Appsec Knowledge Base search Results

167 Results For : All Records
.NET | CWE 117: Improper Output Sanitization for Logs occurs when a user maliciously or accidentally inserts line-ending characters into data that will be written into a log. 
Java | CWE 209 is a security weakness where an application or system reveals sensitive information to end users in error messages.
.NET | CWE 209 for ASP.NET is a security weakness where an application or system reveals sensitive information to end users in error messages.
Java | CWE 601: Open Redirects are security weaknesses that allow attackers to use your site to redirect users to malicious sites.
.NET | CWE 601: ASP.NET Open Redirects are security weaknesses that allow attackers to use your site to redirect users to malicious sites.
Java | CWE 639: Insecure direct object reference is an access control problem that allows an attacker to view data by manipulating an identifier 
Java | CWE 73 is a type of security flaw in which users can access resources from restricted locations on a file system. It is commonly called Path Traversal.
.NET | CWE 73 for ASP.NET is a type of security flaw in which users can access resources from restricted locations on a file system. It is commonly called Path Traversal.
Java | CWE 78: OS Command Injection flaws occur if your application executes a native command when the name of, path of, or arguments to the command contain untrusted data
.NET | CWE 78: OS Command Injection flaws occur if your application executes a native command when the name of, path of, or arguments to the command contain untrusted data