CWE-1004

Sensitive Cookie Without 'HttpOnly' Flag

Variant

Incomplete

Medium

The product uses a cookie to store sensitive information, but the cookie is not marked with the HttpOnly flag.

{'id': '1004', 'attrs': {'ID': '1004', 'Name': "Sensitive Cookie Without 'HttpOnly' Flag", 'Status': 'Incomplete', 'Diagram': '/data/images/CWE-1004-Diagram.png', 'Structure': 'Simple', 'Abstraction': 'Variant'}}

7de9b2b0f574c7d1f18e46819d70ba2c788605be2d6fd126c7208c1d89727bcb

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1007

Insufficient Visual Distinction of Homoglyphs Presented to User

Base

Incomplete

Medium

The product displays information or identifiers to a user, but the display mechanism does not make it easy for the user to distinguish between visually similar or identical glyphs (homoglyphs), which may cause the user to misinterpret a glyph and perform an unintended, insecure action.

{'id': '1007', 'attrs': {'ID': '1007', 'Name': 'Insufficient Visual Distinction of Homoglyphs Presented to User', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

4053d274ce2d8111ffa1114225331f33c8cf2b4bcea27d538d4ef2b0b5fc6e1c

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-102

Struts: Duplicate Validation Forms

Variant

Incomplete

The product uses multiple validation forms with the same name, which might cause the Struts Validator to validate a form that the programmer does not expect.

If two validation forms have the same name, the Struts Validator arbitrarily chooses one of the forms to use for input validation and discards the other. This decision might not correspond to the programmer's expectations, possibly leading to resultant weaknesses. Moreover, it indicates that the validation logic is not up-to-date, and can indicate that other, more subtle validation errors are present.

{'id': '102', 'attrs': {'ID': '102', 'Name': 'Struts: Duplicate Validation Forms', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Variant'}}

93b4531ff3bf5c2a6aae222947804f658a71a4727979100169b98bcb546dfa85

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1021

Improper Restriction of Rendered UI Layers or Frames

Base

Incomplete

The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain.

{'id': '1021', 'attrs': {'ID': '1021', 'Name': 'Improper Restriction of Rendered UI Layers or Frames', 'Status': 'Incomplete', 'Diagram': '/data/images/CWE-1021-Diagram.png', 'Structure': 'Simple', 'Abstraction': 'Base'}}

c35e226e4a4aecda2b40819f832cba2ce9d322643c2b56ce015e72ad78da74bd

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1022

Use of Web Link to Untrusted Target with window.opener Access

Variant

Incomplete

Medium

The web application produces links to untrusted external sites outside of its sphere of control, but it does not properly prevent the external site from modifying security-critical properties of the window.opener object, such as the location property.

When a user clicks a link to an external site ("target"), the target="_blank" attribute causes the target site's contents to be opened in a new window or tab, which runs in the same process as the original page. The window.opener object records information about the original page that offered the link. If an attacker can run script on the target page, then they could read or modify certain properties of the window.opener object, including the location property - even if the original and target site are not the same origin. An attacker can modify the location property to automatically redirect the user to a malicious site, e.g. as part of a phishing attack. Since this redirect happens in the original window/tab - which is not necessarily visible, since the browser is focusing the display on the new target page - the user might not notice any suspicious redirection.

{'id': '1022', 'attrs': {'ID': '1022', 'Name': 'Use of Web Link to Untrusted Target with window.opener Access', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Variant'}}

418c1d4b46d4a98e4fcc69f9736fe502ea8240dd21e9dbaa4947b23647d890aa

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1023

Incomplete Comparison with Missing Factors

Class

Incomplete

The product performs a comparison between entities that must consider multiple factors or characteristics of each entity, but the comparison does not include one or more of these factors.

{'id': '1023', 'attrs': {'ID': '1023', 'Name': 'Incomplete Comparison with Missing Factors', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Class'}}

88393049153541a2bc6d7c0f6fa926372f6f940f264b882dc6868602cbba7000

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1024

Comparison of Incompatible Types

Base

Incomplete

The product performs a comparison between two entities, but the entities are of different, incompatible types that cannot be guaranteed to provide correct results when they are directly compared.

{'id': '1024', 'attrs': {'ID': '1024', 'Name': 'Comparison of Incompatible Types', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

e2a008f640b8e45657b52ef8209c1def7e8eb5a5d1b8d2b3ade7bf9075584dbb

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1025

Comparison Using Wrong Factors

Base

Incomplete

The code performs a comparison between two entities, but the comparison examines the wrong factors or characteristics of the entities, which can lead to incorrect results and resultant weaknesses.

{'id': '1025', 'attrs': {'ID': '1025', 'Name': 'Comparison Using Wrong Factors', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

206d54e4bfba8f3c578b0eb2b7e46831fa5fc8efc7299f72b1f68958bc48dda1

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-103

Struts: Incomplete validate() Method Definition

Variant

Draft

The product has a validator form that either does not define a validate() method, or defines a validate() method but does not call super.validate().

{'id': '103', 'attrs': {'ID': '103', 'Name': 'Struts: Incomplete validate() Method Definition', 'Status': 'Draft', 'Structure': 'Simple', 'Abstraction': 'Variant'}}

c91596a983358d2e636f3d07fffb7e28b160def477df65105462c6815e37bfa8

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1037

Processor Optimization Removal or Modification of Security-critical Code

Base

Incomplete

Low

The developer builds a security-critical protection mechanism into the software, but the processor optimizes the execution of the program such that the mechanism is removed or modified.

