CWE_DATABASE

Records: 752Page 1 / 38

Insecure setting of generative AI/ML model inference parametersweakness enumeration

Driving intermediate cryptographic State/Results to hardware module outputsweakness enumeration

Missing Security-Relevant feedback for unexecuted operations in hardware interfaceweakness enumeration

Reliance on HTTP instead of HTTPSweakness enumeration

Improper neutralization of input used for LLM promptingweakness enumeration

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient executionweakness enumeration

Exposure of sensitive information caused by incorrect data forwarding during transient executionweakness enumeration

Exposure of sensitive information in shared microarchitectural structures during transient executionweakness enumeration

Use of default cryptographic keyweakness enumeration

Use of default passwordweakness enumeration

Use of default credentialsweakness enumeration

Incorrect parsing of numbers with different radicesweakness enumeration

Insecure operation on windows junction / mount pointweakness enumeration

Missing origin validation in WebSocketsweakness enumeration

Improper handling of hardware behavior in exceptionally cold environmentsweakness enumeration

Information exposure through microarchitectural state after transient executionweakness enumeration

Multiple releases of same resource or handleweakness enumeration

Insufficient precision or accuracy of a real numberweakness enumeration

Improper protections against hardware overheatingweakness enumeration

Improper neutralization of special elements used in a template engineweakness enumeration

...