502

Deserialization of Untrusted Data

506

Embedded Malicious Code

507

Trojan Horse

508

Non-Replicating Malicious Code

509

Replicating Malicious Code (Virus or Worm)

510

Trapdoor

511

Logic/Time Bomb

512

Spyware

514

Covert Channel

515

Covert Storage Channel

520

.NET Misconfiguration: Use of Impersonation

521

Weak Password Requirements

522

Insufficiently Protected Credentials

523

Unprotected Transport of Credentials

524

Use of Cache Containing Sensitive Information

525

Use of Web Browser Cache Containing Sensitive Information

526

Cleartext Storage of Sensitive Information in an Environment Variable

527

Exposure of Version-Control Repository to an Unauthorized Control Sphere

528

Exposure of Core Dump File to an Unauthorized Control Sphere

529

Exposure of Access Control List Files to an Unauthorized Control Sphere