Broad CWE Mapping: CWE IDs Detected by CodeSonar in Python

JavaScript is not currently enabled, but is required for full CodeSonar manual search and browse functionality.

If you are viewing this file in your hub's Web GUI, enable JavaScript in your browser: you will also need it for GUI functionality.

If you opened this file directly from disk, your browser may be directly suppressing JavaScript functionality: certain browsers perform this suppression on local files (but not files delivered by web servers) for security reasons.

If you access the manual through the hub's Web GUI, the functionality will not be suppressed because the hub is a web server.
Alternatively, your browser may allow you to explicitly disable the security setting that suppresses functionality. See the CodeSonar FAQ for more information.

CodeSonar^® 9.0p0 Hot Tips

CONFIDENTIAL

CodeSecure Inc

CWE IDs Detected by CodeSonar in Python Code

This table contains close and broad CWE mappings for CodeSonar Python warning classes, organized by CWE ID.

CWE mappings organized by CodeSonar Python warning class: close mapping, broad mapping.
Mappings between CWE IDs and CodeSonar warning classes, all languages: close mapping, broad mapping.
CWE mapping information for CodeSonar in CSV format: CWE-mapping-broad.csv (broad mapping); CWE-mapping.csv (close mapping).

This version of CodeSonar (9.0p0) uses CWE 4.16, published November 19, 2024.