{'id': '1037', 'attrs': {'ID': '1037', 'Name': 'Processor Optimization Removal or Modification of Security-critical Code', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

2c6c32ffa9dea4fe7aaa6d30fad984a4efde1cb579a7240d8b2ae81e6cd42e11

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1038

Insecure Automated Optimizations

Class

Draft

Low

The product uses a mechanism that automatically optimizes code, e.g. to improve a characteristic such as performance, but the optimizations can have an unintended side effect that might violate an intended security assumption.

{'id': '1038', 'attrs': {'ID': '1038', 'Name': 'Insecure Automated Optimizations', 'Status': 'Draft', 'Structure': 'Simple', 'Abstraction': 'Class'}}

581036c28d72e0fafc31b173555acf3c625049afe09cdd38585d6433b5cb8168

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1039

Inadequate Detection or Handling of Adversarial Input Perturbations in Automated Recognition Mechanism

Class

Incomplete

The product uses an automated mechanism such as machine learning to recognize complex data inputs (e.g. image or audio) as a particular concept or category, but it does not properly detect or handle inputs that have been modified or constructed in a way that causes the mechanism to detect a different, incorrect concept.

{'id': '1039', 'attrs': {'ID': '1039', 'Name': 'Inadequate Detection or Handling of Adversarial Input Perturbations in Automated Recognition Mechanism', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Class'}}

9c9dd800415f2f0c235319543bce67f6da2a5ceddd8421ab01e9d87e2bba2bc2

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-104

Struts: Form Bean Does Not Extend Validation Class

Variant

Draft

If a form bean does not extend an ActionForm subclass of the Validator framework, it can expose the application to other weaknesses related to insufficient input validation.

{'id': '104', 'attrs': {'ID': '104', 'Name': 'Struts: Form Bean Does Not Extend Validation Class', 'Status': 'Draft', 'Structure': 'Simple', 'Abstraction': 'Variant'}}

fbed54e58b7df039ad164d9b460725e312ce00bdccc42b280f6e9cb8ad568654

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1041

Use of Redundant Code

Base

Incomplete

The product has multiple functions, methods, procedures, macros, etc. that contain the same code.

{'id': '1041', 'attrs': {'ID': '1041', 'Name': 'Use of Redundant Code', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

3fa29cb780e88b7893537990c2d324b5325a0c2b5078f22976d309682e62bbde

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1042

Static Member Data Element outside of a Singleton Class Element

Variant

Incomplete

The code contains a member element that is declared as static (but not final), in which its parent class element is not a singleton class - that is, a class element that can be used only once in the 'to' association of a Create action.

{'id': '1042', 'attrs': {'ID': '1042', 'Name': 'Static Member Data Element outside of a Singleton Class Element', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Variant'}}

b758351c1133943d57c06eb821c963bc2e231940efda3ae970ba6287292e2d80

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1043

Data Element Aggregating an Excessively Large Number of Non-Primitive Elements

Base

Incomplete

The product uses a data element that has an excessively large number of sub-elements with non-primitive data types such as structures or aggregated objects.

{'id': '1043', 'attrs': {'ID': '1043', 'Name': 'Data Element Aggregating an Excessively Large Number of Non-Primitive Elements', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

036962a03b8c4b3c48a16ecf29627b335734cefdb98608be8d9549e62a40686d

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1044

Architecture with Number of Horizontal Layers Outside of Expected Range

Base

Incomplete

The product's architecture contains too many - or too few - horizontal layers.

{'id': '1044', 'attrs': {'ID': '1044', 'Name': 'Architecture with Number of Horizontal Layers Outside of Expected Range', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

d383fa2e55a36f82b3497bf885f5b1bddf4f242eca9ab97ea1d3dfec5b77bc59

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1045

Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor

Base

Incomplete

A parent class has a virtual destructor method, but the parent has a child class that does not have a virtual destructor.

{'id': '1045', 'attrs': {'ID': '1045', 'Name': 'Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

1912116402cb8b387d714dd8566088948ff354bf0577a7552d770f2232311ae0

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1046

Creation of Immutable Text Using String Concatenation

Base

Incomplete

The product creates an immutable text string using string concatenation operations.

{'id': '1046', 'attrs': {'ID': '1046', 'Name': 'Creation of Immutable Text Using String Concatenation', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

8b51b01bc3ae6bff0f06608302e1c685d471371b4bc99332cd609d73da7d2d8f

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1047

Modules with Circular Dependencies

Base

Incomplete

The product contains modules in which one module has references that cycle back to itself, i.e., there are circular dependencies.

As an example, with Java, this weakness might indicate cycles between packages.

{'id': '1047', 'attrs': {'ID': '1047', 'Name': 'Modules with Circular Dependencies', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

878017ca7dabf6926eaa91db798169db397870f6490b779eea6fb3d002f7f8f8

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1048

Invokable Control Element with Large Number of Outward Calls

Base

Incomplete

The code contains callable control elements that contain an excessively large number of references to other application objects external to the context of the callable, i.e. a Fan-Out value that is excessively large.

{'id': '1048', 'attrs': {'ID': '1048', 'Name': 'Invokable Control Element with Large Number of Outward Calls', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

73cf15834e0256baf1d0c9d51b2ba4b88e9645f17c42c1fe658dac1fadb04d60

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1049

Excessive Data Query Operations in a Large Data Table

Base

Incomplete

The product performs a data query with a large number of joins and sub-queries on a large data table.

{'id': '1049', 'attrs': {'ID': '1049', 'Name': 'Excessive Data Query Operations in a Large Data Table', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

88133ac1adf2586e3fb74a2e2e2baa24cc406df265c841174b5c6f44c8b3a506

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-105

Struts: Form Field Without Validator

Variant

Draft

The product has a form field that is not validated by a corresponding validation form, which can introduce other weaknesses related to insufficient input validation.

