CINXE.COM

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>cwe-research-list</title> <link rel="stylesheet" href="main.css" media="screen"> <link rel="alternate" title="cwe-research-list RSS" href="/cwe-research-list@mitre.org/maillist.xml" TYPE="application/rss+xml"> </head> <body id="thread"> <div id="msgcontainer"> <a id="mail-archive-logo" href="/"></a> <h1> <a href="info.html">cwe-research-list</a>   </h1> <form action="/search" method=get> <ul id="topLinks"> <li>Thread</li> <li><a href="maillist.html" title="Messages by Date" accesskey="i">Date</a></li> <li> <label> <input type=text name="q" value="" size=25> <input type="hidden" name="l" value="cwe-research-list@mitre.org"> <input type=submit value="Search"> </label> </li> <li> </li> <li> </li> </ul> </form> </div> <div id="msgcontainer2"> <div id="corner1"></div> <div id="corner2"></div> <div id="indexcontent"> <h2> Messages by Thread </h2> <ul class="msglink"> <li> <a name="00126" href="msg00126.html">[EXT] CWE-640 and use of security questions?</a> Jeffrey Walton <li> <a name="00125" href="msg00125.html">CWE REST API is now available!</a> Common Weakness Enumeration (CWE) <li> <a name="00124" href="msg00124.html">CWE Version 4.15 is now available!</a> Common Weakness Enumeration (CWE) <li> <a name="00122" href="msg00122.html">Microsoft committing to CWEs</a> Kurt Seifried <ul> <li> <a name="00123" href="msg00123.html">RE: Microsoft committing to CWEs</a> Connor Mullaly </li> </ul> </li> <li> <a name="00120" href="msg00120.html">CWE Version 4.14 is now available!</a> Common Weakness Enumeration (CWE) <li> <a name="00117" href="msg00117.html">CWE XML Problems</a> Kurt Seifried <ul> <li> <a name="00119" href="msg00119.html">RE: [EXT] CWE XML Problems</a> David B Rothenberg </li> <li> <a name="00118" href="msg00118.html">Re: [EXT] CWE XML Problems</a> Kurt Seifried </li> <li> <a name="00121" href="msg00121.html">RE: [EXT] Re: [EXT] CWE XML Problems</a> Steven M Christey </li> </ul> </li> <li> <a name="00107" href="msg00107.html">[EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper)</a> David A. Wheeler <ul> <li> <a name="00108" href="msg00108.html">Re: [EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper)</a> Andy Murren </li> <li> <a name="00110" href="msg00110.html">Re: [EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper)</a> Alec J Summers </li> <li> <a name="00111" href="msg00111.html">Re: [EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper)</a> Przemyslaw Roguski </li> <li> <a name="00112" href="msg00112.html">Re: [EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper)</a> David A. Wheeler </li> <li> <a name="00113" href="msg00113.html">Re: [EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper)</a> Hatfield, Arthur </li> <li> <a name="00114" href="msg00114.html">Re: [EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper)</a> David A. Wheeler </li> <li> <a name="00115" href="msg00115.html">Re: [EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper)</a> Kurt Seifried </li> <li> <a name="00116" href="msg00116.html">Re: [EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper)</a> David A. Wheeler </li> <li> <a name="00109" href="msg00109.html">Re: [EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper)</a> Kurt Seifried </li> </ul> </li> <li> <a name="00096" href="msg00096.html">[EXT] RE: Request for CWE: Improper Licensing (UNCLASSIFIED)</a> Hood, Jonathan W CTR USARMY DEVCOM AVMC (USA) <ul> <li> <a name="00097" href="msg00097.html">RE: Request for CWE: Improper Licensing (UNCLASSIFIED)</a> Steven M Christey </li> <li> <a name="00098" href="msg00098.html">[EXT] Re: Request for CWE: Improper Licensing (UNCLASSIFIED)</a> Kurt Seifried </li> <li> <a name="00099" href="msg00099.html">[EXT] Re: