CWE-537 Java Runtime Error Message Containing Sensitive Information 0 Variant - Details In many cases, an attacker can leverage the conditions that cause unhandled exception errors in order to gain unauthorized access to the system.
CWE-542 DEPRECATED: Information Exposure Through Cleanup Log Files 0 Variant - Details This entry has been deprecated because its abstraction was too low-level. See CWE-532.
CWE-543 Use of Singleton Pattern Without Synchronization in a Multithreaded Context 0 Variant - Details The product uses the singleton pattern when creating a resource within a multithreaded environment.
CWE-545 DEPRECATED: Use of Dynamic Class Loading 0 Variant - Details This weakness has been deprecated because it partially overlaps CWE-470, it describes legitimate programmer behavior, and other portions will need to be integrated into other entries.
CWE-546 Suspicious Comment 0 Variant - Details The code contains comments that suggest the presence of bugs, incomplete functionality, or weaknesses.
CWE-554 ASP.NET Misconfiguration: Not Using Input Validation Framework 0 Variant - Details The ASP.NET application does not use an input validation framework.
CWE-558 Use of getlogin() in Multithreaded Application 0 Variant - Details The product uses the getlogin() function in a multithreaded context, potentially causing it to return incorrect values.
CWE-560 Use of umask() with chmod-style Argument 0 Variant - Details The product calls umask() with an incorrect argument that is specified as if it is an argument to chmod().
CWE-568 finalize() Method Without super.finalize() 0 Variant - Details The product contains a finalize() method that does not call super.finalize().
CWE-572 Call to Thread run() instead of start() 0 Variant - Details The product calls a thread's run() method instead of calling start(), which causes the code to run in the thread of the caller instead of the callee.
CWE-574 EJB Bad Practices: Use of Synchronization Primitives 0 Variant - Details The product violates the Enterprise JavaBeans (EJB) specification by using thread synchronization primitives.
CWE-575 EJB Bad Practices: Use of AWT Swing 0 Variant - Details The product violates the Enterprise JavaBeans (EJB) specification by using AWT/Swing.
CWE-576 EJB Bad Practices: Use of Java I/O 0 Variant - Details The product violates the Enterprise JavaBeans (EJB) specification by using the java.io package.
CWE-577 EJB Bad Practices: Use of Sockets 0 Variant - Details The product violates the Enterprise JavaBeans (EJB) specification by using sockets.
CWE-578 EJB Bad Practices: Use of Class Loader 0 Variant - Details The product violates the Enterprise JavaBeans (EJB) specification by using the class loader.
CWE-579 J2EE Bad Practices: Non-serializable Object Stored in Session 0 Variant - Details The product stores a non-serializable object as an HttpSession attribute, which can hurt reliability.
CWE-580 clone() Method Without super.clone() 0 Variant - Details The product contains a clone() method that does not call super.clone() to obtain the new object.
CWE-581 Object Model Violation: Just One of Equals and Hashcode Defined 0 Variant - Details The product does not maintain equal hashcodes for equal objects.
CWE-582 Array Declared Public, Final, and Static 0 Variant - Details The product declares an array public, final, and static, which is not sufficient to prevent the array's contents from being modified.
CWE-583 finalize() Method Declared Public 0 Variant - Details The product violates secure coding principles for mobile code by declaring a finalize() method public.
CWE-584 Return Inside Finally Block 0 Base - Details The code has a return statement inside a finally block, which will cause any thrown exception in the try block to be discarded.
CWE-585 Empty Synchronized Block 0 Variant - Details The product contains an empty synchronized block.
CWE-586 Explicit Call to Finalize() 0 Base - Details The product makes an explicit call to the finalize() method from outside the finalizer.
CWE-589 Call to Non-ubiquitous API 0 Variant - Details The product uses an API function that does not exist on all versions of the target platform. This could cause portability problems or inconsistencies that allow denial of service or other consequences.
CWE-593 Authentication Bypass: OpenSSL CTX Object Modified after SSL Objects are Created 0 Variant - Details The product modifies the SSL context after connection creation has begun.