Omitting validation for even a single input field may give attackers the leeway they need to compromise the product. Although J2EE applications are not generally susceptible to memory corruption attacks, if a J2EE application interfaces with native code that does not perform array bounds checking, an attacker may be able to use an input validation mistake in the J2EE application to launch a buffer overflow attack.

{'id': '105', 'attrs': {'ID': '105', 'Name': 'Struts: Form Field Without Validator', 'Status': 'Draft', 'Structure': 'Simple', 'Abstraction': 'Variant'}}

5275dbc168e44c93d73064fa5bffb23fd20326c2ba405341c155a879489e5b68

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1050

Excessive Platform Resource Consumption within a Loop

Base

Incomplete

The product has a loop body or loop condition that contains a control element that directly or indirectly consumes platform resources, e.g. messaging, sessions, locks, or file descriptors.

{'id': '1050', 'attrs': {'ID': '1050', 'Name': 'Excessive Platform Resource Consumption within a Loop', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

c8aee51ddb451e62829dc14d072c3f830da0fc351d98dd688271dcf150b1ae90

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1051

Initialization with Hard-Coded Network Resource Configuration Data

Base

Incomplete

The product initializes data using hard-coded values that act as network resource identifiers.

{'id': '1051', 'attrs': {'ID': '1051', 'Name': 'Initialization with Hard-Coded Network Resource Configuration Data', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

36a6f77e9762e777e0ead9d10aad5eae823b10ca87af47c5ffff1948b60fd626

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1052

Excessive Use of Hard-Coded Literals in Initialization

Base

Incomplete

The product initializes a data element using a hard-coded literal that is not a simple integer or static constant element.

{'id': '1052', 'attrs': {'ID': '1052', 'Name': 'Excessive Use of Hard-Coded Literals in Initialization', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

ae34b59afed7270769d01033a44c9f536983a9f67657ff487f52a0ee41be52fb

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1053

Missing Documentation for Design

Base

Incomplete

The product does not have documentation that represents how it is designed.

{'id': '1053', 'attrs': {'ID': '1053', 'Name': 'Missing Documentation for Design', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

83c760d32a31dba1bba30e4a8d30428ae4c461d1316133454332cb078e34ae41

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1054

Invocation of a Control Element at an Unnecessarily Deep Horizontal Layer

Base

Incomplete

The code at one architectural layer invokes code that resides at a deeper layer than the adjacent layer, i.e., the invocation skips at least one layer, and the invoked code is not part of a vertical utility layer that can be referenced from any horizontal layer.

{'id': '1054', 'attrs': {'ID': '1054', 'Name': 'Invocation of a Control Element at an Unnecessarily Deep Horizontal Layer', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

f806e8d8e82f434a7954086949e33072648b58e99977a3a57d33ce9b511c9c15

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1055

Multiple Inheritance from Concrete Classes

Base

Incomplete

The product contains a class with inheritance from more than one concrete class.

{'id': '1055', 'attrs': {'ID': '1055', 'Name': 'Multiple Inheritance from Concrete Classes', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

b73589442914591c85e9673533cf12ca1f6b7fade920d4018f375187262d2aaa

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1056

Invokable Control Element with Variadic Parameters

Base

Incomplete

A named-callable or method control element has a signature that supports a variable (variadic) number of parameters or arguments.

{'id': '1056', 'attrs': {'ID': '1056', 'Name': 'Invokable Control Element with Variadic Parameters', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

fbf3653b2056f5961251d64b19b5828b5771e82f2918e462de886c2cc66d927f

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1057

Data Access Operations Outside of Expected Data Manager Component

Base

Incomplete

The product uses a dedicated, central data manager component as required by design, but it contains code that performs data-access operations that do not use this data manager.

{'id': '1057', 'attrs': {'ID': '1057', 'Name': 'Data Access Operations Outside of Expected Data Manager Component', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

85fe7306fb5011471cd1bc263bd7970e2fcc9a942fc1034ca486c1f72055de36

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1058

Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element

Base

Incomplete

The code contains a function or method that operates in a multi-threaded environment but owns an unsafe non-final static storable or member data element.

{'id': '1058', 'attrs': {'ID': '1058', 'Name': 'Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

649c2ac6a8314a1e3afb438928f81e4c74b4dd9d240d229d927d78831641fde6

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1059

Insufficient Technical Documentation

Class

Incomplete

The product does not contain sufficient technical or engineering documentation (whether on paper or in electronic form) that contains descriptions of all the relevant software/hardware elements of the product, such as its usage, structure, architectural components, interfaces, design, implementation, configuration, operation, etc.

{'id': '1059', 'attrs': {'ID': '1059', 'Name': 'Insufficient Technical Documentation', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Class'}}

7948320359507d2b5210f4a0068e6dcb40eefe6b15ba6eaee60d3c908af39516

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-106

Struts: Plug-in Framework not in Use

Variant

Draft

When an application does not use an input validation framework such as the Struts Validator, there is a greater risk of introducing weaknesses related to insufficient input validation.

{'id': '106', 'attrs': {'ID': '106', 'Name': 'Struts: Plug-in Framework not in Use', 'Status': 'Draft', 'Structure': 'Simple', 'Abstraction': 'Variant'}}

3ab6d45eb1c4bdb08fe8c37a92bd37f07344103491555f954ce26c4c0ff8ddb1

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1060

Excessive Number of Inefficient Server-Side Data Accesses

Base

Incomplete

The product performs too many data queries without using efficient data processing functionality such as stored procedures.