Close Mapping
Broad Mapping

Close Mapping

CWE	Entity Type	Python Warning Classes
CWE:94 Improper Control of Generation of Code ('Code Injection')	Weakness	Eval Used (Pylint) Exec Used (Pylint)
CWE:118 Incorrect Access of Indexable Resource ('Range Error')	Weakness	Invalid Format Index (Pylint) Invalid Sequence Index (Pylint) Invalid Slice Index (Pylint)
CWE:125 Out-of-bounds Read	Weakness	Potential Index Error (Pylint)
CWE:229 Improper Handling of Values	Weakness	Confusing With Statement (Pylint) Dict Iter Missing Items (Pylint)
CWE:396 Declaration of Catch for Generic Exception	Weakness	Bare Except (Pylint) Broad Exception Caught (Pylint)
CWE:413 Improper Resource Locking	Weakness	Useless With Lock (Pylint)
CWE:453 Insecure Default Variable Initialization	Weakness	Invalid Envvar Default (Pylint)
CWE:462 Duplicate Key in Associative List (Alist)	Weakness	Duplicate Key (Pylint)
CWE:477 Use of Obsolete Function	Weakness	Deprecated Method (Pylint)
CWE:480 Use of Incorrect Operator	Weakness	Bad Chained Comparison (Pylint) Invalid Unary Operand Type (Pylint) Shallow Copy Environ (Pylint) Unsubscriptable Object (Pylint) Unsupported Assignment Operation (Pylint) Unsupported Binary Operation (Pylint) Unsupported Delete Operation (Pylint) Unsupported Membership Test (Pylint)
CWE:489 Active Debug Code	Weakness	Forgotten Debug Statement (Pylint)
CWE:546 Suspicious Comment	Weakness	Fixme (Pylint)
CWE:561 Dead Code	Weakness	Unreachable (Pylint) Useless Else on Loop (Pylint)
CWE:563 Assignment to Variable without Use	Weakness	Possibly Unused Variable (Pylint) Redeclared Assigned Name (Pylint) Unused Variable (Pylint)
CWE:570 Expression is Always False	Weakness	Assert on String Literal (Pylint) Assert on Tuple (Pylint) Bad Chained Comparison (Pylint) Comparison With Callable (Pylint) Comparison With Itself (Pylint) Comparison of Constants (Pylint) Condition Evals to Constant (Pylint) Literal Comparison (Pylint) Missing Parentheses for Call in Test (Pylint) Redundant Unittest Assert (Pylint) Using Constant Test (Pylint)
CWE:571 Expression is Always True	Weakness	Assert on String Literal (Pylint) Assert on Tuple (Pylint) Bad Chained Comparison (Pylint) Comparison With Callable (Pylint) Comparison With Itself (Pylint) Comparison of Constants (Pylint) Condition Evals to Constant (Pylint) Literal Comparison (Pylint) Missing Parentheses for Call in Test (Pylint) Redundant Unittest Assert (Pylint) Using Constant Test (Pylint)
CWE:573 Improper Following of Specification by Caller	Weakness	Inconsistent Mro (Pylint) Inherit Non Class (Pylint) Init Is Generator (Pylint) Invalid All Format (Pylint) Invalid All Object (Pylint) Invalid Bool Returned (Pylint) Invalid Bytes Returned (Pylint) Invalid Enum Extension (Pylint) Invalid Field Call (Pylint) Invalid Format Returned (Pylint) Invalid Getnewargs Ex Returned (Pylint) Invalid Getnewargs Returned (Pylint) Invalid Hash Returned (Pylint) Invalid Index Returned (Pylint) Invalid Length Hint Returned (Pylint) Invalid Length Returned (Pylint) Invalid Metaclass (Pylint) Invalid Repr Returned (Pylint) Invalid Sequence Index (Pylint) Invalid Slice Index (Pylint) Invalid Slice Step (Pylint) Invalid Slots (Pylint) Invalid Slots Object (Pylint) Invalid Star Assignment Target (Pylint) Invalid Str Returned (Pylint) Invalid Unary Operand Type (Pylint) Misplaced Bare Raise (Pylint) Misplaced Future (Pylint) No Member (Pylint) No Method Argument (Pylint) No Name in Module (Pylint) Non Iterator Returned (Pylint) Non Str Assignment to Dunder Name (Pylint) Nonexistent Operator (Pylint) Nonlocal Without Binding (Pylint) Nonlocal and Global (Pylint) Not Async Context Manager (Pylint) Not Callable (Pylint) Not Context Manager (Pylint) Not in Loop (Pylint) Property With Parameters (Pylint) Protected Access (Pylint) Return Arg in Generator (Pylint) Return Outside Function (Pylint) Return in Init (Pylint) Single String Used for Slots (Pylint) Singledispatch Method (Pylint) Singledispatchmethod Function (Pylint) Star Needs Assignment Target (Pylint) Stop Iteration Return (Pylint) Super Without Brackets (Pylint) Syntax Error (Pylint) Too Many Star Expressions (Pylint) Unbalanced Dict Unpacking (Pylint) Unbalanced Tuple Unpacking (Pylint) Undefined All Variable (Pylint) Undefined Loop Variable (Pylint) Undefined Variable (Pylint) Unexpected Special Method Signature (Pylint) Unhashable Member (Pylint) Unpacking Non Sequence (Pylint) Unsubscriptable Object (Pylint) Unsupported Assignment Operation (Pylint) Unsupported Binary Operation (Pylint) Unsupported Delete Operation (Pylint) Unsupported Membership Test (Pylint) Used Before Assignment (Pylint) Used Prior Global Declaration (Pylint) Using F String in Unsupported Version (Pylint) Using Final Decorator in Unsupported Version (Pylint) Yield Inside Async Function (Pylint) Yield Outside Function (Pylint)
CWE:584 Return Inside Finally Block	Weakness	Lost Exception (Pylint) Return in Finally (Pylint)
CWE:589 Call to Non-ubiquitous API	Weakness	Consider Using Sys Exit (Pylint)
CWE:597 Use of Wrong Operator in String Comparison	Weakness	Literal Comparison (Pylint)
CWE:628 Function Call with Incorrectly Specified Arguments	Weakness	Bad Open Mode (Pylint) Bad Thread Instantiation (Pylint) Format Needs Mapping (Pylint) Keyword Arg Before Vararg (Pylint) Kwarg Superseded By Positional Arg (Pylint) Logging Format Truncated (Pylint) Missing Format Argument Key (Pylint) Missing Format String Key (Pylint) Missing Kwoa (Pylint) Positional Only Arguments Expected (Pylint) Raising Format Tuple (Pylint) Redundant Keyword Arg (Pylint) Repeated Keyword (Pylint) Super Without Brackets (Pylint) Unexpected Keyword Arg (Pylint)
CWE:664 Improper Control of a Resource Through its Lifetime	Weakness	Consider Using With (Pylint) Modified Iterating Dict (Pylint) Modified Iterating List (Pylint) Modified Iterating Set (Pylint)
CWE:676 Use of Potentially Dangerous Function	Weakness	Eval Used (Pylint) Exec Used (Pylint)
CWE:683 Function Call With Incorrect Order of Arguments	Weakness	Arguments Out of Order (Pylint)
CWE:685 Function Call With Incorrect Number of Arguments	Weakness	Logging Too Few Args (Pylint) Logging Too Many Args (Pylint) No Value for Parameter (Pylint) Too Few Format Args (Pylint) Too Many Format Args (Pylint) Too Many Function Args (Pylint)
CWE:686 Function Call With Incorrect Argument Type	Weakness	Bad Reversed Sequence (Pylint) Bad String Format Type (Pylint) Invalid Envvar Value (Pylint) Invalid Unary Operand Type (Pylint) Isinstance Second Argument Not Valid Type (Pylint) Misplaced Format Function (Pylint) Missing Format Attribute (Pylint) Not a Mapping (Pylint) Not an Iterable (Pylint)
CWE:687 Function Call With Incorrectly Specified Argument Value	Weakness	Bad Format Character (Pylint) Bad Format String (Pylint) Bad Format String Key (Pylint) Bad Str Strip Call (Pylint) Bad Super Call (Pylint) Logging Unsupported Format (Pylint) Truncated Format String (Pylint)
CWE:694 Use of Multiple Resources with Duplicate Identifier	Weakness	Class Variable Slots Conflict (Pylint) Duplicate Argument Name (Pylint) Function Redefined (Pylint) Method Hidden (Pylint) Shadowed Import (Pylint)
CWE:697 Incorrect Comparison	Weakness	Bad Chained Comparison (Pylint)
CWE:732 Incorrect Permission Assignment for Critical Resource	Weakness	Bad Open Mode (Pylint)
CWE:754 Improper Check for Unusual or Exceptional Conditions	Weakness	Binary Op Exception (Pylint) Catching Non Exception (Pylint) Duplicate Except (Pylint)
CWE:755 Improper Handling of Exceptional Conditions	Weakness	Bad Except Order (Pylint) Bad Exception Cause (Pylint) Broad Exception Raised (Pylint) Continue in Finally (Pylint) Lost Exception (Pylint) Notimplemented Raised (Pylint) Raising Bad Type (Pylint) Raising Format Tuple (Pylint) Raising Non Exception (Pylint) Try Except Raise (Pylint) Wrong Exception Operation (Pylint)
CWE:758 Reliance on Undefined, Unspecified, or Implementation-Defined Behavior	Weakness	Unspecified Encoding (Pylint)
CWE:770 Allocation of Resources Without Limits or Throttling	Weakness	Method Cache Max Size None (Pylint)
CWE:787 Out-of-bounds Write	Weakness	Potential Index Error (Pylint)
CWE:833 Deadlock	Weakness	Subprocess Popen Preexec Fn (Pylint)
CWE:908 Use of Uninitialized Resource	Weakness	Access Member Before Definition (Pylint)
CWE:1023 Incomplete Comparison with Missing Factors	Weakness	Use Implicit Booleaness Not Comparison (Pylint) Use Implicit Booleaness Not Comparison to String (Pylint) Use Implicit Booleaness Not Comparison to Zero (Pylint) Use Implicit Booleaness Not Len (Pylint)
CWE:1025 Comparison Using Wrong Factors	Weakness	Comparison With Callable (Pylint)
CWE:1041 Use of Redundant Code	Weakness	Copy-Paste Error Duplicate Code (Pylint)
CWE:1047 Modules with Circular Dependencies	Weakness	Cyclic Import (Pylint) Import Self (Pylint)
CWE:1055 Multiple Inheritance from Concrete Classes	Weakness	Too Many Ancestors (Pylint)
CWE:1059 Insufficient Technical Documentation	Weakness	Empty Docstring (Pylint) Missing Class Docstring (Pylint) Missing Function Docstring (Pylint) Missing Module Docstring (Pylint)
CWE:1064 Invokable Control Element with Signature Containing an Excessive Number of Parameters	Weakness	Too Many Arguments (Pylint)
CWE:1076 Insufficient Adherence to Expected Conventions	Weakness	Assigning Non Slot (Pylint) Attribute Defined Outside Init (Pylint) Await Outside Async (Pylint) Bare Except (Pylint) Consider Iterating Dictionary (Pylint) Consider Merging Isinstance (Pylint) Consider Swap Variables (Pylint) Consider Using Dict Comprehension (Pylint) Consider Using Dict Items (Pylint) Consider Using Enumerate (Pylint) Consider Using F String (Pylint) Consider Using From Import (Pylint) Consider Using Generator (Pylint) Consider Using Get (Pylint) Consider Using Join (Pylint) Consider Using Max Builtin (Pylint) Consider Using Min Builtin (Pylint) Consider Using Set Comprehension (Pylint) Consider Using Sys Exit (Pylint) Consider Using Ternary (Pylint) Consider Using in (Pylint) Deprecated Argument (Pylint) Deprecated Class (Pylint) Deprecated Decorator (Pylint) Deprecated Method (Pylint) Deprecated Module (Pylint) Deprecated Pragma (Pylint) Duplicate String Formatting Argument (Pylint) Format Combined Specification (Pylint) Global Variable Undefined (Pylint) Implicit Flag Alias (Pylint) Import Outside Toplevel (Pylint) Invalid Overridden Method (Pylint) Logging Format Interpolation (Pylint) Logging Fstring Interpolation (Pylint) Logging Not Lazy (Pylint) Mixed Format String (Pylint) No Self Argument (Pylint) Non Ascii File Name (Pylint) Non Parent Init Called (Pylint) Overridden Final Method (Pylint) Preferred Module (Pylint) Redefined Argument From Local (Pylint) Redefined Builtin (Pylint) Redefined Outer Name (Pylint) Redefined Slots in Subclass (Pylint) Relative Beyond Top Level (Pylint) Self Cls Assignment (Pylint) Signature Differs (Pylint) Subclassed Final Class (Pylint) Subprocess Run Check (Pylint) Super Init Not Called (Pylint) Super With Arguments (Pylint) Typevar Double Variance (Pylint) Unidiomatic Typecheck (Pylint) Unused Wildcard Import (Pylint) Use Implicit Booleaness Not Comparison (Pylint) Use Implicit Booleaness Not Comparison to String (Pylint) Use Implicit Booleaness Not Comparison to Zero (Pylint) Use Implicit Booleaness Not Len (Pylint) Use Maxsplit Arg (Pylint) Use Sequence for Iteration (Pylint) Use a Generator (Pylint)
CWE:1077 Floating Point Comparison with Incorrect Operator	Weakness	Nan Comparison (Pylint)
CWE:1078 Inappropriate Source Code Style or Formatting	Weakness	Bad File Encoding (Pylint) Bad Indentation (Pylint) Bidirectional Unicode (Pylint) Chained Comparison (Pylint) Inconsistent Quotes (Pylint) Invalid Character Backspace (Pylint) Invalid Character Carriage Return (Pylint) Invalid Character Esc (Pylint) Invalid Character Nul (Pylint) Invalid Character Sub (Pylint) Invalid Character Zero Width Space (Pylint) Invalid Unicode Codec (Pylint) Line Too Long (Pylint) Multiple Imports (Pylint) Multiple Statements (Pylint) Named Expr Without Context (Pylint) Nested Min Max (Pylint) No Classmethod Decorator (Pylint) No Else Break (Pylint) No Else Continue (Pylint) No Else Raise (Pylint) No Else Return (Pylint) No Staticmethod Decorator (Pylint) Non Ascii Module Import (Pylint) Non Ascii Name (Pylint) Redundant U String Prefix (Pylint) Superfluous Parens (Pylint) Too Few Public Methods (Pylint) Too Many Ancestors (Pylint) Too Many Arguments (Pylint) Too Many Boolean Expressions (Pylint) Too Many Branches (Pylint) Too Many Instance Attributes (Pylint) Too Many Locals (Pylint) Too Many Nested Blocks (Pylint) Too Many Public Methods (Pylint) Too Many Return Statements (Pylint) Too Many Statements (Pylint) Trailing Comma Tuple (Pylint) Ungrouped Imports (Pylint) Unnecessary Comprehension (Pylint) Unnecessary Dict Index Lookup (Pylint) Unnecessary Direct Lambda Call (Pylint) Unnecessary Dunder Call (Pylint) Unnecessary Ellipsis (Pylint) Unnecessary Lambda Assignment (Pylint) Unnecessary List Index Lookup (Pylint) Unnecessary Negation (Pylint) Unnecessary Pass (Pylint) Unnecessary Semicolon (Pylint) Use Dict Literal (Pylint) Use List Literal (Pylint) Wildcard Import (Pylint) Wrong Import Order (Pylint) Wrong Import Position (Pylint)
CWE:1080 Source Code File with Excessive Number of Lines of Code	Weakness	Too Many Lines (Pylint)
CWE:1088 Synchronous Access of Remote Resource without Timeout	Weakness	Missing Timeout (Pylint)
CWE:1095 Loop Condition Value Update within the Loop	Weakness	Modified Iterating Dict (Pylint) Modified Iterating List (Pylint) Modified Iterating Set (Pylint)
CWE:1099 Inconsistent Naming Conventions for Identifiers	Weakness	Bad Classmethod Argument (Pylint) Bad Mcs Classmethod Argument (Pylint) Bad Mcs Method Argument (Pylint) Bad Staticmethod Argument (Pylint) Disallowed Name (Pylint) Invalid Name (Pylint) Typevar Name Incorrect Variance (Pylint) Typevar Name Mismatch (Pylint)
CWE:1108 Excessive Reliance on Global Variables	Weakness	Global Statement (Pylint)
CWE:1114 Inappropriate Whitespace Style	Weakness	Missing Final Newline (Pylint) Mixed Line Endings (Pylint) Trailing Newlines (Pylint) Trailing Whitespace (Pylint) Unexpected Line Ending Format (Pylint)
CWE:1120 Excessive Code Complexity	Weakness	Too Many Ancestors (Pylint) Too Many Arguments (Pylint) Too Many Boolean Expressions (Pylint) Too Many Branches (Pylint) Too Many Instance Attributes (Pylint) Too Many Locals (Pylint) Too Many Public Methods (Pylint) Too Many Return Statements (Pylint) Too Many Statements (Pylint) Unnecessary Comprehension (Pylint) Unnecessary Dict Index Lookup (Pylint) Unnecessary Direct Lambda Call (Pylint) Unnecessary List Index Lookup (Pylint)
CWE:1124 Excessively Deep Nesting	Weakness	Too Many Nested Blocks (Pylint)
CWE:1164 Irrelevant Code	Weakness	Assert on String Literal (Pylint) Assert on Tuple (Pylint) Assignment From No Return (Pylint) Assignment From None (Pylint) Comparison With Itself (Pylint) Condition Evals to Constant (Pylint) Duplicate Except (Pylint) Expression Not Assigned (Pylint) F String Without Interpolation (Pylint) Format String Without Interpolation (Pylint) Global Variable Not Assigned (Pylint) Global at Module Level (Pylint) Pointless Exception Statement (Pylint) Pointless Statement (Pylint) Pointless String Statement (Pylint) Reimported (Pylint) Self Assigning Variable (Pylint) Shadowed Import (Pylint) Simplifiable Condition (Pylint) Simplifiable If Expression (Pylint) Simplifiable If Statement (Pylint) Simplify Boolean Expression (Pylint) Singleton Comparison (Pylint) Try Except Raise (Pylint) Unnecessary Ellipsis (Pylint) Unnecessary Lambda (Pylint) Unnecessary Pass (Pylint) Unused Argument (Pylint) Unused Format String Argument (Pylint) Unused Format String Key (Pylint) Unused Import (Pylint) Unused Private Member (Pylint) Useless Import Alias (Pylint) Useless Object Inheritance (Pylint) Useless Parent Delegation (Pylint) Useless Return (Pylint) Useless With Lock (Pylint) Using Constant Test (Pylint)

Broad Mapping

CWE

Entity Type

Python Warning Classes

CWE:19 Data Processing Errors

Category

hierarchy ancestor	Confusing With Statement (Pylint) Dict Iter Missing Items (Pylint)

