CWE-228 – Improper Handling of Syntactically Invalid Structure
Description The product does not handle or incorrectly handles input that is not syntactically well-formed with respect to the associated specification. Modes of Introduction: -...
CWE-229 – Improper Handling of Values
Description The software does not properly handle when the expected number of values for parameters, fields, or arguments is not provided in input, or if...
CWE-23 – Relative Path Traversal
Description The software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such...
CWE-230 – Improper Handling of Missing Values
Description The software does not handle or incorrectly handles when a parameter, field, or argument name is specified, but the associated value is missing, i.e....
CWE-231 – Improper Handling of Extra Values
Description The software does not handle or incorrectly handles when more values are provided than expected. Modes of Introduction: - Implementation Related Weaknesses...
CWE-232 – Improper Handling of Undefined Values
Description The software does not handle or incorrectly handles when a value is not defined or supported for the associated parameter, field, or argument name....
CWE-233 – Improper Handling of Parameters
Description The software does not properly handle when the expected number of parameters, fields, or arguments is not provided in input, or if those parameters...
CWE-234 – Failure to Handle Missing Parameter
Description If too few arguments are sent to a function, the function will still pop the expected number of arguments from the stack. Potentially, a...
CWE-235 – Improper Handling of Extra Parameters
Description The software does not handle or incorrectly handles when the number of parameters, fields, or arguments with the same name exceeds the expected amount....
CWE-236 – Improper Handling of Undefined Parameters
Description The software does not handle or incorrectly handles when a particular parameter, field, or argument name is not defined or supported by the product....