{'id': '1060', 'attrs': {'ID': '1060', 'Name': 'Excessive Number of Inefficient Server-Side Data Accesses', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

0e63a8545199ac38084f1e3c67ffae927719a1cf30fcc9e8058098e88c203fa6

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1061

Insufficient Encapsulation

Class

Incomplete

The product does not sufficiently hide the internal representation and implementation details of data or methods, which might allow external components or modules to modify data unexpectedly, invoke unexpected functionality, or introduce dependencies that the programmer did not intend.

{'id': '1061', 'attrs': {'ID': '1061', 'Name': 'Insufficient Encapsulation', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Class'}}

df009c0e1fcf8dad6b24dcb684a79fc33a27e85b5d0865553fafdba0c8c106c2

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1062

Parent Class with References to Child Class

Base

Incomplete

The code has a parent class that contains references to a child class, its methods, or its members.

{'id': '1062', 'attrs': {'ID': '1062', 'Name': 'Parent Class with References to Child Class', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

93d280b352c35090236103463e9a55a73a4d82555ac69da108aed3716506edd0

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1063

Creation of Class Instance within a Static Code Block

Base

Incomplete

A static code block creates an instance of a class.

{'id': '1063', 'attrs': {'ID': '1063', 'Name': 'Creation of Class Instance within a Static Code Block', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

8685ef54ac9ee5b801adde5e846e1389efa268af36eac1c6409988108fd6e547

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1064

Invokable Control Element with Signature Containing an Excessive Number of Parameters

Base

Incomplete

The product contains a function, subroutine, or method whose signature has an unnecessarily large number of parameters/arguments.

{'id': '1064', 'attrs': {'ID': '1064', 'Name': 'Invokable Control Element with Signature Containing an Excessive Number of Parameters', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

dbbad52d9186a6035892ab1b15fb7e7c6d8b627a96c83e05b86a1ce10e03399b

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1065

Runtime Resource Management Control Element in a Component Built to Run on Application Servers

Base

Incomplete

The product uses deployed components from application servers, but it also uses low-level functions/methods for management of resources, instead of the API provided by the application server.

{'id': '1065', 'attrs': {'ID': '1065', 'Name': 'Runtime Resource Management Control Element in a Component Built to Run on Application Servers', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

857dd9b80c7717429708037e318174a89eb46e8f87a3ad15afa9017e144ae9fd

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1066

Missing Serialization Control Element

Base

Incomplete

The product contains a serializable data element that does not have an associated serialization method.

{'id': '1066', 'attrs': {'ID': '1066', 'Name': 'Missing Serialization Control Element', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

3993acbd0f3477fc0fd826028ef4e604423610092224d316324bd0a162aa5b84

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1067

Excessive Execution of Sequential Searches of Data Resource

Base

Incomplete

The product contains a data query against an SQL table or view that is configured in a way that does not utilize an index and may cause sequential searches to be performed.

{'id': '1067', 'attrs': {'ID': '1067', 'Name': 'Excessive Execution of Sequential Searches of Data Resource', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

7a9bb88c590e32c8b221a5be459c66a2bd61f467459f2e15288836affb6f6227

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1068

Inconsistency Between Implementation and Documented Design

Base

Incomplete

The implementation of the product is not consistent with the design as described within the relevant documentation.

{'id': '1068', 'attrs': {'ID': '1068', 'Name': 'Inconsistency Between Implementation and Documented Design', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

0248d9e0060345d9dc83bc47b77c05dafffc76fb8da3e2949b37a3d741f5d79a

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1069

Empty Exception Block

Variant

Incomplete

An invokable code block contains an exception handling block that does not contain any code, i.e. is empty.

{'id': '1069', 'attrs': {'ID': '1069', 'Name': 'Empty Exception Block', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Variant'}}

a96ea48a2188956afe78aa310d70f78d88f95ec69e4ed5932f60b9969ac3674d

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-107

Struts: Unused Validation Form

Variant

Draft

An unused validation form indicates that validation logic is not up-to-date.

{'id': '107', 'attrs': {'ID': '107', 'Name': 'Struts: Unused Validation Form', 'Status': 'Draft', 'Structure': 'Simple', 'Abstraction': 'Variant'}}

8df24406fb52af3b93123a178574fd8cbbf6376fb448c0cd66be3c0fa478493d

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1070

Serializable Data Element Containing non-Serializable Item Elements

Base

Incomplete

The product contains a serializable, storable data element such as a field or member, but the data element contains member elements that are not serializable.

{'id': '1070', 'attrs': {'ID': '1070', 'Name': 'Serializable Data Element Containing non-Serializable Item Elements', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

05df506c1d59fdb66e0ff1eb7bf13a2e408b2cbcdcea3405b82b630f83e2da8f

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1071

Empty Code Block

Base

Incomplete

The source code contains a block that does not contain any code, i.e., the block is empty.

{'id': '1071', 'attrs': {'ID': '1071', 'Name': 'Empty Code Block', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

c02559cbaeaa1d3d2a60d91fbcfa7d902c2716554a0f3690c2e0ab8bea87c6a1

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1072

Data Resource Access without Use of Connection Pooling

Base

Incomplete

The product accesses a data resource through a database without using a connection pooling capability.

{'id': '1072', 'attrs': {'ID': '1072', 'Name': 'Data Resource Access without Use of Connection Pooling', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

84417ec4148e0cd07027f8dde5139fd563aee79c97b16e1bf7c2053b2d632a6e

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1073

Non-SQL Invokable Control Element with Excessive Number of Data Resource Accesses

Base

Incomplete

The product contains a client with a function or method that contains a large number of data accesses/queries that are sent through a data manager, i.e., does not use efficient database capabilities.