CWE:20 Improper Input Validation

Weakness

hierarchy ancestor	Potential Index Error (Pylint)

CWE:74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Weakness

hierarchy ancestor	Class Variable Slots Conflict (Pylint) Duplicate Argument Name (Pylint) Duplicate Key (Pylint) Eval Used (Pylint) Exec Used (Pylint) Function Redefined (Pylint) Method Hidden (Pylint) Shadowed Import (Pylint)

CWE:94 Improper Control of Generation of Code ('Code Injection')

Weakness

closely mapped	Eval Used (Pylint) Exec Used (Pylint)

CWE:99 Improper Control of Resource Identifiers ('Resource Injection')

Weakness

hierarchy ancestor	Class Variable Slots Conflict (Pylint) Duplicate Argument Name (Pylint) Duplicate Key (Pylint) Function Redefined (Pylint) Method Hidden (Pylint) Shadowed Import (Pylint)

CWE:118 Incorrect Access of Indexable Resource ('Range Error')

Weakness

closely mapped	Invalid Format Index (Pylint) Invalid Sequence Index (Pylint) Invalid Slice Index (Pylint)
hierarchy ancestor	Potential Index Error (Pylint)

CWE:119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Weakness

hierarchy ancestor	Potential Index Error (Pylint)

CWE:125 Out-of-bounds Read

Weakness

closely mapped	Potential Index Error (Pylint)

CWE:133 String Errors

Category

also related	Anomalous Backslash in String (Pylint) Anomalous Unicode Escape in String (Pylint) Bad Format Character (Pylint) Bad Format String (Pylint) Bad Format String Key (Pylint) Bad String Format Type (Pylint) Implicit Str Concat (Pylint) Logging Unsupported Format (Pylint)
hierarchy ancestor	Bad Chained Comparison (Pylint) Invalid Unary Operand Type (Pylint) Literal Comparison (Pylint) Shallow Copy Environ (Pylint) Unsubscriptable Object (Pylint) Unsupported Assignment Operation (Pylint) Unsupported Binary Operation (Pylint) Unsupported Delete Operation (Pylint) Unsupported Membership Test (Pylint)

CWE:137 Data Neutralization Issues

Category

hierarchy ancestor	Class Variable Slots Conflict (Pylint) Duplicate Argument Name (Pylint) Duplicate Key (Pylint) Eval Used (Pylint) Exec Used (Pylint) Function Redefined (Pylint) Method Hidden (Pylint) Shadowed Import (Pylint)

CWE:221 Information Loss or Omission

Weakness

hierarchy ancestor	Bare Except (Pylint) Broad Exception Caught (Pylint)

CWE:227 7PK - API Abuse

Category

hierarchy ancestor	Subprocess Run Check (Pylint)

CWE:228 Improper Handling of Syntactically Invalid Structure

Weakness

hierarchy ancestor	Confusing With Statement (Pylint) Dict Iter Missing Items (Pylint)

CWE:229 Improper Handling of Values

Weakness

closely mapped	Confusing With Statement (Pylint) Dict Iter Missing Items (Pylint)

CWE:252 Unchecked Return Value

Weakness

also related	Subprocess Run Check (Pylint)

CWE:254 7PK - Security Features

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:284 Improper Access Control

Weakness

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:285 Improper Authorization

Weakness

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:388 7PK - Errors

Category

hierarchy ancestor	Bare Except (Pylint) Broad Exception Caught (Pylint)

CWE:389 Error Conditions, Return Values, Status Codes

Category

hierarchy ancestor

CWE:394 Unexpected Status Code or Return Value

Weakness

also related

CWE:396 Declaration of Catch for Generic Exception

Weakness

closely mapped	Bare Except (Pylint) Broad Exception Caught (Pylint)

CWE:398 7PK - Code Quality

Category

hierarchy ancestor	Consider Using Sys Exit (Pylint) Consider Using With (Pylint) Deprecated Method (Pylint) Global Variable Undefined (Pylint)

CWE:399 Resource Management Errors

Category

hierarchy ancestor	Access Member Before Definition (Pylint) Attribute Defined Outside Init (Pylint) Class Variable Slots Conflict (Pylint) Duplicate Argument Name (Pylint) Duplicate Key (Pylint) Function Redefined (Pylint) Global Variable Undefined (Pylint) Invalid Envvar Default (Pylint) Method Cache Max Size None (Pylint) Method Hidden (Pylint) Shadowed Import (Pylint)

CWE:400 Uncontrolled Resource Consumption

Weakness

hierarchy ancestor	Method Cache Max Size None (Pylint)

CWE:404 Improper Resource Shutdown or Release

Weakness

also related	Consider Using With (Pylint)

CWE:411 Resource Locking Problems

Category

hierarchy ancestor	Subprocess Popen Preexec Fn (Pylint) Useless With Lock (Pylint)

CWE:413 Improper Resource Locking

Weakness

closely mapped	Useless With Lock (Pylint)

CWE:438 Behavioral Problems

Category

hierarchy ancestor	Bad Chained Comparison (Pylint) Comparison With Callable (Pylint) Invalid Unary Operand Type (Pylint) Literal Comparison (Pylint) Shallow Copy Environ (Pylint) Unsubscriptable Object (Pylint) Unsupported Assignment Operation (Pylint) Unsupported Binary Operation (Pylint) Unsupported Delete Operation (Pylint) Unsupported Membership Test (Pylint)

CWE:452 Initialization and Cleanup Errors

Category

hierarchy ancestor	Invalid Envvar Default (Pylint)

CWE:453 Insecure Default Variable Initialization

Weakness

closely mapped	Invalid Envvar Default (Pylint)

CWE:457 Use of Uninitialized Variable

Weakness

also related	Global Variable Undefined (Pylint)

CWE:462 Duplicate Key in Associative List (Alist)

Weakness

closely mapped	Duplicate Key (Pylint)

CWE:471 Modification of Assumed-Immutable Data (MAID)

Weakness

also related	Dangerous Default Value (Pylint)

CWE:474 Use of Function with Inconsistent Implementations

Weakness

hierarchy ancestor	Consider Using Sys Exit (Pylint)

CWE:477 Use of Obsolete Function

Weakness

closely mapped	Deprecated Method (Pylint)

CWE:480 Use of Incorrect Operator

Weakness

closely mapped	Bad Chained Comparison (Pylint) Invalid Unary Operand Type (Pylint) Shallow Copy Environ (Pylint) Unsubscriptable Object (Pylint) Unsupported Assignment Operation (Pylint) Unsupported Binary Operation (Pylint) Unsupported Delete Operation (Pylint) Unsupported Membership Test (Pylint)
hierarchy ancestor	Literal Comparison (Pylint)

CWE:485 7PK - Encapsulation

Category

hierarchy ancestor	Forgotten Debug Statement (Pylint)

CWE:489 Active Debug Code

Weakness

closely mapped	Forgotten Debug Statement (Pylint)

CWE:506 Embedded Malicious Code

Weakness

also related	Bidirectional Unicode (Pylint) Invalid Character Backspace (Pylint) Invalid Character Carriage Return (Pylint) Invalid Character Esc (Pylint) Invalid Character Nul (Pylint) Invalid Character Sub (Pylint) Invalid Character Zero Width Space (Pylint)

CWE:546 Suspicious Comment

Weakness

closely mapped	Fixme (Pylint)

CWE:557 Concurrency Issues

Category

hierarchy ancestor	Missing Timeout (Pylint)

CWE:561 Dead Code

Weakness

closely mapped	Unreachable (Pylint) Useless Else on Loop (Pylint)

CWE:563 Assignment to Variable without Use

Weakness

closely mapped	Possibly Unused Variable (Pylint) Redeclared Assigned Name (Pylint) Unused Variable (Pylint)

CWE:569 Expression Issues

Category

hierarchy ancestor

CWE:570 Expression is Always False

Weakness

closely mapped	Assert on String Literal (Pylint) Assert on Tuple (Pylint) Bad Chained Comparison (Pylint) Comparison With Callable (Pylint) Comparison With Itself (Pylint) Comparison of Constants (Pylint) Condition Evals to Constant (Pylint) Literal Comparison (Pylint) Missing Parentheses for Call in Test (Pylint) Redundant Unittest Assert (Pylint) Using Constant Test (Pylint)

CWE:571 Expression is Always True

Weakness

closely mapped	Assert on String Literal (Pylint) Assert on Tuple (Pylint) Bad Chained Comparison (Pylint) Comparison With Callable (Pylint) Comparison With Itself (Pylint) Comparison of Constants (Pylint) Condition Evals to Constant (Pylint) Literal Comparison (Pylint) Missing Parentheses for Call in Test (Pylint) Redundant Unittest Assert (Pylint) Using Constant Test (Pylint)

CWE:573 Improper Following of Specification by Caller

Weakness

closely mapped

hierarchy ancestor

CWE:584 Return Inside Finally Block

Weakness

closely mapped	Lost Exception (Pylint) Return in Finally (Pylint)

CWE:589 Call to Non-ubiquitous API

Weakness

closely mapped	Consider Using Sys Exit (Pylint)

CWE:595 Comparison of Object References Instead of Object Contents

Weakness

hierarchy ancestor	Literal Comparison (Pylint)

CWE:597 Use of Wrong Operator in String Comparison

Weakness

closely mapped	Literal Comparison (Pylint)

CWE:628 Function Call with Incorrectly Specified Arguments

Weakness

closely mapped

hierarchy ancestor

CWE:629 Weaknesses in OWASP Top Ten (2007)

View

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:635 Weaknesses Originally Used by NVD from 2008 to 2016

View

hierarchy ancestor

CWE:657 Violation of Secure Design Principles

Weakness

hierarchy ancestor	Deprecated Module (Pylint) Preferred Module (Pylint)

CWE:658 Weaknesses in Software Written in C

View

hierarchy ancestor

CWE:659 Weaknesses in Software Written in C++

View

hierarchy ancestor

CWE:660 Weaknesses in Software Written in Java

View

hierarchy ancestor	Bare Except (Pylint) Broad Exception Caught (Pylint) Duplicate Key (Pylint) Literal Comparison (Pylint)

