| CWE-79 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
weakness |
weakness/CWE-79 |
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page |
| CWE-790 — Improper Filtering of Special Elements |
weakness |
weakness/CWE-790 |
The product receives data from an upstream component, but does not filter or incorrectly filters special elements before sending it to a dow |
| CWE-791 — Incomplete Filtering of Special Elements |
weakness |
weakness/CWE-791 |
The product receives data from an upstream component, but does not completely filter special elements before sending it to a downstream comp |
| CWE-792 — Incomplete Filtering of One or More Instances of Special Elements |
weakness |
weakness/CWE-792 |
The product receives data from an upstream component, but does not completely filter one or more instances of special elements before sendin |
| CWE-793 — Only Filtering One Instance of a Special Element |
weakness |
weakness/CWE-793 |
The product receives data from an upstream component, but only filters a single instance of a special element before sending it to a downstr |
| CWE-794 — Incomplete Filtering of Multiple Instances of Special Elements |
weakness |
weakness/CWE-794 |
The product receives data from an upstream component, but does not filter all instances of a special element before sending it to a downstre |
| CWE-795 — Only Filtering Special Elements at a Specified Location |
weakness |
weakness/CWE-795 |
The product receives data from an upstream component, but only accounts for special elements at a specified location, thereby missing remain |
| CWE-796 — Only Filtering Special Elements Relative to a Marker |
weakness |
weakness/CWE-796 |
The product receives data from an upstream component, but only accounts for special elements positioned relative to a marker (e.g. 'at the b |
| CWE-797 — Only Filtering Special Elements at an Absolute Position |
weakness |
weakness/CWE-797 |
The product receives data from an upstream component, but only accounts for special elements at an absolute position (e.g. 'byte number 10') |
| CWE-798 — Use of Hard-coded Credentials |
weakness |
weakness/CWE-798 |
The product contains hard-coded credentials, such as a password or cryptographic key. |
| CWE-799 — Improper Control of Interaction Frequency |
weakness |
weakness/CWE-799 |
The product does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming reques |