Browse cwe in implementation operation with official CWE context and Glexia analysis.
Search And Filters
Showing 5 of 5 CWE records.
The product stores, transfers, or shares a resource that contains sensitive information, but it does not properly remove that information before the product makes the resource available to unauthorized actors.
The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.
The code uses a variable that has not been initialized, leading to unpredictable or unintended results.
The product contains code that appears to be malicious in nature.
The product provides or relies on use of HTTP communications when HTTPS is available.