CWE:661 Weaknesses in Software Written in PHP

View

hierarchy ancestor	Consider Using Sys Exit (Pylint) Global Variable Undefined (Pylint) Invalid Envvar Default (Pylint) Literal Comparison (Pylint)

CWE:662 Improper Synchronization

Weakness

hierarchy ancestor	Missing Timeout (Pylint) Subprocess Popen Preexec Fn (Pylint) Useless With Lock (Pylint)

CWE:664 Improper Control of a Resource Through its Lifetime

Weakness

closely mapped

hierarchy ancestor

CWE:665 Improper Initialization

Weakness

hierarchy ancestor	Access Member Before Definition (Pylint) Attribute Defined Outside Init (Pylint) Global Variable Undefined (Pylint) Invalid Envvar Default (Pylint) Method Cache Max Size None (Pylint)

CWE:667 Improper Locking

Weakness

hierarchy ancestor	Subprocess Popen Preexec Fn (Pylint) Useless With Lock (Pylint)

CWE:668 Exposure of Resource to Wrong Sphere

Weakness

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:670 Always-Incorrect Control Flow Implementation

Weakness

hierarchy ancestor	Bad Chained Comparison (Pylint) Invalid Unary Operand Type (Pylint) Literal Comparison (Pylint) Shallow Copy Environ (Pylint) Unsubscriptable Object (Pylint) Unsupported Assignment Operation (Pylint) Unsupported Binary Operation (Pylint) Unsupported Delete Operation (Pylint) Unsupported Membership Test (Pylint)

CWE:676 Use of Potentially Dangerous Function

Weakness

closely mapped	Eval Used (Pylint) Exec Used (Pylint)

CWE:677 Weakness Base Elements

View

hierarchy ancestor

CWE:683 Function Call With Incorrect Order of Arguments

Weakness

closely mapped	Arguments Out of Order (Pylint)
also related	Copy-Paste Error

CWE:684 Incorrect Provision of Specified Functionality

Weakness

hierarchy ancestor	Bidirectional Unicode (Pylint) Invalid Character Backspace (Pylint) Invalid Character Carriage Return (Pylint) Invalid Character Esc (Pylint) Invalid Character Nul (Pylint) Invalid Character Sub (Pylint) Invalid Character Zero Width Space (Pylint)

CWE:685 Function Call With Incorrect Number of Arguments

Weakness

closely mapped	Logging Too Few Args (Pylint) Logging Too Many Args (Pylint) No Value for Parameter (Pylint) Too Few Format Args (Pylint) Too Many Format Args (Pylint) Too Many Function Args (Pylint)
also related	Copy-Paste Error

CWE:686 Function Call With Incorrect Argument Type

Weakness

closely mapped	Bad Reversed Sequence (Pylint) Bad String Format Type (Pylint) Invalid Envvar Value (Pylint) Invalid Unary Operand Type (Pylint) Isinstance Second Argument Not Valid Type (Pylint) Misplaced Format Function (Pylint) Missing Format Attribute (Pylint) Not a Mapping (Pylint) Not an Iterable (Pylint)
also related	Bad Exception Cause (Pylint)

CWE:687 Function Call With Incorrectly Specified Argument Value

Weakness

closely mapped	Bad Format Character (Pylint) Bad Format String (Pylint) Bad Format String Key (Pylint) Bad Str Strip Call (Pylint) Bad Super Call (Pylint) Logging Unsupported Format (Pylint) Truncated Format String (Pylint)

CWE:688 Function Call With Incorrect Variable or Reference as Argument

Weakness

also related	Copy-Paste Error

CWE:691 Insufficient Control Flow Management

Weakness

hierarchy ancestor

CWE:694 Use of Multiple Resources with Duplicate Identifier

Weakness

closely mapped	Class Variable Slots Conflict (Pylint) Duplicate Argument Name (Pylint) Function Redefined (Pylint) Method Hidden (Pylint) Shadowed Import (Pylint)
hierarchy ancestor	Duplicate Key (Pylint)

CWE:697 Incorrect Comparison

Weakness

closely mapped	Bad Chained Comparison (Pylint)
hierarchy ancestor	Comparison With Callable (Pylint) Literal Comparison (Pylint) Nan Comparison (Pylint) Use Implicit Booleaness Not Comparison (Pylint) Use Implicit Booleaness Not Comparison to String (Pylint) Use Implicit Booleaness Not Comparison to Zero (Pylint) Use Implicit Booleaness Not Len (Pylint)

CWE:699 Software Development

View

hierarchy ancestor

CWE:700 Seven Pernicious Kingdoms

View

hierarchy ancestor

CWE:701 Weaknesses Introduced During Design

View

hierarchy ancestor

CWE:702 Weaknesses Introduced During Implementation

View

hierarchy ancestor

CWE:703 Improper Check or Handling of Exceptional Conditions

Weakness

hierarchy ancestor

CWE:704 Incorrect Type Conversion or Cast

Weakness

also related	Invalid Class Object (Pylint) Invalid Envvar Default (Pylint)

CWE:705 Incorrect Control Flow Scoping

Weakness

hierarchy ancestor	Bare Except (Pylint) Broad Exception Caught (Pylint) Lost Exception (Pylint) Return in Finally (Pylint)

CWE:707 Improper Neutralization

Weakness

hierarchy ancestor	Class Variable Slots Conflict (Pylint) Confusing With Statement (Pylint) Dict Iter Missing Items (Pylint) Duplicate Argument Name (Pylint) Duplicate Key (Pylint) Eval Used (Pylint) Exec Used (Pylint) Function Redefined (Pylint) Method Hidden (Pylint) Potential Index Error (Pylint) Shadowed Import (Pylint)

CWE:710 Improper Adherence to Coding Standards

Weakness

hierarchy ancestor

CWE:711 Weaknesses in OWASP Top Ten (2004)

View

hierarchy ancestor

CWE:721 OWASP Top Ten 2007 Category A10 - Failure to Restrict URL Access

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:722 OWASP Top Ten 2004 Category A1 - Unvalidated Input

Category

hierarchy ancestor	Potential Index Error (Pylint)

CWE:723 OWASP Top Ten 2004 Category A2 - Broken Access Control

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:726 OWASP Top Ten 2004 Category A5 - Buffer Overflows

Category

hierarchy ancestor	Potential Index Error (Pylint)

CWE:727 OWASP Top Ten 2004 Category A6 - Injection Flaws

Category

hierarchy ancestor	Class Variable Slots Conflict (Pylint) Duplicate Argument Name (Pylint) Duplicate Key (Pylint) Eval Used (Pylint) Exec Used (Pylint) Function Redefined (Pylint) Method Hidden (Pylint) Shadowed Import (Pylint)

CWE:728 OWASP Top Ten 2004 Category A7 - Improper Error Handling

Category

hierarchy ancestor

CWE:730 OWASP Top Ten 2004 Category A9 - Denial of Service

Category

hierarchy ancestor	Consider Using With (Pylint) Method Cache Max Size None (Pylint)

CWE:731 OWASP Top Ten 2004 Category A10 - Insecure Configuration Management

Category

hierarchy ancestor	Forgotten Debug Statement (Pylint)

CWE:732 Incorrect Permission Assignment for Critical Resource

Weakness

closely mapped	Bad Open Mode (Pylint)

CWE:734 Weaknesses Addressed by the CERT C Secure Coding Standard (2008)

View

hierarchy ancestor

CWE:735 CERT C Secure Coding Standard (2008) Chapter 2 - Preprocessor (PRE)

Category

hierarchy ancestor	Bidirectional Unicode (Pylint) Invalid Character Backspace (Pylint) Invalid Character Carriage Return (Pylint) Invalid Character Esc (Pylint) Invalid Character Nul (Pylint) Invalid Character Sub (Pylint) Invalid Character Zero Width Space (Pylint)

CWE:736 CERT C Secure Coding Standard (2008) Chapter 3 - Declarations and Initialization (DCL)

Category

hierarchy ancestor

CWE:737 CERT C Secure Coding Standard (2008) Chapter 4 - Expressions (EXP)

Category

hierarchy ancestor

CWE:738 CERT C Secure Coding Standard (2008) Chapter 5 - Integers (INT)

Category

hierarchy ancestor	Eval Used (Pylint) Exec Used (Pylint) Potential Index Error (Pylint)

CWE:739 CERT C Secure Coding Standard (2008) Chapter 6 - Floating Point (FLP)

Category

hierarchy ancestor	Bad Exception Cause (Pylint) Bad Reversed Sequence (Pylint) Bad String Format Type (Pylint) Invalid Envvar Value (Pylint) Invalid Unary Operand Type (Pylint) Isinstance Second Argument Not Valid Type (Pylint) Misplaced Format Function (Pylint) Missing Format Attribute (Pylint) Not a Mapping (Pylint) Not an Iterable (Pylint)

CWE:740 CERT C Secure Coding Standard (2008) Chapter 7 - Arrays (ARR)

Category

hierarchy ancestor	Access Member Before Definition (Pylint) Attribute Defined Outside Init (Pylint) Global Variable Undefined (Pylint) Invalid Envvar Default (Pylint) Method Cache Max Size None (Pylint) Potential Index Error (Pylint)

CWE:741 CERT C Secure Coding Standard (2008) Chapter 8 - Characters and Strings (STR)

Category

hierarchy ancestor

CWE:742 CERT C Secure Coding Standard (2008) Chapter 9 - Memory Management (MEM)

Category

hierarchy ancestor

CWE:743 CERT C Secure Coding Standard (2008) Chapter 10 - Input Output (FIO)

Category

hierarchy ancestor

CWE:744 CERT C Secure Coding Standard (2008) Chapter 11 - Environment (ENV)

Category

hierarchy ancestor	Bare Except (Pylint) Broad Exception Caught (Pylint) Duplicate Key (Pylint) Lost Exception (Pylint) Potential Index Error (Pylint) Return in Finally (Pylint)

CWE:745 CERT C Secure Coding Standard (2008) Chapter 12 - Signals (SIG)

Category

hierarchy ancestor	Missing Timeout (Pylint) Subprocess Popen Preexec Fn (Pylint) Useless With Lock (Pylint)

CWE:746 CERT C Secure Coding Standard (2008) Chapter 13 - Error Handling (ERR)

