CWEs

CWE Name	CWE-ID	Vulnerabilities
Incorrectly Specified Destination in a Communication Channel	941	6
Permissive Cross-domain Policy with Untrusted Domains	942	64
Improper Neutralization of Special Elements in Data Query Logic	943	24
Sensitive Cookie Without 'HttpOnly' Flag	1004	29
Insufficient Visual Distinction of Homoglyphs Presented to User	1007	4
Improper Restriction of Rendered UI Layers or Frames	1021	390
Use of Web Link to Untrusted Target with window.opener Access	1022	12
Incomplete Comparison with Missing Factors	1023	5
Comparison of Incompatible Types	1024	2
Comparison Using Wrong Factors	1025	9
Processor Optimization Removal or Modification of Security-critical Code	1037	5
Insecure Automated Optimizations	1038	6
Automated Recognition Mechanism with Inadequate Detection or Handling of Adversarial Input Perturbations	1039	3
Use of Redundant Code	1041	0
Static Member Data Element outside of a Singleton Class Element	1042	0
Data Element Aggregating an Excessively Large Number of Non-Primitive Elements	1043	0
Architecture with Number of Horizontal Layers Outside of Expected Range	1044	0
Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor	1045	0
Creation of Immutable Text Using String Concatenation	1046	1
Modules with Circular Dependencies	1047	1
Invokable Control Element with Large Number of Outward Calls	1048	0
Excessive Data Query Operations in a Large Data Table	1049	3
Excessive Platform Resource Consumption within a Loop	1050	14
Initialization with Hard-Coded Network Resource Configuration Data	1051	1
Excessive Use of Hard-Coded Literals in Initialization	1052	1
Missing Documentation for Design	1053	0
Invocation of a Control Element at an Unnecessarily Deep Horizontal Layer	1054	0
Multiple Inheritance from Concrete Classes	1055	1
Invokable Control Element with Variadic Parameters	1056	1
Data Access Operations Outside of Expected Data Manager Component	1057	1
Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element	1058	0
Insufficient Technical Documentation	1059	2
Excessive Number of Inefficient Server-Side Data Accesses	1060	0
Insufficient Encapsulation	1061	0
Parent Class with References to Child Class	1062	0
Creation of Class Instance within a Static Code Block	1063	0
Invokable Control Element with Signature Containing an Excessive Number of Parameters	1064	0
Runtime Resource Management Control Element in a Component Built to Run on Application Servers	1065	0
Missing Serialization Control Element	1066	0
Excessive Execution of Sequential Searches of Data Resource	1067	1
Inconsistency Between Implementation and Documented Design	1068	5
Empty Exception Block	1069	0
Serializable Data Element Containing non-Serializable Item Elements	1070	0
Empty Code Block	1071	0
Data Resource Access without Use of Connection Pooling	1072	0
Non-SQL Invokable Control Element with Excessive Number of Data Resource Accesses	1073	0
Class with Excessively Deep Inheritance	1074	0
Unconditional Control Flow Transfer outside of Switch Block	1075	0
Insufficient Adherence to Expected Conventions	1076	2
Floating Point Comparison with Incorrect Operator	1077	5
Inappropriate Source Code Style or Formatting	1078	0
Parent Class without Virtual Destructor Method	1079	0
Source Code File with Excessive Number of Lines of Code	1080	0
Class Instance Self Destruction Control Element	1082	0
Data Access from Outside Expected Data Manager Component	1083	1
Invokable Control Element with Excessive File or Data Access Operations	1084	0
Invokable Control Element with Excessive Volume of Commented-out Code	1085	0
Class with Excessive Number of Child Classes	1086	0
Class with Virtual Method without a Virtual Destructor	1087	0
Synchronous Access of Remote Resource without Timeout	1088	5
Large Data Table with Excessive Number of Indices	1089	0
Method Containing Access of a Member Element from Another Class	1090	0
Use of Object without Invoking Destructor Method	1091	0
Use of Same Invokable Control Element in Multiple Architectural Layers	1092	0
Excessively Complex Data Representation	1093	0
Excessive Index Range Scan for a Data Resource	1094	0
Loop Condition Value Update within the Loop	1095	0
Singleton Class Instance Creation without Proper Locking or Synchronization	1096	0
Persistent Storable Data Element without Associated Comparison Control Element	1097	0
Data Element containing Pointer Item without Proper Copy Control Element	1098	0
Inconsistent Naming Conventions for Identifiers	1099	0
Insufficient Isolation of System-Dependent Functions	1100	3
Reliance on Runtime Component in Generated Code	1101	0
Reliance on Machine-Dependent Data Representation	1102	1
Use of Platform-Dependent Third Party Components	1103	2
Use of Unmaintained Third Party Components	1104	20
Insufficient Encapsulation of Machine-Dependent Functionality	1105	0
Insufficient Use of Symbolic Constants	1106	1
Insufficient Isolation of Symbolic Constant Definitions	1107	2
Excessive Reliance on Global Variables	1108	3
Use of Same Variable for Multiple Purposes	1109	0
Incomplete Design Documentation	1110	0
Incomplete I/O Documentation	1111	0
Incomplete Documentation of Program Execution	1112	1
Inappropriate Comment Style	1113	0
Inappropriate Whitespace Style	1114	0
Source Code Element without Standard Prologue	1115	0
Inaccurate Comments	1116	4
Callable with Insufficient Behavioral Summary	1117	0
Insufficient Documentation of Error Handling Techniques	1118	1
Excessive Use of Unconditional Branching	1119	1
Excessive Code Complexity	1120	0
Excessive McCabe Cyclomatic Complexity	1121	0
Excessive Halstead Complexity	1122	0
Excessive Use of Self-Modifying Code	1123	0
Excessively Deep Nesting	1124	0
Excessive Attack Surface	1125	5
Declaration of Variable with Unnecessarily Wide Scope	1126	0
Compilation with Insufficient Warnings or Errors	1127	2
Irrelevant Code	1164	1