Updating CWE for 2020

This commit is contained in:
Cisco Talos CNA 2022-04-28 14:36:12 -04:00
parent 7faf2be58b
commit a9241a0c7a
196 changed files with 196 additions and 196 deletions

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "heap overflow"
"value": "CWE-122: Heap-based Buffer Overflow"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "heap-based buffer overflow"
"value": "CWE-122: Heap-based Buffer Overflow"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
"value": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
"value": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
"value": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "improper privilege"
"value": "CWE-269: Improper Privilege Management"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "improper privilege"
"value": "CWE-269: Improper Privilege Management"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "improper privilege"
"value": "CWE-269: Improper Privilege Management"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "improper privilege"
"value": "CWE-269: Improper Privilege Management"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "improper privilege"
"value": "CWE-269: Improper Privilege Management"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "improper privilege"
"value": "CWE-269: Improper Privilege Management"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "improper privilege"
"value": "CWE-269: Improper Privilege Management"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "improper privilege"
"value": "CWE-269: Improper Privilege Management"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "improper privilege"
"value": "CWE-269: Improper Privilege Management"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "improper privilege"
"value": "CWE-269: Improper Privilege Management"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "improper privilege"
"value": "CWE-269: Improper Privilege Management"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "remote code execution"
"value": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "Improper Privilege Management"
"value": "CWE-269: Improper Privilege Management"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "Information Exposure"
"value": "CWE-200: Information Exposure"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "out of bounds memory corruption"
"value": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "cross site forgery"
"value": "CWE-352: Cross-Site Request Forgery (CSRF)"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "cleartext transmission of sensitive information"
"value": "CWE-319: Cleartext Transmission of Sensitive Information"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "denial of service"
"value": "CWE-290: Authentication Bypass by Spoofing"
}
]
}

View File

@ -39,7 +39,7 @@
"description": [
{
"lang": "eng",
"value": "denial of service"
"value": "CWE-910: Use of Expired File Descriptor"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "use-after-free"
"value": "CWE-416: Use After Free"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "privilege escalation"
"value": "CWE-276: Incorrect Default Permissions"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "privilege escalation"
"value": "CWE-276: Incorrect Default Permissions"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "privilege escalation"
"value": "CWE-276: Incorrect Default Permissions"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "privilege escalation"
"value": "CWE-276: Incorrect Default Permissions"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "incorrect default permissions"
"value": "CWE-276: Incorrect Default Permissions"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "incorrect default permissions\""
"value": "CWE-276: Incorrect Default Permissions"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "local privilege escalation"
"value": "CWE-276: Incorrect Default Permissions"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "local privilege escalation"
"value": "CWE-276: Incorrect Default Permissions"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "local privilege elevation"
"value": "CWE-276: Incorrect Default Permissions"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "unexpected sign extension"
"value": "CWE-194: Unexpected Sign Extension"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "unsigned to signed conversion error"
"value": "CWE-196: Unsigned to Signed Conversion Error"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "integer overflow"
"value": "CWE-190: Integer Overflow or Wraparound"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "type confusion"
"value": "CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "use after free"
"value": "CWE-416: Use After Free"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "incorrect default permissions"
"value": "CWE-276: Incorrect Default Permissions"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "path traversal"
"value": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "incorrect default permissions"
"value": "CWE-276: Incorrect Default Permissions"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "incorrect default permissions"
"value": "CWE-276: Incorrect Default Permissions"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "incorrect default permissions"
"value": "CWE-276: Incorrect Default Permissions"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "incorrect default permissions"
"value": "CWE-276: Incorrect Default Permissions"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "incorrect default permissions"
"value": "CWE-276: Incorrect Default Permissions"
}
]
}

View File

@ -39,7 +39,7 @@
"description": [
{
"lang": "eng",
"value": "out of bounds write"
"value": "CWE-787: Out-of-bounds Write"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "Use After Free"
"value": "CWE-416: Use After Free"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "code execution"
"value": "CWE-416: Use After Free"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "denial of service"
"value": "CWE-1024: Comparison of Incompatible Types"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "Use After Free"
"value": "CWE-416: Use After Free"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "out of bounds write"
"value": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "cross-site scripting"
"value": "CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "cross-site scripting"
"value": "CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "cross-site scripting"
"value": "CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "URL redirection"
"value": "CWE-601: URL Redirection to Untrusted Site ('Open Redirect')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection\""
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": " cross-site request forgery"
"value": "CWE-352: Cross-Site Request Forgery (CSRF)"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "Use After Free"
"value": "CWE-416: Use After Free"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "out of bounds write"
"value": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "heap overflow"
"value": "CWE-123: Write-what-where Condition"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "denial of service"
"value": "CWE-823: Use of Out-of-range Pointer Offset"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "denial of service"
"value": "CWE-476: NULL Pointer Dereference"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "denial of service"
"value": "CWE-476: NULL Pointer Dereference"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "remote code execution"
"value": "CWE-680: Integer Overflow to Buffer Overflow"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "denial of service"
"value": "CWE-476: NULL Pointer Dereference"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "denial of service"
"value": "CWE-476: NULL Pointer Dereference"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "integer overflow"
"value": "CWE-190: Integer Overflow or Wraparound"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "heap-based buffer overflow"
"value": "CWE-787: Out-of-bounds Write"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "heap-based buffer overflow"
"value": "CWE-122: Heap-based Buffer Overflow"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "denial of service"
"value": "CWE-690: Unchecked Return Value to NULL Pointer Dereference"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "denial of service"
"value": "CWE-476: NULL Pointer Dereference"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "out of bounds write"
"value": "CWE-131: Incorrect Calculation of Buffer Size"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "memory corruption"
"value": "CWE-122: Heap-based Buffer Overflow"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "command injection"
"value": "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "incorrect default permissions"
"value": "CWE-276: Incorrect Default Permissions"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

View File

@ -36,7 +36,7 @@
"description": [
{
"lang": "eng",
"value": "SQL injection"
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}

Some files were not shown because too many files have changed in this diff Show More