Category

hierarchy ancestor	Bare Except (Pylint) Broad Exception Caught (Pylint) Eval Used (Pylint) Exec Used (Pylint) Lost Exception (Pylint) Potential Index Error (Pylint) Return in Finally (Pylint)

CWE:747 CERT C Secure Coding Standard (2008) Chapter 14 - Miscellaneous (MSC)

Category

hierarchy ancestor

CWE:748 CERT C Secure Coding Standard (2008) Appendix - POSIX (POS)

Category

hierarchy ancestor

CWE:750 Weaknesses in the 2009 CWE/SANS Top 25 Most Dangerous Programming Errors

View

hierarchy ancestor	Access Member Before Definition (Pylint) Attribute Defined Outside Init (Pylint) Bad Open Mode (Pylint) Consider Using With (Pylint) Eval Used (Pylint) Exec Used (Pylint) Global Variable Undefined (Pylint) Invalid Envvar Default (Pylint) Method Cache Max Size None (Pylint) Potential Index Error (Pylint)

CWE:751 2009 Top 25 - Insecure Interaction Between Components

Category

hierarchy ancestor	Potential Index Error (Pylint)

CWE:752 2009 Top 25 - Risky Resource Management

Category

hierarchy ancestor	Access Member Before Definition (Pylint) Attribute Defined Outside Init (Pylint) Consider Using With (Pylint) Eval Used (Pylint) Exec Used (Pylint) Global Variable Undefined (Pylint) Invalid Envvar Default (Pylint) Method Cache Max Size None (Pylint) Potential Index Error (Pylint)

CWE:753 2009 Top 25 - Porous Defenses

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:754 Improper Check for Unusual or Exceptional Conditions

Weakness

closely mapped

hierarchy ancestor

CWE:755 Improper Handling of Exceptional Conditions

Weakness

closely mapped	Bad Except Order (Pylint) Bad Exception Cause (Pylint) Broad Exception Raised (Pylint) Continue in Finally (Pylint) Lost Exception (Pylint) Notimplemented Raised (Pylint) Raising Bad Type (Pylint) Raising Format Tuple (Pylint) Raising Non Exception (Pylint) Try Except Raise (Pylint) Wrong Exception Operation (Pylint)
hierarchy ancestor	Bare Except (Pylint) Broad Exception Caught (Pylint)

CWE:758 Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

Weakness

closely mapped	Unspecified Encoding (Pylint)
hierarchy ancestor	Consider Using Sys Exit (Pylint)

CWE:770 Allocation of Resources Without Limits or Throttling

Weakness

closely mapped	Method Cache Max Size None (Pylint)

CWE:787 Out-of-bounds Write

Weakness

closely mapped	Potential Index Error (Pylint)

CWE:800 Weaknesses in the 2010 CWE/SANS Top 25 Most Dangerous Programming Errors

View

hierarchy ancestor

CWE:802 2010 Top 25 - Risky Resource Management

Category

hierarchy ancestor

CWE:803 2010 Top 25 - Porous Defenses

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:809 Weaknesses in OWASP Top Ten (2010)

View

hierarchy ancestor	Bad Open Mode (Pylint) Class Variable Slots Conflict (Pylint) Duplicate Argument Name (Pylint) Duplicate Key (Pylint) Function Redefined (Pylint) Method Hidden (Pylint) Shadowed Import (Pylint)

CWE:813 OWASP Top Ten 2010 Category A4 - Insecure Direct Object References

Category

hierarchy ancestor	Class Variable Slots Conflict (Pylint) Duplicate Argument Name (Pylint) Duplicate Key (Pylint) Function Redefined (Pylint) Method Hidden (Pylint) Shadowed Import (Pylint)

CWE:815 OWASP Top Ten 2010 Category A6 - Security Misconfiguration

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:817 OWASP Top Ten 2010 Category A8 - Failure to Restrict URL Access

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:821 Incorrect Synchronization

Weakness

hierarchy ancestor	Missing Timeout (Pylint)

CWE:833 Deadlock

Weakness

closely mapped	Subprocess Popen Preexec Fn (Pylint)

CWE:840 Business Logic Errors

Category

hierarchy ancestor	Method Cache Max Size None (Pylint)

CWE:844 Weaknesses Addressed by The CERT Oracle Secure Coding Standard for Java (2011)

View

hierarchy ancestor

CWE:846 The CERT Oracle Secure Coding Standard for Java (2011) Chapter 3 - Declarations and Initialization (DCL)

Category

hierarchy ancestor	Access Member Before Definition (Pylint) Attribute Defined Outside Init (Pylint) Global Variable Undefined (Pylint) Invalid Envvar Default (Pylint) Method Cache Max Size None (Pylint)

CWE:847 The CERT Oracle Secure Coding Standard for Java (2011) Chapter 4 - Expressions (EXP)

Category

hierarchy ancestor	Literal Comparison (Pylint) Subprocess Run Check (Pylint)

CWE:850 The CERT Oracle Secure Coding Standard for Java (2011) Chapter 7 - Methods (MET)

Category

hierarchy ancestor

CWE:851 The CERT Oracle Secure Coding Standard for Java (2011) Chapter 8 - Exceptional Behavior (ERR)

Category

hierarchy ancestor

CWE:852 The CERT Oracle Secure Coding Standard for Java (2011) Chapter 9 - Visibility and Atomicity (VNA)

Category

hierarchy ancestor	Missing Timeout (Pylint) Subprocess Popen Preexec Fn (Pylint) Useless With Lock (Pylint)

CWE:853 The CERT Oracle Secure Coding Standard for Java (2011) Chapter 10 - Locking (LCK)

Category

hierarchy ancestor	Subprocess Popen Preexec Fn (Pylint) Useless With Lock (Pylint)

CWE:854 The CERT Oracle Secure Coding Standard for Java (2011) Chapter 11 - Thread APIs (THI)

Category

hierarchy ancestor	Bare Except (Pylint) Broad Exception Caught (Pylint) Lost Exception (Pylint) Return in Finally (Pylint)

CWE:857 The CERT Oracle Secure Coding Standard for Java (2011) Chapter 14 - Input Output (FIO)

Category

hierarchy ancestor	Bad Open Mode (Pylint) Consider Using With (Pylint) Method Cache Max Size None (Pylint)

CWE:858 The CERT Oracle Secure Coding Standard for Java (2011) Chapter 15 - Serialization (SER)

Category

hierarchy ancestor	Consider Using Sys Exit (Pylint) Method Cache Max Size None (Pylint)

CWE:859 The CERT Oracle Secure Coding Standard for Java (2011) Chapter 16 - Platform Security (SEC)

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:860 The CERT Oracle Secure Coding Standard for Java (2011) Chapter 17 - Runtime Environment (ENV)

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:861 The CERT Oracle Secure Coding Standard for Java (2011) Chapter 18 - Miscellaneous (MSC)

Category

hierarchy ancestor	Method Cache Max Size None (Pylint)

CWE:865 2011 Top 25 - Risky Resource Management

Category

hierarchy ancestor	Eval Used (Pylint) Exec Used (Pylint)

CWE:866 2011 Top 25 - Porous Defenses

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:867 2011 Top 25 - Weaknesses On the Cusp

Category

hierarchy ancestor

CWE:868 Weaknesses Addressed by the SEI CERT C++ Coding Standard (2016 Version)

View

hierarchy ancestor

CWE:871 CERT C++ Secure Coding Section 03 - Expressions (EXP)

Category

hierarchy ancestor	Bad Chained Comparison (Pylint) Invalid Unary Operand Type (Pylint) Literal Comparison (Pylint) Shallow Copy Environ (Pylint) Unsubscriptable Object (Pylint) Unsupported Assignment Operation (Pylint) Unsupported Binary Operation (Pylint) Unsupported Delete Operation (Pylint) Unsupported Membership Test (Pylint)

CWE:872 CERT C++ Secure Coding Section 04 - Integers (INT)

Category

hierarchy ancestor	Eval Used (Pylint) Exec Used (Pylint) Potential Index Error (Pylint)

CWE:873 CERT C++ Secure Coding Section 05 - Floating Point Arithmetic (FLP)

Category

hierarchy ancestor	Bad Exception Cause (Pylint) Bad Reversed Sequence (Pylint) Bad String Format Type (Pylint) Invalid Envvar Value (Pylint) Invalid Unary Operand Type (Pylint) Isinstance Second Argument Not Valid Type (Pylint) Misplaced Format Function (Pylint) Missing Format Attribute (Pylint) Not a Mapping (Pylint) Not an Iterable (Pylint)

CWE:874 CERT C++ Secure Coding Section 06 - Arrays and the STL (ARR)

Category

hierarchy ancestor	Access Member Before Definition (Pylint) Attribute Defined Outside Init (Pylint) Global Variable Undefined (Pylint) Invalid Envvar Default (Pylint) Method Cache Max Size None (Pylint) Potential Index Error (Pylint)

CWE:875 CERT C++ Secure Coding Section 07 - Characters and Strings (STR)

Category

hierarchy ancestor

CWE:876 CERT C++ Secure Coding Section 08 - Memory Management (MEM)

Category

hierarchy ancestor

CWE:877 CERT C++ Secure Coding Section 09 - Input Output (FIO)

Category

hierarchy ancestor	Bad Open Mode (Pylint) Consider Using With (Pylint) Eval Used (Pylint) Exec Used (Pylint) Method Cache Max Size None (Pylint) Potential Index Error (Pylint)

CWE:878 CERT C++ Secure Coding Section 10 - Environment (ENV)

Category

hierarchy ancestor	Bare Except (Pylint) Broad Exception Caught (Pylint) Duplicate Key (Pylint) Lost Exception (Pylint) Potential Index Error (Pylint) Return in Finally (Pylint)

CWE:879 CERT C++ Secure Coding Section 11 - Signals (SIG)

Category

hierarchy ancestor	Missing Timeout (Pylint) Subprocess Popen Preexec Fn (Pylint) Useless With Lock (Pylint)

CWE:880 CERT C++ Secure Coding Section 12 - Exceptions and Error Handling (ERR)

Category

hierarchy ancestor

CWE:882 CERT C++ Secure Coding Section 14 - Concurrency (CON)

Category

hierarchy ancestor	Consider Using With (Pylint)

