cwe_descriptions.json

{
    "22": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
    "75": "Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)",
    "79": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
    "85": "Doubled Character XSS Manipulations",
    "95": "Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')",
    "116": "Improper Encoding or Escaping of Output",
    "157": "Failure to Sanitize Paired Delimiters",
    "159": "Failure to Sanitize Special Element",
    "242": "Use of Inherently Dangerous Function",
    "315": "Cleartext Storage of Sensitive Information in a Cookie",
    "319": "Cleartext Transmission of Sensitive Information",
    "330": "Use of Insufficiently Random Values",
    "351": "Insufficient Type Distinction",
    "398": "Indicator of Poor Code Quality",
    "453": "Insecure Default Variable Initialization",
    "454": "External Initialization of Trusted Variables or Data Stores",
    "456": "Missing Initialization of a Variable",
    "462": "Duplicate Key in Associative List (Alist)",
    "474": "Use of Function with Inconsistent Implementations",
    "478": "Missing Default Case in Switch Statement",
    "480": "Use of Incorrect Operator",
    "481": "Assigning instead of Comparing",
    "483": "Incorrect Block Delimitation",
    "484": "Omitted Break Statement in Switch",
    "539": "Information Exposure Through Persistent Cookies",
    "546": "Suspicious Comment",
    "563": "Assignment to Variable without Use ('Unused Variable')",
    "565": "Reliance on Cookies without Validation and Integrity Checking",
    "570": "Expression is Always False",
    "571": "Expression is Always True",
    "584": "Return Inside Finally Block",
    "597": "Use of Wrong Operator in String Comparison",
    "614": "Sensitive Cookie in HTTPS Session Without 'Secure' Attribute",
    "670": "Always-Incorrect Control Flow Implementation",
    "676": "Use of Potentially Dangerous Function",
    "694": "Use of Multiple Resources with Duplicate Identifier",
    "704": "Incorrect Type Conversion or Cast",
    "705": "Incorrect Control Flow Scoping",
    "710": "Coding Standards Violation",
    "749": "Exposed Dangerous Method or Function",
    "915": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
}