CWE-198 – Use of Incorrect Byte Ordering
Description The software receives input from an upstream component, but it does not account for byte ordering (e.g. big-endian and little-endian) when processing the input,...
CWE-20 – Improper Input Validation
Description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to...
CWE-157 – Failure to Sanitize Paired Delimiters
Description The software does not properly handle the characters that are used to mark the beginning and ending of a group of entities, such as...
CWE-158 – Improper Neutralization of Null Byte or NUL Character
Description The software receives input from an upstream component, but it does not neutralize or incorrectly neutralizes NUL characters or null bytes when they are...
CWE-159 – Improper Handling of Invalid Use of Special Elements
Description The product does not properly filter, remove, quote, or otherwise manage the invalid use of special elements in user-controlled input, which could cause adverse...
CWE-160 – Improper Neutralization of Leading Special Elements
Description The software receives input from an upstream component, but it does not neutralize or incorrectly neutralizes leading special elements that could be interpreted in...
CWE-161 – Improper Neutralization of Multiple Leading Special Elements
Description The software receives input from an upstream component, but it does not neutralize or incorrectly neutralizes multiple leading special elements that could be interpreted...
CWE-162 – Improper Neutralization of Trailing Special Elements
Description The software receives input from an upstream component, but it does not neutralize or incorrectly neutralizes trailing special elements that could be interpreted in...
CWE-163 – Improper Neutralization of Multiple Trailing Special Elements
Description The software receives input from an upstream component, but it does not neutralize or incorrectly neutralizes multiple trailing special elements that could be interpreted...
CWE-164 – Improper Neutralization of Internal Special Elements
Description The software receives input from an upstream component, but it does not neutralize or incorrectly neutralizes internal special elements that could be interpreted in...