This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Category:Vulnerability"
| Line 2: | Line 2: | ||
This category is for common types of software vulnerabilities, both design flaws and implementation bugs. OWASP takes the position that there is no single best taxonomy into which these articles can be organized. Instead, we tag our articles with all the attributes that apply to allow for better searching and sorting. You can, of course, sort these articles on a single dimesion, such as the associated threat, countermeasure, or impact. Please do not post any actual vulnerabilities in products, services, or web applications. Those disclosure reports should be posted to bugtraq or full-disclosure. | This category is for common types of software vulnerabilities, both design flaws and implementation bugs. OWASP takes the position that there is no single best taxonomy into which these articles can be organized. Instead, we tag our articles with all the attributes that apply to allow for better searching and sorting. You can, of course, sort these articles on a single dimesion, such as the associated threat, countermeasure, or impact. Please do not post any actual vulnerabilities in products, services, or web applications. Those disclosure reports should be posted to bugtraq or full-disclosure. | ||
| + | |||
| + | For a great overview, check out the [[OWASP Top Ten Project]]. You can read about the top vulnerabilities and download a paper that covers them in detail. Many organizations and agencies use the Top Ten as a way of creating awareness about application security. | ||
Every article has a defined structure. Please read the details of [[How To Add a Vulnerability]] before creating a new article. | Every article has a defined structure. Please read the details of [[How To Add a Vulnerability]] before creating a new article. | ||
Revision as of 14:00, 25 May 2006
Application Security Vulnerability Types
This category is for common types of software vulnerabilities, both design flaws and implementation bugs. OWASP takes the position that there is no single best taxonomy into which these articles can be organized. Instead, we tag our articles with all the attributes that apply to allow for better searching and sorting. You can, of course, sort these articles on a single dimesion, such as the associated threat, countermeasure, or impact. Please do not post any actual vulnerabilities in products, services, or web applications. Those disclosure reports should be posted to bugtraq or full-disclosure.
For a great overview, check out the OWASP Top Ten Project. You can read about the top vulnerabilities and download a paper that covers them in detail. Many organizations and agencies use the Top Ten as a way of creating awareness about application security.
Every article has a defined structure. Please read the details of How To Add a Vulnerability before creating a new article.
Subcategories
This category has the following 20 subcategories, out of 20 total.
A
C
E
G
I
L
P
S
U
Pages in category "Vulnerability"
The following 63 pages are in this category, out of 63 total.
C
I
P
U
- Unchecked Error Condition
- Unchecked Return Value: Missing Check against Null
- Undefined Behavior
- Unreleased Resource
- Unrestricted File Upload
- Unsafe function call from a signal handler
- Unsafe JNI
- Unsafe Mobile Code
- Unsafe use of Reflection
- Use of hard-coded password
- Use of Obsolete Methods
- Using a broken or risky cryptographic algorithm
- Using freed memory