{'id': '1073', 'attrs': {'ID': '1073', 'Name': 'Non-SQL Invokable Control Element with Excessive Number of Data Resource Accesses', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

b7c5fd6cc4ca354f0f8bcd899096f93e7141c7cec95d1db4ee02ddeee3af17cd

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1074

Class with Excessively Deep Inheritance

Base

Incomplete

A class has an inheritance level that is too high, i.e., it has a large number of parent classes.

{'id': '1074', 'attrs': {'ID': '1074', 'Name': 'Class with Excessively Deep Inheritance', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

98818820b67fbad4414c58569cabab03058a9545c1396f926d57683949899ca2

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1075

Unconditional Control Flow Transfer outside of Switch Block

Base

Incomplete

The product performs unconditional control transfer (such as a "goto") in code outside of a branching structure such as a switch block.

{'id': '1075', 'attrs': {'ID': '1075', 'Name': 'Unconditional Control Flow Transfer outside of Switch Block', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

4ddfb6adae70ad648a0c90783b08344258aecd177bf3c7de37a9cb171593cc3d

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1076

Insufficient Adherence to Expected Conventions

Class

Incomplete

The product's architecture, source code, design, documentation, or other artifact does not follow required conventions.

{'id': '1076', 'attrs': {'ID': '1076', 'Name': 'Insufficient Adherence to Expected Conventions', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Class'}}

6f5af8d2900eed59aed6b8d8687e31184496090f3e502cb7f72ce67a7968d81c

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1077

Floating Point Comparison with Incorrect Operator

Variant

Incomplete

The code performs a comparison such as an equality test between two float (floating point) values, but it uses comparison operators that do not account for the possibility of loss of precision.

{'id': '1077', 'attrs': {'ID': '1077', 'Name': 'Floating Point Comparison with Incorrect Operator', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Variant'}}

91bc2f9e2e0dd27fb97ae29fb14e5c1e0c86b4591a51d1ecb78748dcc5918993

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1078

Inappropriate Source Code Style or Formatting

Class

Incomplete

The source code does not follow desired style or formatting for indentation, white space, comments, etc.

{'id': '1078', 'attrs': {'ID': '1078', 'Name': 'Inappropriate Source Code Style or Formatting', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Class'}}

83c458e7b865fd5c6065e8be38a79ae853a7f029e3b1cee432cd6f81d3a7eabb

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1079

Parent Class without Virtual Destructor Method

Base

Incomplete

A parent class contains one or more child classes, but the parent class does not have a virtual destructor method.

{'id': '1079', 'attrs': {'ID': '1079', 'Name': 'Parent Class without Virtual Destructor Method', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

d9d01ffabd53124582c54dca26a17c32e75858ff8ca928d5f3e0991ca7d393f8

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-108

Struts: Unvalidated Action Form

Variant

Incomplete

Every Action Form must have a corresponding validation form.

If a Struts Action Form Mapping specifies a form, it must have a validation form defined under the Struts Validator.

{'id': '108', 'attrs': {'ID': '108', 'Name': 'Struts: Unvalidated Action Form', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Variant'}}

b2f2e6a4b4bcac7a9a03251b046bf33a41a9ee4b554a72e73299e9e574d83e02

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1080

Source Code File with Excessive Number of Lines of Code

Base

Incomplete

A source code file has too many lines of code.

{'id': '1080', 'attrs': {'ID': '1080', 'Name': 'Source Code File with Excessive Number of Lines of Code', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

1fc6a99ac49c166ae1e778574fb8bb84639523f564871918c9c4af39d3826dcf

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1082

Class Instance Self Destruction Control Element

Base

Incomplete

The code contains a class instance that calls the method or function to delete or destroy itself.

{'id': '1082', 'attrs': {'ID': '1082', 'Name': 'Class Instance Self Destruction Control Element', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

f8916be2b8f3b27c7fce8b1c1381870fd3cf48aadfe9a6e85552852dc7eb6be2

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1083

Data Access from Outside Expected Data Manager Component

Base

Incomplete

The product is intended to manage data access through a particular data manager component such as a relational or non-SQL database, but it contains code that performs data access operations without using that component.

{'id': '1083', 'attrs': {'ID': '1083', 'Name': 'Data Access from Outside Expected Data Manager Component', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

77c60e2af8ed2e26623c5e20933b98fdf195ce4942a5b29be15f36683b3f9601

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1084

Invokable Control Element with Excessive File or Data Access Operations

Base

Incomplete

A function or method contains too many operations that utilize a data manager or file resource.

{'id': '1084', 'attrs': {'ID': '1084', 'Name': 'Invokable Control Element with Excessive File or Data Access Operations', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

c4822eeb8967b9a3d0bd194be56daf631a51d7f8fdeed4de6dc76e0733979616

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1085

Invokable Control Element with Excessive Volume of Commented-out Code

Base

Incomplete

A function, method, procedure, etc. contains an excessive amount of code that has been commented out within its body.

{'id': '1085', 'attrs': {'ID': '1085', 'Name': 'Invokable Control Element with Excessive Volume of Commented-out Code', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

382516609f08efeaca9585a14d7d16225c48e93c4994c13ee9eff21b6541dfb3

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1086

Class with Excessive Number of Child Classes

Base

Incomplete

A class contains an unnecessarily large number of children.

{'id': '1086', 'attrs': {'ID': '1086', 'Name': 'Class with Excessive Number of Child Classes', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

cefcd9b412ec391b6ac326c4c5e7bbb47bd84a9c5bd53c2f4c71abe30b8a0941

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1087

Class with Virtual Method without a Virtual Destructor

Base

Incomplete

A class contains a virtual method, but the method does not have an associated virtual destructor.