CWE:883 CERT C++ Secure Coding Section 49 - Miscellaneous (MSC)

Category

hierarchy ancestor

CWE:884 CWE Cross-section

View

hierarchy ancestor

CWE:885 SFP Primary Cluster: Risky Values

Category

hierarchy ancestor

CWE:886 SFP Primary Cluster: Unused entities

Category

hierarchy ancestor	Possibly Unused Variable (Pylint) Redeclared Assigned Name (Pylint) Unreachable (Pylint) Unused Variable (Pylint) Useless Else on Loop (Pylint)

CWE:887 SFP Primary Cluster: API

Category

hierarchy ancestor

CWE:888 Software Fault Pattern (SFP) Clusters

View

hierarchy ancestor

CWE:889 SFP Primary Cluster: Exception Management

Category

hierarchy ancestor

CWE:890 SFP Primary Cluster: Memory Access

Category

hierarchy ancestor	Invalid Format Index (Pylint) Invalid Sequence Index (Pylint) Invalid Slice Index (Pylint) Potential Index Error (Pylint)

CWE:892 SFP Primary Cluster: Resource Management

Category

hierarchy ancestor

CWE:894 SFP Primary Cluster: Synchronization

Category

hierarchy ancestor	Missing Timeout (Pylint) Subprocess Popen Preexec Fn (Pylint) Useless With Lock (Pylint)

CWE:895 SFP Primary Cluster: Information Leak

Category

hierarchy ancestor	Bad Open Mode (Pylint) Fixme (Pylint) Invalid Envvar Default (Pylint)

CWE:896 SFP Primary Cluster: Tainted Input

Category

hierarchy ancestor

CWE:897 SFP Primary Cluster: Entry Points

Category

hierarchy ancestor	Forgotten Debug Statement (Pylint)

CWE:899 SFP Primary Cluster: Access Control

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:900 Weaknesses in the 2011 CWE/SANS Top 25 Most Dangerous Software Errors

View

hierarchy ancestor

CWE:904 SFP Primary Cluster: Malware

Category

hierarchy ancestor	Bidirectional Unicode (Pylint) Invalid Character Backspace (Pylint) Invalid Character Carriage Return (Pylint) Invalid Character Esc (Pylint) Invalid Character Nul (Pylint) Invalid Character Sub (Pylint) Invalid Character Zero Width Space (Pylint)

CWE:906 SFP Primary Cluster: UI

Category

hierarchy ancestor	Bare Except (Pylint) Broad Exception Caught (Pylint)

CWE:907 SFP Primary Cluster: Other

Category

hierarchy ancestor

CWE:908 Use of Uninitialized Resource

Weakness

closely mapped	Access Member Before Definition (Pylint)
also related	Attribute Defined Outside Init (Pylint)
hierarchy ancestor	Global Variable Undefined (Pylint)

CWE:912 Hidden Functionality

Weakness

hierarchy ancestor	Bidirectional Unicode (Pylint) Invalid Character Backspace (Pylint) Invalid Character Carriage Return (Pylint) Invalid Character Esc (Pylint) Invalid Character Nul (Pylint) Invalid Character Sub (Pylint) Invalid Character Zero Width Space (Pylint)

CWE:913 Improper Control of Dynamically-Managed Code Resources

Weakness

hierarchy ancestor	Eval Used (Pylint) Exec Used (Pylint)

CWE:928 Weaknesses in OWASP Top Ten (2013)

View

hierarchy ancestor	Bad Open Mode (Pylint) Class Variable Slots Conflict (Pylint) Duplicate Argument Name (Pylint) Duplicate Key (Pylint) Eval Used (Pylint) Exec Used (Pylint) Function Redefined (Pylint) Method Hidden (Pylint) Shadowed Import (Pylint)

CWE:929 OWASP Top Ten 2013 Category A1 - Injection

Category

hierarchy ancestor	Class Variable Slots Conflict (Pylint) Duplicate Argument Name (Pylint) Duplicate Key (Pylint) Eval Used (Pylint) Exec Used (Pylint) Function Redefined (Pylint) Method Hidden (Pylint) Shadowed Import (Pylint)

CWE:932 OWASP Top Ten 2013 Category A4 - Insecure Direct Object References

Category

hierarchy ancestor	Class Variable Slots Conflict (Pylint) Duplicate Argument Name (Pylint) Duplicate Key (Pylint) Function Redefined (Pylint) Method Hidden (Pylint) Shadowed Import (Pylint)

CWE:935 OWASP Top Ten 2013 Category A7 - Missing Function Level Access Control

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:944 SFP Secondary Cluster: Access Management

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:945 SFP Secondary Cluster: Insecure Resource Access

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:946 SFP Secondary Cluster: Insecure Resource Permissions

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:960 SFP Secondary Cluster: Ambiguous Exception Type

Category

hierarchy ancestor	Bare Except (Pylint) Broad Exception Caught (Pylint)

CWE:961 SFP Secondary Cluster: Incorrect Exception Behavior

Category

hierarchy ancestor

CWE:962 SFP Secondary Cluster: Unchecked Status Condition

Category

hierarchy ancestor

CWE:963 SFP Secondary Cluster: Exposed Data

Category

hierarchy ancestor	Bad Open Mode (Pylint) Fixme (Pylint)

CWE:966 SFP Secondary Cluster: Other Exposures

Category

hierarchy ancestor	Invalid Envvar Default (Pylint)

CWE:970 SFP Secondary Cluster: Faulty Buffer Access

Category

hierarchy ancestor	Invalid Format Index (Pylint) Invalid Sequence Index (Pylint) Invalid Slice Index (Pylint) Potential Index Error (Pylint)

CWE:975 SFP Secondary Cluster: Architecture

Category

hierarchy ancestor	Deprecated Module (Pylint) Preferred Module (Pylint)

CWE:977 SFP Secondary Cluster: Design

Category

hierarchy ancestor

CWE:978 SFP Secondary Cluster: Implementation

Category

hierarchy ancestor

CWE:982 SFP Secondary Cluster: Failure to Release Resource

Category

hierarchy ancestor	Consider Using With (Pylint)

CWE:984 SFP Secondary Cluster: Life Cycle

Category

hierarchy ancestor

CWE:985 SFP Secondary Cluster: Unrestricted Consumption

Category

hierarchy ancestor	Method Cache Max Size None (Pylint)

CWE:986 SFP Secondary Cluster: Missing Lock

Category

hierarchy ancestor	Missing Timeout (Pylint) Subprocess Popen Preexec Fn (Pylint) Useless With Lock (Pylint)

CWE:990 SFP Secondary Cluster: Tainted Input to Command

Category

hierarchy ancestor

CWE:991 SFP Secondary Cluster: Tainted Input to Environment

Category

hierarchy ancestor	Dangerous Default Value (Pylint) Eval Used (Pylint) Exec Used (Pylint)

CWE:993 SFP Secondary Cluster: Incorrect Input Handling

Category

hierarchy ancestor	Confusing With Statement (Pylint) Dict Iter Missing Items (Pylint)

CWE:994 SFP Secondary Cluster: Tainted Input to Variable

Category

hierarchy ancestor	Potential Index Error (Pylint)

CWE:997 SFP Secondary Cluster: Information Loss

Category

hierarchy ancestor	Bare Except (Pylint) Broad Exception Caught (Pylint)

CWE:998 SFP Secondary Cluster: Glitch in Computation

Category

hierarchy ancestor

CWE:1000 Research Concepts

View

hierarchy ancestor

CWE:1001 SFP Secondary Cluster: Use of an Improper API

Category

hierarchy ancestor

CWE:1002 SFP Secondary Cluster: Unexpected Entry Points

Category

hierarchy ancestor	Forgotten Debug Statement (Pylint)

CWE:1003 Weaknesses for Simplified Mapping of Published Vulnerabilities

View

hierarchy ancestor

CWE:1005 7PK - Input Validation and Representation

Category

hierarchy ancestor	Class Variable Slots Conflict (Pylint) Duplicate Argument Name (Pylint) Duplicate Key (Pylint) Function Redefined (Pylint) Method Hidden (Pylint) Potential Index Error (Pylint) Shadowed Import (Pylint)

CWE:1006 Bad Coding Practices

Category

hierarchy ancestor

CWE:1008 Architectural Concepts

View

hierarchy ancestor

CWE:1011 Authorize Actors

Category

hierarchy ancestor	Bad Open Mode (Pylint) Method Cache Max Size None (Pylint)

CWE:1012 Cross Cutting

Category

hierarchy ancestor

CWE:1019 Validate Inputs

Category

hierarchy ancestor	Class Variable Slots Conflict (Pylint) Duplicate Argument Name (Pylint) Duplicate Key (Pylint) Eval Used (Pylint) Exec Used (Pylint) Function Redefined (Pylint) Method Hidden (Pylint) Potential Index Error (Pylint) Shadowed Import (Pylint)

CWE:1020 Verify Message Integrity

Category

hierarchy ancestor

CWE:1023 Incomplete Comparison with Missing Factors

Weakness

closely mapped	Use Implicit Booleaness Not Comparison (Pylint) Use Implicit Booleaness Not Comparison to String (Pylint) Use Implicit Booleaness Not Comparison to Zero (Pylint) Use Implicit Booleaness Not Len (Pylint)

CWE:1025 Comparison Using Wrong Factors

Weakness

closely mapped	Comparison With Callable (Pylint)
hierarchy ancestor	Literal Comparison (Pylint)

CWE:1026 Weaknesses in OWASP Top Ten (2017)

View

hierarchy ancestor	Bad Open Mode (Pylint) Bare Except (Pylint) Broad Exception Caught (Pylint)

CWE:1031 OWASP Top Ten 2017 Category A5 - Broken Access Control

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:1032 OWASP Top Ten 2017 Category A6 - Security Misconfiguration

Category

hierarchy ancestor	Bare Except (Pylint) Broad Exception Caught (Pylint)

CWE:1040 Quality Weaknesses with Indirect Security Impacts

View

hierarchy ancestor

CWE:1041 Use of Redundant Code

Weakness

closely mapped	Copy-Paste Error Duplicate Code (Pylint)

CWE:1047 Modules with Circular Dependencies

Weakness

closely mapped	Cyclic Import (Pylint) Import Self (Pylint)

