| CWE-1094 |
The software contains an index range scan for a large data table,
but the scan can cover a large number of rows. |
| CWE-1095 |
The software uses a loop with a control flow condition based on
a value that is updated within the body of the loop. |
| CWE-1096 |
The software implements a Singleton design pattern but does not use appropriate locking or other synchronization mechanism to ensure that the singleton class is only instantiated once. |
| CWE-1097 |
The software uses a storable data element that does not have
all of the associated functions or methods that are necessary to support
comparison. |
| CWE-1098 |
The code contains a data element with a pointer that does not have an associated copy or constructor method. |
| CWE-1099 |
The product's code, documentation, or other artifacts do not
consistently use the same naming conventions for variables, callables, groups of
related callables, I/O capabilities, data types, file names, or similar types of
elements. |
| CWE-11 |
Debugging messages help attackers learn about the system and plan a form of attack. |
| CWE-110 |
Validation fields that do not appear in forms they are associated with indicate that the validation logic is out of date. |
| CWE-1100 |
The product or code does not isolate system-dependent
functionality into separate standalone modules. |
| CWE-1101 |
The product uses automatically-generated code that cannot be
executed without a specific runtime support component. |