{'id': '1087', 'attrs': {'ID': '1087', 'Name': 'Class with Virtual Method without a Virtual Destructor', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

5689d15ddb89e69bf6f92ec80e297412e5f3225989436145d3340b4d83af2d05

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1088

Synchronous Access of Remote Resource without Timeout

Base

Incomplete

The code has a synchronous call to a remote resource, but there is no timeout for the call, or the timeout is set to infinite.

{'id': '1088', 'attrs': {'ID': '1088', 'Name': 'Synchronous Access of Remote Resource without Timeout', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

50a1b5ff65f387512f80ee8acd6ac55cf097f66857df953b9f70e016f2542518

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1089

Large Data Table with Excessive Number of Indices

Base

Incomplete

The product uses a large data table that contains an excessively large number of indices.

{'id': '1089', 'attrs': {'ID': '1089', 'Name': 'Large Data Table with Excessive Number of Indices', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

a84e8417bbd530284f4e54c911c24a886f5f2248ef90ffc9ae41e3fb7c017118

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-109

Struts: Validator Turned Off

Variant

Draft

Automatic filtering via a Struts bean has been turned off, which disables the Struts Validator and custom validation logic. This exposes the application to other weaknesses related to insufficient input validation.

{'id': '109', 'attrs': {'ID': '109', 'Name': 'Struts: Validator Turned Off', 'Status': 'Draft', 'Structure': 'Simple', 'Abstraction': 'Variant'}}

58c9fc3eb351e6e848c93447d187840f929e3a95880f9970d037935e8796e1a0

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1090

Method Containing Access of a Member Element from Another Class

Base

Incomplete

A method for a class performs an operation that directly accesses a member element from another class.

{'id': '1090', 'attrs': {'ID': '1090', 'Name': 'Method Containing Access of a Member Element from Another Class', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

397903d4fa34ea9bfcaf7c99d8086629fc8e2d81da7a0aea5a2f983cf697ac9b

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1091

Use of Object without Invoking Destructor Method

Base

Incomplete

The product contains a method that accesses an object but does not later invoke the element's associated finalize/destructor method.

{'id': '1091', 'attrs': {'ID': '1091', 'Name': 'Use of Object without Invoking Destructor Method', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

90ee5ca565bdb42ea654bb239a1fa6a54df612883f94e87ab6b6c2c319c04877

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1092

Use of Same Invokable Control Element in Multiple Architectural Layers

Base

Incomplete

The product uses the same control element across multiple architectural layers.

{'id': '1092', 'attrs': {'ID': '1092', 'Name': 'Use of Same Invokable Control Element in Multiple Architectural Layers', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

bc2c7f3fdf6cef366048c829783ba0e8c5cbe76007d4df424413aed46eefe459

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1093

Excessively Complex Data Representation

Class

Incomplete

The product uses an unnecessarily complex internal representation for its data structures or interrelationships between those structures.

{'id': '1093', 'attrs': {'ID': '1093', 'Name': 'Excessively Complex Data Representation', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Class'}}

7db770aac6542b48cbcba27556d1e3f71ac7c0262de513d3e8baff6c90fa542d

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1094

Excessive Index Range Scan for a Data Resource

Base

Incomplete

The product contains an index range scan for a large data table, but the scan can cover a large number of rows.

{'id': '1094', 'attrs': {'ID': '1094', 'Name': 'Excessive Index Range Scan for a Data Resource', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

5a29c34e55e8d37e047ecfadecd98215d94671b2a188f1ba2475a23769c145ab

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1095

Loop Condition Value Update within the Loop

Base

Incomplete

The product uses a loop with a control flow condition based on a value that is updated within the body of the loop.

{'id': '1095', 'attrs': {'ID': '1095', 'Name': 'Loop Condition Value Update within the Loop', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

dbc63982872b9fa37bea28823c5793e7e84e53f5c8a877ec276fc19b999ca860

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1096

Singleton Class Instance Creation without Proper Locking or Synchronization

Variant

Incomplete

The product implements a Singleton design pattern but does not use appropriate locking or other synchronization mechanism to ensure that the singleton class is only instantiated once.

{'id': '1096', 'attrs': {'ID': '1096', 'Name': 'Singleton Class Instance Creation without Proper Locking or Synchronization', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Variant'}}

f3daf4700844626b50d493b2dc29ef3f278feb8749ad37daad02dd49605fea89

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1097

Persistent Storable Data Element without Associated Comparison Control Element

Base

Incomplete

The product uses a storable data element that does not have all of the associated functions or methods that are necessary to support comparison.

{'id': '1097', 'attrs': {'ID': '1097', 'Name': 'Persistent Storable Data Element without Associated Comparison Control Element', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

c240ff258243ed860830d401c0760ee38c8613f0aef5867cc61fcd527bd92a2d

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1098

Data Element containing Pointer Item without Proper Copy Control Element

Base

Incomplete

The code contains a data element with a pointer that does not have an associated copy or constructor method.

{'id': '1098', 'attrs': {'ID': '1098', 'Name': 'Data Element containing Pointer Item without Proper Copy Control Element', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

a1e077ab6b3c11dc3bb751d7fd395b6798ab97841fad5765927c507964cf1dc2

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1099

Inconsistent Naming Conventions for Identifiers

Base

Incomplete

The product's code, documentation, or other artifacts do not consistently use the same naming conventions for variables, callables, groups of related callables, I/O capabilities, data types, file names, or similar types of elements.

