| Name of the file | ||
|
| Size____(ko) | ||
|
| Total CWE | ||
|
| Very High | |||
| Total Very High | |||
| QC-VHIGH | |||
|
| Very High | |||
| Recursive unix signal handler | |||
| QC-CWE??? | |||
|
| Very High | |||
| OS command injection | |||
| QC-CWE078 | |||
|
| Very High | |||
| Basic XSS | |||
| QC-CWE080 | |||
|
| Very High | |||
| SQL Injection | |||
| QC-CWE089 | |||
|
| Very High | |||
| Insufficient control of directives in dynamically evaluated code | |||
| QC-CWE095 | |||
|
| Very High | |||
| Insufficient control of filename for include / require statement | |||
| QC-CWE098 | |||
|
| Very High | |||
| Ressource injection | |||
| QC-CWE099 | |||
|
| Very High | |||
| division by ZERO | |||
| QC-CWE369 | |||
|
| Very High | |||
| Unrestricted lock of critical ressource, deadlock | |||
| QC-CWE412 | |||
|
| Very High | |||
| Use of externally-controlled (unsafe reflection) | |||
| QC-CWE470 | |||
|
| Very High | |||
| call to Thread run() instead of start() | |||
| QC-CWE572 | |||
|
| Very High | |||
| variable extraction error | |||
| QC-CWE621 | |||
|
| Very High | |||
| executable regular expression error | |||
| QC-CWE624 | |||
|
| High | |||
| Total High | |||
| QC-HIGH | |||
|
| High | |||
| Insufficient control of directives in statically saved code | |||
| QC-CWE096 | |||
|
| High | |||
| null pointer reference | |||
| QC-CWE476 | |||
|
| High | |||
| Omitted Break Statement in Switch | |||
| QC-CWE484 | |||
|
| High | |||
| condition NEVER true | |||
| QC-CWE570 | |||
|
| High | |||
| Incomplete identification of uploaded file | |||
| QC-CWE616 | |||
|
| Medium | |||
| Total Medium | |||
| QC-MEDIUM | |||
|
| Medium | |||
| overflow | |||
| QC-CWE190 | |||
|
| Medium | |||
| Detection of error condition without action | |||
| QC-CWE390 | |||
|
| Medium | |||
| Failure de report error in status code | |||
| QC-CWE392 | |||
|
| Medium | |||
| Assigning instead of comparing | |||
| QC-CWE481 | |||
|
| Medium | |||
| Critical public variable without final modifier | |||
| QC-CWE493 | |||
|
| Medium | |||
| Return inside finally block | |||
| QC-CWE584 | |||
|
| Low | |||
| Total Low | |||
| QC-LOW | |||
|
| Low | |||
| return type of function is not tested | |||
| QC-CWE252 | |||
|
| Low | |||
| Static public field not marked final | |||
| QC-CWE500 | |||
|
| Low | |||
| Array declared public, final and static | |||
| QC-CWE582 | |||
|
| Low | |||
| The software contains an empty synchronized block | |||
| QC-CWE585 | |||
|
| Low | |||
| Null byte interaction error on | |||
| QC-CWE626 | |||
|
| Low | |||
| Dynamic variable evaluation for variable | |||
| QC-CWE627 | |||
|
| Security errors | ||
|
| Deadlock errors | ||
|