Difference between revisions of "Category:Vulnerability"

Revision as of 11:24, 27 May 2006

Application Security Vulnerability Types

This category is for common types of software vulnerabilities, both design flaws and implementation bugs. OWASP takes the position that there is no single best taxonomy into which these articles can be organized. Instead, we tag our articles with all the attributes that apply to allow for better searching and sorting.

Please do not post any actual vulnerabilities in products, services, or web applications. Those disclosure reports should be posted to bugtraq or full-disclosure mailing lists.</nowiki>

How to add a new Vulnerability article

You can follow the instructions to make a new Vulnerability article. Please use the appropriate structure and follow the Tutorial. Be sure to paste the following at the end of your article to make it show up in the Vulnerability category:

[[Category:Vulnerability]]

Vulnerabilities

We're working on ways to allow you to sort these articles on a single dimesion, such as the associated threat, countermeasure, or impact.

For a great overview, check out the OWASP Top Ten Project. You can read about the top vulnerabilities and download a paper that covers them in detail. Many organizations and agencies use the Top Ten as a way of creating awareness about application security.

Every article has a defined structure. Please read the details of How To Add a Vulnerability before creating a new article.

Subcategories

This category has the following 20 subcategories, out of 20 total.

A

► API Abuse‎ (2 P)
► Authentication Vulnerability‎ (1 C, 2 P)
► Authorization Vulnerability‎ (1 C, 1 P)
► Availability Vulnerability‎ (empty)

C

► Code Permission Vulnerability‎ (empty)
► Code Quality Vulnerability‎ (10 P)
► Configuration Vulnerability‎ (empty)
► Cryptographic Vulnerability‎ (9 P)

E

Pages in category "Vulnerability"

The following 63 pages are in this category, out of 63 total.

A

Allowing Domains or Accounts to Expire

B

C

D

E

F

Full Trust CLR Verification issue: Exploiting Passing Reference Types by Reference

H

Heartbleed Bug

I

L

M

N

Null Dereference

O

P

R

Return Inside Finally Block

S

U

V

X

XML External Entity (XXE) Processing

@@ Line 3: / Line 3: @@
 This category is for common types of software vulnerabilities, both design flaws and implementation bugs. OWASP takes the position that there is no single best taxonomy into which these articles can be organized. Instead, we tag our articles with all the attributes that apply to allow for better searching and sorting.
+Please '''do not post any actual vulnerabilities''' in products, services, or web applications. Those disclosure reports should be posted to bugtraq or full-disclosure mailing lists.</nowiki>
+{{Template:PutInCategory}}
+==Vulnerabilities==
 We're working on ways to allow you to sort these articles on a single dimesion, such as the associated threat, countermeasure, or impact.
- Please do not post any actual vulnerabilities in
- products, services, or web applications. Those
- disclosure reports should be posted to bugtraq
- or full-disclosure mailing lists.
 For a great overview, check out the [[OWASP Top Ten Project]]. You can read about the top vulnerabilities and download a paper that covers them in detail. Many organizations and agencies use the Top Ten as a way of creating awareness about application security.