CWE:1055 Multiple Inheritance from Concrete Classes

Weakness

closely mapped	Too Many Ancestors (Pylint)

CWE:1059 Insufficient Technical Documentation

Weakness

closely mapped	Empty Docstring (Pylint) Missing Class Docstring (Pylint) Missing Function Docstring (Pylint) Missing Module Docstring (Pylint)

CWE:1064 Invokable Control Element with Signature Containing an Excessive Number of Parameters

Weakness

closely mapped	Too Many Arguments (Pylint)

CWE:1076 Insufficient Adherence to Expected Conventions

Weakness

closely mapped

hierarchy ancestor

CWE:1077 Floating Point Comparison with Incorrect Operator

Weakness

closely mapped	Nan Comparison (Pylint)

CWE:1078 Inappropriate Source Code Style or Formatting

Weakness

closely mapped

hierarchy ancestor

CWE:1080 Source Code File with Excessive Number of Lines of Code

Weakness

closely mapped	Too Many Lines (Pylint)

CWE:1081 Entries with Maintenance Notes

View

hierarchy ancestor

CWE:1088 Synchronous Access of Remote Resource without Timeout

Weakness

closely mapped	Missing Timeout (Pylint)

CWE:1093 Excessively Complex Data Representation

Weakness

hierarchy ancestor	Too Many Ancestors (Pylint)

CWE:1095 Loop Condition Value Update within the Loop

Weakness

closely mapped	Modified Iterating Dict (Pylint) Modified Iterating List (Pylint) Modified Iterating Set (Pylint)

CWE:1099 Inconsistent Naming Conventions for Identifiers

Weakness

closely mapped	Bad Classmethod Argument (Pylint) Bad Mcs Classmethod Argument (Pylint) Bad Mcs Method Argument (Pylint) Bad Staticmethod Argument (Pylint) Disallowed Name (Pylint) Invalid Name (Pylint) Typevar Name Incorrect Variance (Pylint) Typevar Name Mismatch (Pylint)

CWE:1108 Excessive Reliance on Global Variables

Weakness

closely mapped	Global Statement (Pylint)

CWE:1114 Inappropriate Whitespace Style

Weakness

closely mapped	Missing Final Newline (Pylint) Mixed Line Endings (Pylint) Trailing Newlines (Pylint) Trailing Whitespace (Pylint) Unexpected Line Ending Format (Pylint)

CWE:1120 Excessive Code Complexity

Weakness

closely mapped

hierarchy ancestor

CWE:1124 Excessively Deep Nesting

Weakness

closely mapped	Too Many Nested Blocks (Pylint)

CWE:1128 CISQ Quality Measures (2016)

View

hierarchy ancestor

CWE:1129 CISQ Quality Measures (2016) - Reliability

Category

hierarchy ancestor	Bare Except (Pylint) Broad Exception Caught (Pylint) Cyclic Import (Pylint) Import Self (Pylint) Invalid Class Object (Pylint) Invalid Envvar Default (Pylint) Missing Timeout (Pylint) Nan Comparison (Pylint) Subprocess Run Check (Pylint)

CWE:1130 CISQ Quality Measures (2016) - Maintainability

Category

hierarchy ancestor	Copy-Paste Error Cyclic Import (Pylint) Duplicate Code (Pylint) Import Self (Pylint) Modified Iterating Dict (Pylint) Modified Iterating List (Pylint) Modified Iterating Set (Pylint) Too Many Ancestors (Pylint) Too Many Arguments (Pylint) Too Many Lines (Pylint) Unreachable (Pylint) Useless Else on Loop (Pylint)

CWE:1131 CISQ Quality Measures (2016) - Security

Category

hierarchy ancestor	Bare Except (Pylint) Broad Exception Caught (Pylint) Class Variable Slots Conflict (Pylint) Duplicate Argument Name (Pylint) Duplicate Key (Pylint) Function Redefined (Pylint) Method Hidden (Pylint) Shadowed Import (Pylint) Subprocess Popen Preexec Fn (Pylint) Subprocess Run Check (Pylint) Useless With Lock (Pylint)

CWE:1133 Weaknesses Addressed by the SEI CERT Oracle Coding Standard for Java

View

hierarchy ancestor

CWE:1135 SEI CERT Oracle Secure Coding Standard for Java - Guidelines 01. Declarations and Initialization (DCL)

Category

hierarchy ancestor	Access Member Before Definition (Pylint) Attribute Defined Outside Init (Pylint) Global Variable Undefined (Pylint) Invalid Envvar Default (Pylint) Method Cache Max Size None (Pylint)

CWE:1136 SEI CERT Oracle Secure Coding Standard for Java - Guidelines 02. Expressions (EXP)

Category

hierarchy ancestor	Literal Comparison (Pylint) Subprocess Run Check (Pylint)

CWE:1140 SEI CERT Oracle Secure Coding Standard for Java - Guidelines 06. Methods (MET)

Category

hierarchy ancestor

CWE:1141 SEI CERT Oracle Secure Coding Standard for Java - Guidelines 07. Exceptional Behavior (ERR)

Category

hierarchy ancestor

CWE:1142 SEI CERT Oracle Secure Coding Standard for Java - Guidelines 08. Visibility and Atomicity (VNA)

Category

hierarchy ancestor	Missing Timeout (Pylint) Subprocess Popen Preexec Fn (Pylint) Useless With Lock (Pylint)

CWE:1143 SEI CERT Oracle Secure Coding Standard for Java - Guidelines 09. Locking (LCK)

Category

hierarchy ancestor	Subprocess Popen Preexec Fn (Pylint) Useless With Lock (Pylint)

CWE:1147 SEI CERT Oracle Secure Coding Standard for Java - Guidelines 13. Input Output (FIO)

Category

hierarchy ancestor	Bad Open Mode (Pylint) Bare Except (Pylint) Broad Exception Caught (Pylint) Consider Using With (Pylint) Lost Exception (Pylint) Method Cache Max Size None (Pylint) Return in Finally (Pylint)

CWE:1148 SEI CERT Oracle Secure Coding Standard for Java - Guidelines 14. Serialization (SER)

Category

hierarchy ancestor	Method Cache Max Size None (Pylint)

CWE:1149 SEI CERT Oracle Secure Coding Standard for Java - Guidelines 15. Platform Security (SEC)

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:1150 SEI CERT Oracle Secure Coding Standard for Java - Guidelines 16. Runtime Environment (ENV)

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:1152 SEI CERT Oracle Secure Coding Standard for Java - Guidelines 49. Miscellaneous (MSC)

Category

hierarchy ancestor	Method Cache Max Size None (Pylint)

CWE:1154 Weaknesses Addressed by the SEI CERT C Coding Standard

View

hierarchy ancestor

CWE:1157 SEI CERT C Coding Standard - Guidelines 03. Expressions (EXP)

Category

hierarchy ancestor

CWE:1158 SEI CERT C Coding Standard - Guidelines 04. Integers (INT)

Category

hierarchy ancestor	Consider Using Sys Exit (Pylint) Invalid Class Object (Pylint) Invalid Envvar Default (Pylint) Unspecified Encoding (Pylint)

CWE:1160 SEI CERT C Coding Standard - Guidelines 06. Arrays (ARR)

Category

hierarchy ancestor	Consider Using Sys Exit (Pylint) Potential Index Error (Pylint) Unspecified Encoding (Pylint)

CWE:1161 SEI CERT C Coding Standard - Guidelines 07. Characters and Strings (STR)

Category

hierarchy ancestor	Eval Used (Pylint) Exec Used (Pylint) Invalid Class Object (Pylint) Invalid Envvar Default (Pylint) Potential Index Error (Pylint)

CWE:1162 SEI CERT C Coding Standard - Guidelines 08. Memory Management (MEM)

Category

hierarchy ancestor	Consider Using Sys Exit (Pylint) Consider Using With (Pylint) Unspecified Encoding (Pylint)

CWE:1163 SEI CERT C Coding Standard - Guidelines 09. Input Output (FIO)

Category

hierarchy ancestor

CWE:1164 Irrelevant Code

Weakness

closely mapped

hierarchy ancestor

CWE:1165 SEI CERT C Coding Standard - Guidelines 10. Environment (ENV)

Category

hierarchy ancestor	Bare Except (Pylint) Broad Exception Caught (Pylint) Eval Used (Pylint) Exec Used (Pylint) Lost Exception (Pylint) Return in Finally (Pylint)

CWE:1166 SEI CERT C Coding Standard - Guidelines 11. Signals (SIG)

Category

hierarchy ancestor	Missing Timeout (Pylint) Subprocess Popen Preexec Fn (Pylint) Useless With Lock (Pylint)

CWE:1167 SEI CERT C Coding Standard - Guidelines 12. Error Handling (ERR)

Category

hierarchy ancestor	Consider Using Sys Exit (Pylint) Eval Used (Pylint) Exec Used (Pylint) Subprocess Run Check (Pylint) Unspecified Encoding (Pylint)

CWE:1169 SEI CERT C Coding Standard - Guidelines 14. Concurrency (CON)

Category

hierarchy ancestor	Eval Used (Pylint) Exec Used (Pylint) Subprocess Popen Preexec Fn (Pylint) Useless With Lock (Pylint)

CWE:1170 SEI CERT C Coding Standard - Guidelines 48. Miscellaneous (MSC)

Category

hierarchy ancestor	Consider Using Sys Exit (Pylint) Eval Used (Pylint) Exec Used (Pylint) Unspecified Encoding (Pylint)

CWE:1171 SEI CERT C Coding Standard - Guidelines 50. POSIX (POS)

Category

hierarchy ancestor	Subprocess Popen Preexec Fn (Pylint) Subprocess Run Check (Pylint) Useless With Lock (Pylint)

CWE:1177 Use of Prohibited Code

Weakness

hierarchy ancestor	Eval Used (Pylint) Exec Used (Pylint)

CWE:1178 Weaknesses Addressed by the SEI CERT Perl Coding Standard

View

hierarchy ancestor

CWE:1180 SEI CERT Perl Coding Standard - Guidelines 02. Declarations and Initialization (DCL)

Category

hierarchy ancestor

CWE:1181 SEI CERT Perl Coding Standard - Guidelines 03. Expressions (EXP)

