Browse / Other weaknesses

Other weaknesses

See it on the mapBypass libraryPayloads

Weaknesses in this class

• Unclassified630
• Use of Incorrectly-Resolved Name or Reference4
• File Manipulation1
• Insecure Default Initialization of Resource1
• Improper Initialization1
• Reachable Assertion1
• Reusing Session IDs (aka Session Replay)1
• Unchecked Error Condition1
• Misinterpretation of Input1
• ASI05: Unexpected Code Execution (RCE)1
• LLM09:2025 Misinformation1
• Improper Resource Shutdown or Release1
• Improper Handling of Case Sensitivity1
• Improper Handling of Unexpected Data Type1
• Server Side Request Forgery1
• LLM05: Supply Chain Vulnerabilities1
• Improper Handling of Unicode Encoding1
• Improper Handling of Highly Compressed Data (Data Amplification)1
• Encoding Error1
• Embedded Malicious Code1
• Improper Validation of Syntactic Correctness of Input1
• Wrap-around Error1
• Inconsistency Between Implementation and Documented Design1
• Improper Synchronization1

Most upvoted Other weaknesses reports

AllValidInformativeN/ADuplicate

1. SMB READ_ANDX DataOffset not validatedN/Ahigh · curl
   30 votes
2. URL API: triple-slash parses path segment as hostnameN/AUse of Incorrectly-Resolved Name or Reference · medium · curl
   27 votes
3. Account/Repository Takeover via Abandoned GitHub Username in curl's href_extractor.cN/ALLM05: Supply Chain Vulnerabilities · medium · curl
   19 votes
4. Unbounded GZIP Decompression Leading to Event-Loop StarvationN/AImproper Handling of Highly Compressed Data (Data Amplification) · medium · curl
   17 votes
5. Use of Deprecated strcpy() with User-Controlled Environment Variable in Memory Debug InitializationN/Ahigh · curl
   17 votes
6. Unicode-to-ASCII conversion on Windows can lead to argument injection and moreN/AEncoding Error · high · curl
   13 votes
7. DNS domain search list followed for extant domain missing A or AAAA recordsN/AUse of Incorrectly-Resolved Name or Reference · low · curl
   12 votes
8. Missing enforcement of SFTP quote syntax can lead to operation on wrong objectN/AImproper Validation of Syntactic Correctness of Input · curl
   12 votes
9. FTP entrypath accepts 0xFF (Telnet IAC) through incomplete ISCNTRL filter, sent on wire via CWD on connection reuseN/Acurl
   10 votes
10. libcurl WebSocket handshake accepts any Sec-WebSocket-AcceptN/Acurl
    10 votes
11. Use of Deprecated strcpy() with Fixed-Size Buffers in Progress Time FormattingN/Amedium · curl
    9 votes
12. A server response that answers nothing is used as the next transfer's reply — and with IMAP, a fully compliant server does this by accidentN/Amedium · curl
    5 votes
13. Active Mixed Content over HTTPSN/Amedium · curl
    5 votes
14. https://get.ooni.torproject.org/N/ATor
    5 votes
15. Incomplete fix for #181225 (target=_blank vulnerability)N/AParagon Initiative Enterprises
    5 votes
16. Fraudulent claim of business.N/Ahigh · Yelp
    4 votes
17. link reset problemN/APhabricator
    3 votes
18. This is a test reportN/AGratipay
    3 votes
19. libcurl upload read callbacks miss recursive API guard, allowing prohibited multi API reentry and ASAN-confirmed UAFN/Alow · curl
    2 votes
20. Several Subdomains TakeoverN/Ahigh · Reddit
    2 votes
21. SSH server due to Improper Signature VerificationN/Ahigh · Sifchain
    2 votes
22. Insecure Frame (External)N/Alow · curl
    1 votes
23. Provide a security sistem most fit to our teamN/Ahigh · Ruby
    1 votes