{'id': '1099', 'attrs': {'ID': '1099', 'Name': 'Inconsistent Naming Conventions for Identifiers', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

cbe932be710f4be74bbf78e900d2dedcbe13b3fc3423edd6114a390e922d6fee

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-11

ASP.NET Misconfiguration: Creating Debug Binary

Variant

Draft

Debugging messages help attackers learn about the system and plan a form of attack.

ASP .NET applications can be configured to produce debug binaries. These binaries give detailed debugging messages and should not be used in production environments. Debug binaries are meant to be used in a development or testing environment and can pose a security risk if they are deployed to production.

{'id': '11', 'attrs': {'ID': '11', 'Name': 'ASP.NET Misconfiguration: Creating Debug Binary', 'Status': 'Draft', 'Structure': 'Simple', 'Abstraction': 'Variant'}}

e80af70b3718a98e0e8ce1f0a7d936615bca2ff1ce8a743e327508c1844f7cd5

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-110

Struts: Validator Without Form Field

Variant

Draft

Validation fields that do not appear in forms they are associated with indicate that the validation logic is out of date.

{'id': '110', 'attrs': {'ID': '110', 'Name': 'Struts: Validator Without Form Field', 'Status': 'Draft', 'Structure': 'Simple', 'Abstraction': 'Variant'}}

64174c38782e78c36cd62022865f60d67c78f25d7d314e3a6a6076e8acfaff99

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1100

Insufficient Isolation of System-Dependent Functions

Base

Incomplete

The product or code does not isolate system-dependent functionality into separate standalone modules.

{'id': '1100', 'attrs': {'ID': '1100', 'Name': 'Insufficient Isolation of System-Dependent Functions', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

3027ea8c7e204c68f40631f5f8d02b554489d28f9d5b1102afa9b90d920dab93

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1101

Reliance on Runtime Component in Generated Code

Base

Incomplete

The product uses automatically-generated code that cannot be executed without a specific runtime support component.

{'id': '1101', 'attrs': {'ID': '1101', 'Name': 'Reliance on Runtime Component in Generated Code', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

28428de5e3f1d32daa0c10c45bbbfd96454e71abe137a585764c0ecf8809bc6d

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1102

Reliance on Machine-Dependent Data Representation

Base

Incomplete

The code uses a data representation that relies on low-level data representation or constructs that may vary across different processors, physical machines, OSes, or other physical components.

{'id': '1102', 'attrs': {'ID': '1102', 'Name': 'Reliance on Machine-Dependent Data Representation', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

a2081fd0173de7a76ec511cef5a67870cf1876bafc838203e85ac4066367891f

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1103

Use of Platform-Dependent Third Party Components

Base

Incomplete

The product relies on third-party components that do not provide equivalent functionality across all desirable platforms.

{'id': '1103', 'attrs': {'ID': '1103', 'Name': 'Use of Platform-Dependent Third Party Components', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

4d12e3771d6688f9db021aee576cdb8708ce60bace227e9f13a7af6fc3da297c

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1104

Use of Unmaintained Third Party Components

Base

Incomplete

The product relies on third-party components that are not actively supported or maintained by the original developer or a trusted proxy for the original developer.

{'id': '1104', 'attrs': {'ID': '1104', 'Name': 'Use of Unmaintained Third Party Components', 'Status': 'Incomplete', 'Diagram': '/data/images/CWE-1104-Diagram.png', 'Structure': 'Simple', 'Abstraction': 'Base'}}

77c73fe9d04421df211c3b32474a069a5fad6233c56c0ceeaea61e69cf143794

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1105

Insufficient Encapsulation of Machine-Dependent Functionality

Base

Incomplete

The product or code uses machine-dependent functionality, but it does not sufficiently encapsulate or isolate this functionality from the rest of the code.

{'id': '1105', 'attrs': {'ID': '1105', 'Name': 'Insufficient Encapsulation of Machine-Dependent Functionality', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

64ed0bb6cc5770442e060e1a7f97b24adb9ece4c7f919917af3bb625f3ce2cbe

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1106

Insufficient Use of Symbolic Constants

Base

Incomplete

The source code uses literal constants that may need to change or evolve over time, instead of using symbolic constants.

{'id': '1106', 'attrs': {'ID': '1106', 'Name': 'Insufficient Use of Symbolic Constants', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

41c78e4f072fd6f2a13c88cd2c78a7a8666505eb468def4e701e13007bae1ba0

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1107

Insufficient Isolation of Symbolic Constant Definitions

Base

Incomplete

The source code uses symbolic constants, but it does not sufficiently place the definitions of these constants into a more centralized or isolated location.

{'id': '1107', 'attrs': {'ID': '1107', 'Name': 'Insufficient Isolation of Symbolic Constant Definitions', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

53e0fb6901e05d33dc7a4fca3d3acc7171159f56094e6a8809f2956f5b2c4a8f

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1108

Excessive Reliance on Global Variables

Base

Incomplete

The code is structured in a way that relies too much on using or setting global variables throughout various points in the code, instead of preserving the associated information in a narrower, more local context.

{'id': '1108', 'attrs': {'ID': '1108', 'Name': 'Excessive Reliance on Global Variables', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

836a0a70c4d8b84126b27daab66427099a270064dff1db997f41f2b7e0bfb77f

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1109

Use of Same Variable for Multiple Purposes

Base

Incomplete

The code contains a callable, block, or other code element in which the same variable is used to control more than one unique task or store more than one instance of data.

