The product calls a function, procedure, or routine, but the caller specifies an argument that is the wrong data type, which may lead to resultant weaknesses.
Improper Restriction of Software Interfaces to Hardware Features
6
Base
-
The product provides software-controllable
device functionality for capabilities such as power and
clock management, but it does not properly limit
functionality that can lead to modification of
hardware memory or register bits, or the ability to
observe physical side channels.
The product's random number generator produces a series of values which, when observed, can be used to infer a relatively small range of possibilities for the next value that could be generated.
Allocation of File Descriptors or Handles Without Limits or Throttling
5
Variant
Low
The product allocates file descriptors or handles on behalf of an actor without imposing any restrictions on how many descriptors can be allocated, in violation of the intended security policy for that actor.
The product performs an operation on a number that causes it to be sign extended when it is transformed into a larger data type. When the original number is negative, this can produce unexpected values that lead to resultant weaknesses.
Incomplete Filtering of Multiple Instances of Special Elements
5
Variant
-
The product receives data from an upstream component, but does not filter all instances of a special element before sending it to a downstream component.
Function Call With Incorrect Variable or Reference as Argument
5
Variant
-
The product calls a function, procedure, or routine, but the caller specifies the wrong variable or reference as one of the arguments, which may lead to undefined behavior and resultant weaknesses.
The product accepts input that identifies a Windows UNC share ('\\UNC\share\name') that potentially redirects access to an unintended location or arbitrary file.
Insufficient Visual Distinction of Homoglyphs Presented to User
5
Base
Medium
The product displays information or identifiers to a user, but the display mechanism does not make it easy for the user to distinguish between visually similar or identical glyphs (homoglyphs), which may cause the user to misinterpret a glyph and perform an unintended, insecure action.
Incomplete Filtering of One or More Instances of Special Elements
5
Variant
-
The product receives data from an upstream component, but does not completely filter one or more instances of special elements before sending it to a downstream component.
The product receives input from an upstream component, but it does not handle or incorrectly handles when an additional unexpected special element is provided.
Non-Transparent Sharing of Microarchitectural Resources
5
Base
-
Hardware structures shared across execution contexts (e.g., caches and branch predictors) can violate the expected architecture isolation between contexts.
A PHP application does not properly protect against the modification of variables from external sources, such as query parameters or cookies. This can expose the application to numerous weaknesses that would not exist otherwise.
Quotes injected into a product can be used to compromise a system. As data are parsed, an injected/absent/duplicate/malformed use of quotes may cause the process to take unexpected actions.
In a language where the user can influence the name of a variable at runtime, if the variable names are not controlled, an attacker can read or write to arbitrary variables, or access arbitrary functions.