Category

hierarchy ancestor

CWE:1186 SEI CERT Perl Coding Standard - Guidelines 50. Miscellaneous (MSC)

Category

hierarchy ancestor	Possibly Unused Variable (Pylint) Redeclared Assigned Name (Pylint) Unreachable (Pylint) Unused Variable (Pylint) Useless Else on Loop (Pylint)

CWE:1188 Initialization of a Resource with an Insecure Default

Weakness

hierarchy ancestor	Invalid Envvar Default (Pylint)

CWE:1194 Hardware Design

View

hierarchy ancestor	Empty Docstring (Pylint) Missing Class Docstring (Pylint) Missing Function Docstring (Pylint) Missing Module Docstring (Pylint)

CWE:1195 Manufacturing and Life Cycle Management Concerns

Category

hierarchy ancestor	Empty Docstring (Pylint) Missing Class Docstring (Pylint) Missing Function Docstring (Pylint) Missing Module Docstring (Pylint)

CWE:1200 Weaknesses in the 2019 CWE Top 25 Most Dangerous Software Errors

View

hierarchy ancestor	Bad Open Mode (Pylint) Eval Used (Pylint) Exec Used (Pylint) Method Cache Max Size None (Pylint) Potential Index Error (Pylint)

CWE:1208 Cross-Cutting Problems

Category

hierarchy ancestor	Empty Docstring (Pylint) Missing Class Docstring (Pylint) Missing Function Docstring (Pylint) Missing Module Docstring (Pylint)

CWE:1218 Memory Buffer Errors

Category

hierarchy ancestor	Potential Index Error (Pylint)

CWE:1226 Complexity Issues

Category

hierarchy ancestor	Cyclic Import (Pylint) Import Self (Pylint) Modified Iterating Dict (Pylint) Modified Iterating List (Pylint) Modified Iterating Set (Pylint) Too Many Ancestors (Pylint) Too Many Arguments (Pylint) Too Many Lines (Pylint) Too Many Nested Blocks (Pylint)

CWE:1228 API / Function Errors

Category

hierarchy ancestor	Consider Using Sys Exit (Pylint) Deprecated Method (Pylint) Eval Used (Pylint) Exec Used (Pylint)

CWE:1305 CISQ Quality Measures (2020)

View

hierarchy ancestor

CWE:1306 CISQ Quality Measures - Reliability

Category

hierarchy ancestor

CWE:1307 CISQ Quality Measures - Maintainability

Category

hierarchy ancestor

CWE:1308 CISQ Quality Measures - Security

Category

hierarchy ancestor

CWE:1309 CISQ Quality Measures - Efficiency

Category

hierarchy ancestor	Consider Using With (Pylint)

CWE:1337 Weaknesses in the 2021 CWE Top 25 Most Dangerous Software Weaknesses

View

hierarchy ancestor	Bad Open Mode (Pylint) Potential Index Error (Pylint)

CWE:1340 CISQ Data Protection Measures

View

hierarchy ancestor

CWE:1344 Weaknesses in OWASP Top Ten (2021)

View

hierarchy ancestor

CWE:1345 OWASP Top Ten 2021 Category A01:2021 - Broken Access Control

Category

hierarchy ancestor	Bad Open Mode (Pylint) Eval Used (Pylint) Exec Used (Pylint)

CWE:1347 OWASP Top Ten 2021 Category A03:2021 - Injection

Category

hierarchy ancestor	Class Variable Slots Conflict (Pylint) Dangerous Default Value (Pylint) Duplicate Argument Name (Pylint) Duplicate Key (Pylint) Eval Used (Pylint) Exec Used (Pylint) Function Redefined (Pylint) Method Hidden (Pylint) Potential Index Error (Pylint) Shadowed Import (Pylint)

CWE:1348 OWASP Top Ten 2021 Category A04:2021 - Insecure Design

Category

hierarchy ancestor	Deprecated Module (Pylint) Method Cache Max Size None (Pylint) Preferred Module (Pylint)

CWE:1349 OWASP Top Ten 2021 Category A05:2021 - Security Misconfiguration

Category

hierarchy ancestor	Bare Except (Pylint) Broad Exception Caught (Pylint)

CWE:1350 Weaknesses in the 2020 CWE Top 25 Most Dangerous Software Weaknesses

View

hierarchy ancestor	Bad Open Mode (Pylint) Eval Used (Pylint) Exec Used (Pylint) Method Cache Max Size None (Pylint) Potential Index Error (Pylint)

CWE:1358 Weaknesses in SEI ETF Categories of Security Vulnerabilities in ICS

View

hierarchy ancestor

CWE:1359 ICS Communications

Category

hierarchy ancestor

CWE:1360 ICS Dependencies (& Architecture)

Category

hierarchy ancestor	Empty Docstring (Pylint) Missing Class Docstring (Pylint) Missing Function Docstring (Pylint) Missing Module Docstring (Pylint)

CWE:1361 ICS Supply Chain

Category

hierarchy ancestor

CWE:1362 ICS Engineering (Constructions/Deployment)

Category

hierarchy ancestor

CWE:1363 ICS Operations (& Maintenance)

Category

hierarchy ancestor

CWE:1364 ICS Communications: Zone Boundary Failures

Category

hierarchy ancestor

CWE:1366 ICS Communications: Frail Security in Protocols

Category

hierarchy ancestor	Potential Index Error (Pylint)

CWE:1368 ICS Dependencies (& Architecture): External Digital Systems

Category

hierarchy ancestor	Empty Docstring (Pylint) Missing Class Docstring (Pylint) Missing Function Docstring (Pylint) Missing Module Docstring (Pylint)

CWE:1369 ICS Supply Chain: IT/OT Convergence/Expansion

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:1370 ICS Supply Chain: Common Mode Frailties

Category

hierarchy ancestor

CWE:1371 ICS Supply Chain: Poorly Documented or Undocumented Features

Category

hierarchy ancestor

CWE:1372 ICS Supply Chain: OT Counterfeit and Malicious Corruption

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:1375 ICS Engineering (Construction/Deployment): Gaps in Details/Data

Category

hierarchy ancestor

CWE:1382 ICS Operations (& Maintenance): Emerging Energy Technologies

Category

hierarchy ancestor	Bad Open Mode (Pylint) Potential Index Error (Pylint)

CWE:1383 ICS Operations (& Maintenance): Compliance/Conformance with Regulatory Requirements

Category

hierarchy ancestor

CWE:1387 Weaknesses in the 2022 CWE Top 25 Most Dangerous Software Weaknesses

View

hierarchy ancestor	Eval Used (Pylint) Exec Used (Pylint) Method Cache Max Size None (Pylint) Potential Index Error (Pylint)

CWE:1395 Dependency on Vulnerable Third-Party Component

Weakness

also related	Deprecated Module (Pylint) Preferred Module (Pylint)

CWE:1396 Comprehensive Categorization: Access Control

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:1397 Comprehensive Categorization: Comparison

Category

hierarchy ancestor	Bad Chained Comparison (Pylint) Comparison With Callable (Pylint) Literal Comparison (Pylint) Nan Comparison (Pylint) Use Implicit Booleaness Not Comparison (Pylint) Use Implicit Booleaness Not Comparison to String (Pylint) Use Implicit Booleaness Not Comparison to Zero (Pylint) Use Implicit Booleaness Not Len (Pylint)

CWE:1399 Comprehensive Categorization: Memory Safety

Category

hierarchy ancestor	Potential Index Error (Pylint)

CWE:1400 Comprehensive Categorization for Software Assurance Trends

View

hierarchy ancestor

CWE:1401 Comprehensive Categorization: Concurrency

Category

hierarchy ancestor	Missing Timeout (Pylint) Subprocess Popen Preexec Fn (Pylint) Useless With Lock (Pylint)

CWE:1403 Comprehensive Categorization: Exposed Resource

Category

hierarchy ancestor	Bad Open Mode (Pylint)

CWE:1405 Comprehensive Categorization: Improper Check or Handling of Exceptional Conditions

Category

hierarchy ancestor

CWE:1406 Comprehensive Categorization: Improper Input Validation

Category

hierarchy ancestor	Potential Index Error (Pylint)

CWE:1407 Comprehensive Categorization: Improper Neutralization

Category

hierarchy ancestor	Class Variable Slots Conflict (Pylint) Confusing With Statement (Pylint) Dict Iter Missing Items (Pylint) Duplicate Argument Name (Pylint) Duplicate Key (Pylint) Eval Used (Pylint) Exec Used (Pylint) Function Redefined (Pylint) Method Hidden (Pylint) Potential Index Error (Pylint) Shadowed Import (Pylint)

CWE:1409 Comprehensive Categorization: Injection

Category

hierarchy ancestor	Class Variable Slots Conflict (Pylint) Duplicate Argument Name (Pylint) Duplicate Key (Pylint) Eval Used (Pylint) Exec Used (Pylint) Function Redefined (Pylint) Method Hidden (Pylint) Shadowed Import (Pylint)

CWE:1410 Comprehensive Categorization: Insufficient Control Flow Management

Category

hierarchy ancestor

CWE:1412 Comprehensive Categorization: Poor Coding Practices

Category

hierarchy ancestor

CWE:1416 Comprehensive Categorization: Resource Lifecycle Management

Category

hierarchy ancestor

CWE:1418 Comprehensive Categorization: Violation of Secure Design Principles

Category

hierarchy ancestor	Deprecated Module (Pylint) Preferred Module (Pylint)

CWE:1419 Incorrect Initialization of Resource

Weakness

hierarchy ancestor	Invalid Envvar Default (Pylint)

CWE:1424 Weaknesses Addressed by ISA/IEC 62443 Requirements

View

hierarchy ancestor

CWE:1425 Weaknesses in the 2023 CWE Top 25 Most Dangerous Software Weaknesses

View

hierarchy ancestor	Eval Used (Pylint) Exec Used (Pylint) Potential Index Error (Pylint)

CWE:1430 Weaknesses in the 2024 CWE Top 25 Most Dangerous Software Weaknesses

View

hierarchy ancestor	Eval Used (Pylint) Exec Used (Pylint) Method Cache Max Size None (Pylint) Potential Index Error (Pylint)

CWE:2000 Comprehensive CWE Dictionary

View

hierarchy ancestor