{'id': '1109', 'attrs': {'ID': '1109', 'Name': 'Use of Same Variable for Multiple Purposes', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

5ba19f84e07f552ce32e698fe54e112d3f5184768f42ade90add1d4e89d93478

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-111

Direct Use of Unsafe JNI

Variant

Draft

When a Java application uses the Java Native Interface (JNI) to call code written in another programming language, it can expose the application to weaknesses in that code, even if those weaknesses cannot occur in Java.

Many safety features that programmers may take for granted do not apply for native code, so you must carefully review all such code for potential problems. The languages used to implement native code may be more susceptible to buffer overflows and other attacks. Native code is unprotected by the security features enforced by the runtime environment, such as strong typing and array bounds checking.

{'id': '111', 'attrs': {'ID': '111', 'Name': 'Direct Use of Unsafe JNI', 'Status': 'Draft', 'Structure': 'Simple', 'Abstraction': 'Variant'}}

85a56fc82a0bb141a3eedc6c1a7b919d70674feec285df605dd26fcd7a9b2f8d

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1110

Incomplete Design Documentation

Base

Incomplete

The product's design documentation does not adequately describe control flow, data flow, system initialization, relationships between tasks, components, rationales, or other important aspects of the design.

{'id': '1110', 'attrs': {'ID': '1110', 'Name': 'Incomplete Design Documentation', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

61eba83bfd66c66595b4389b7953795e1db5b5c4dfea8fad8fed222cf5d081fb

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1111

Incomplete I/O Documentation

Base

Incomplete

The product's documentation does not adequately define inputs, outputs, or system/software interfaces.

{'id': '1111', 'attrs': {'ID': '1111', 'Name': 'Incomplete I/O Documentation', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

88b0c375d1b2a031fb84c867da45575a906c7e77397a94bceea2b0f126533709

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1112

Incomplete Documentation of Program Execution

Base

Incomplete

The document does not fully define all mechanisms that are used to control or influence how product-specific programs are executed.

{'id': '1112', 'attrs': {'ID': '1112', 'Name': 'Incomplete Documentation of Program Execution', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

921e4d44bdfdf549875dcf31c008e7bc687b67ff3df72026f3eb6daf6f1b4d52

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1113

Inappropriate Comment Style

Base

Incomplete

The source code uses comment styles or formats that are inconsistent or do not follow expected standards for the product.

{'id': '1113', 'attrs': {'ID': '1113', 'Name': 'Inappropriate Comment Style', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

352b24f426fde7a898938918bc1b84101ca7f9c2f24872a1f0e9830dc1838057

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1114

Inappropriate Whitespace Style

Base

Incomplete

The source code contains whitespace that is inconsistent across the code or does not follow expected standards for the product.

{'id': '1114', 'attrs': {'ID': '1114', 'Name': 'Inappropriate Whitespace Style', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

5725440b4874f9ae226d14cf2812b040b6d124440f9566f07a74fccc0f714bdc

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1115

Source Code Element without Standard Prologue

Base

Incomplete

The source code contains elements such as source files that do not consistently provide a prologue or header that has been standardized for the project.

{'id': '1115', 'attrs': {'ID': '1115', 'Name': 'Source Code Element without Standard Prologue', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

685b6a867503cbbc206de60261a4f7153fb38fe02af1b9432fa293d2d3116fc8

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1116

Inaccurate Source Code Comments

Base

Incomplete

The source code contains comments that do not accurately describe or explain aspects of the portion of the code with which the comment is associated.

{'id': '1116', 'attrs': {'ID': '1116', 'Name': 'Inaccurate Source Code Comments', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

5b9efb7818ae41ad852fb4136a4e01b14518b84a4f0b60f6d1d0b57dd9fe5055

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1117

Callable with Insufficient Behavioral Summary

Base

Incomplete

The code contains a function or method whose signature and/or associated inline documentation does not sufficiently describe the callable's inputs, outputs, side effects, assumptions, or return codes.

{'id': '1117', 'attrs': {'ID': '1117', 'Name': 'Callable with Insufficient Behavioral Summary', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

395f4eab0df33b21b1636fb499f19f8283831e4827d5359225e375841995fef8

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1118

Insufficient Documentation of Error Handling Techniques

Base

Incomplete

The documentation does not sufficiently describe the techniques that are used for error handling, exception processing, or similar mechanisms.

{'id': '1118', 'attrs': {'ID': '1118', 'Name': 'Insufficient Documentation of Error Handling Techniques', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

1296153f7e60f6b8c1366c4f65535f9ba5ab16106b4d17d808ea927af5523367

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-1119

Excessive Use of Unconditional Branching

Base

Incomplete

The code uses too many unconditional branches (such as "goto").

{'id': '1119', 'attrs': {'ID': '1119', 'Name': 'Excessive Use of Unconditional Branching', 'Status': 'Incomplete', 'Structure': 'Simple', 'Abstraction': 'Base'}}

88cb9d5371e4d11d0d48caec9d2ea87ded05914232d8ac8b2e0d88187b2ced6d

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00

CWE-112

Missing XML Validation

Base

Draft

The product accepts XML from an untrusted source but does not validate the XML against the proper schema.

Most successful attacks begin with a violation of the programmer's assumptions. By accepting an XML document without validating it against a DTD or XML schema, the programmer leaves a door open for attackers to provide unexpected, unreasonable, or malicious input.

{'id': '112', 'attrs': {'ID': '112', 'Name': 'Missing XML Validation', 'Status': 'Draft', 'Structure': 'Simple', 'Abstraction': 'Base'}}

3fea56b2f57ac5f26b5dff804353373cac39309f100a484d5e3aeccf970b5020

2026-06-01 17:16:09.917723+03:00

2026-06-01 17:16:09.917723+03:00