Request for CWE: Improper Licensing (UNCLASSIFIED)</a> Przemyslaw Roguski </li> <li> <a name="00100" href="msg00100.html">[EXT] RE: [Non-DoD Source] Re: Request for CWE: Improper Licensing (UNCLASSIFIED)</a> Hood, Jonathan W CTR USARMY DEVCOM AVMC (USA) </li> <li> <a name="00101" href="msg00101.html">[EXT] Re: [Non-DoD Source] Re: Request for CWE: Improper Licensing (UNCLASSIFIED)</a> Hatfield, Arthur </li> <li> <a name="00102" href="msg00102.html">[EXT] RE: [Non-DoD Source] Re: Request for CWE: Improper Licensing (UNCLASSIFIED)</a> Hood, Jonathan W CTR USARMY DEVCOM AVMC (USA) </li> <li> <a name="00103" href="msg00103.html">Re: [EXT] RE: [Non-DoD Source] Re: Request for CWE: Improper Licensing (UNCLASSIFIED)</a> Przemyslaw Roguski </li> <li> <a name="00104" href="msg00104.html">Re: [EXT] RE: [Non-DoD Source] Re: Request for CWE: Improper Licensing (UNCLASSIFIED)</a> Hatfield, Arthur </li> <li> <a name="00105" href="msg00105.html">Re: [EXT] RE: [Non-DoD Source] Re: Request for CWE: Improper Licensing (UNCLASSIFIED)</a> Kurt Seifried </li> <li> <a name="00106" href="msg00106.html">RE: [EXT] RE: [Non-DoD Source] Re: Request for CWE: Improper Licensing (UNCLASSIFIED)</a> Steven M Christey </li> </ul> </li> <li> <a name="00095" href="msg00095.html"> 15 “stubborn” CWEs that have appeared in every “CWE Top 25” list since 2019 with potential mitigations</a> Common Weakness Enumeration (CWE) <li> <a name="00094" href="msg00094.html">CWE Top 25 Weaknesses Trends from 2019 through 2023 now available!</a> Common Weakness Enumeration (CWE) <li> <a name="00093" href="msg00093.html">[EXT] HW CWE introduction slides</a> Mohan Lal <li> <a name="00092" href="msg00092.html">[EXT] Fwd: 2023 CWE Top 25 “On the Cusp” list now available!</a> Jeffrey Walton <li> <a name="00091" href="msg00091.html"> 2023 CWE Top 25 “On the Cusp” list now available!</a> Common Weakness Enumeration (CWE) <li> <a name="00089" href="msg00089.html">CWE-295, Improper Certificate Validation, and sample code</a> Jeffrey Walton <li> <a name="00088" href="msg00088.html">CWE Version 4.11 is Now Available!</a> Common Weakness Enumeration (CWE) <ul> <li> <a name="00090" href="msg00090.html"> “2023 CWE Top 25” & CWE Version 4.12 are now available!</a> Common Weakness Enumeration (CWE) </li> </ul> </li> <li> <a name="00087" href="msg00087.html">CWE Version 4.10 is Now Available!</a> Common Weakness Enumeration (CWE) <li> <a name="00085" href="msg00085.html">CWE/CAPEC definitions update</a> Alec J Summers <ul> <li> <a name="00086" href="msg00086.html">Re: CWE/CAPEC definitions update</a> Kurt Seifried </li> </ul> </li> <li> <a name="00062" href="msg00062.html">CWE/CAPEC Definitions</a> Alec J Summers <ul> <li> <a name="00063" href="msg00063.html">Re: CWE/CAPEC Definitions</a> SJ Jazz </li> <li> <a name="00064" href="msg00064.html">Re: CWE/CAPEC Definitions</a> Kurt Seifried </li> <li> <a name="00065" href="msg00065.html">Re: CWE/CAPEC Definitions</a> Joe Baum </li> <li> <a name="00066" href="msg00066.html">RE: CWE/CAPEC Definitions</a> James Pangburn </li> <li> <a name="00067" href="msg00067.html">RE: CWE/CAPEC Definitions</a> Schweiger, Andreas Dr. </li> <li> <a name="00068" href="msg00068.html">RE: CWE/CAPEC Definitions</a> Paul.Wortman </li> <li> <a name="00074" href="msg00074.html">RE: [External] - RE: CWE/CAPEC Definitions</a> Paul Anderson </li> <li> <a name="00069" href="msg00069.html">RE: CWE/CAPEC Definitions</a> Paul Wooderson </li> <li> <a name="00070" href="msg00070.html">Re: CWE/CAPEC Definitions</a> SJ Jazz </li> <li> <a name="00071" href="msg00071.html">Re: CWE/CAPEC Definitions</a> Landfield, Kent </li> <li> <a name="00072" href="msg00072.html">Re: CWE/CAPEC Definitions</a> nazar.abdul </li> <li> <a name="00073" href="msg00073.html">RE: CWE/CAPEC Definitions</a> Rob Wissmann </li> <li> <a name="00075" href="msg00075.html">Re: CWE/CAPEC Definitions</a> SJ Jazz </li> <li> <a name="00076" href="msg00076.html">RE: CWE/CAPEC Definitions</a> Rob Wissmann </li> <li> <a name="00077" href="msg00077.html">Re: CWE/CAPEC Definitions</a> Hatfield, Arthur </li> <li> <a name="00078" href="msg00078.html">Re: CWE/CAPEC Definitions</a> Hatfield, Arthur </li> <li> <a name="00079" href="msg00079.html">Re: CWE/CAPEC Definitions</a> SJ Jazz </li> <li> <a name="00080" href="msg00080.html">Re: CWE/CAPEC Definitions</a> David A. Wheeler </li> <li> <a name="00081" href="msg00081.html">RE: CWE/CAPEC Definitions</a> Steven M Christey </li> <li> <a name="00082" href="msg00082.html">RE: CWE/CAPEC Definitions</a> Rob Wissmann </li> <li> <a name="00083" href="msg00083.html">Re: CWE/CAPEC Definitions</a> Kurt Seifried </li> <li> <a name="00084" href="msg00084.html">FW: CWE/CAPEC Definitions</a> Alec J Summers </li> </ul> </li> <li> <a name="00054" href="msg00054.html">Is there a CWE for this?</a> Kurt Seifried <ul> <li> <a name="00055" href="msg00055.html">RE: [Non-DoD Source] Is there a CWE for this?</a> Hood, Jonathan W CTR USARMY DEVCOM AVMC (USA) </li> <li> <a name="00056" href="msg00056.html">Re: [Non-DoD Source] Is there a CWE for this?</a> Kurt Seifried </li> <li> <a name="00057" href="msg00057.html">RE: [Non-DoD Source] Is there a CWE for this?</a> Steven M Christey </li> <li> <a name="00058" href="msg00058.html">Re: [Non-DoD Source] Is there a CWE for this?</a> Kurt Seifried </li> <li> <a name="00059" href="msg00059.html">RE: [Non-DoD Source] Is there a CWE for this?</a> Rob Wissmann </li> <li> <a name="00060" href="msg00060.html">Re: [Non-DoD Source] Is there a CWE for this?</a> Kurt Seifried </li> <li> <a name="00061" href="msg00061.html">RE: [Non-DoD Source] Is there a CWE for this?</a> Steven M Christey </li> </ul> </li> <li> <a name="00049" href="msg00049.html">CWE 2022 Top 25 Now Available</a> Rushi B Purohit <li> <a name="00048" href="msg00048.html">CWE-653 name</a> Rob Wissmann <ul> <li> <a name="00050" href="msg00050.html">Re: CWE-653 name</a> Kurt Seifried </li> <li> <a name="00051" href="msg00051.html">Re: CWE-653 name</a> David A. Wheeler </li> <li> <a name="00052" href="msg00052.html">Re: CWE-653 name</a> Yacouba Bamba </li> <li> <a name="00053" href="msg00053.html">Re: CWE-653 name</a> Yacouba Bamba </li> </ul> </li> <li> <a name="00047" href="msg00047.html">Request for Feedback: Modifications to CWE-113 (HTTP Response Splitting) and CWE-444 (HTTP Response Smuggling)</a> Steven M Christey <li> <a name="00034" href="msg00034.html">Bad loop construct</a> Steve Grubb <ul> <li> <a name="00035" href="msg00035.html">Re: Bad loop construct</a> Kurt Seifried </li> <li> <a name="00036" href="msg00036.html">Re: Bad loop construct</a> Steve Grubb </li> <li> <a name="00037" href="msg00037.html">Re: Bad loop construct</a> Kurt Seifried </li> <li> <a name="00038" href="msg00038.html">RE: Bad loop construct</a> Steven M Christey </li> <li> <a name="00039" href="msg00039.html">Re: [External] - RE: Bad loop construct</a> Kevin Keen </li> <li> <a name="00040" href="msg00040.html">Re: [External] - RE: Bad loop construct</a> David A. Wheeler </li> <li> <a name="00041" href="msg00041.html">Re: Bad loop construct</a> Steve Grubb </li> <li> <a name="00042" href="msg00042.html">Re: Bad loop construct</a> Kurt Seifried </li> <li> <a name="00043" href="msg00043.html">Re: [External] - Re: Bad loop construct</a> Kevin Keen </li> <li> <a name="00044" href="msg00044.html">Re: [External] - Re: Bad loop construct</a> llianghan </li> <li> <a name="00045" href="msg00045.html">RE: [EXTERNAL]: Re: [External] - Re: Bad loop construct</a> Mahidhara, Shravan </li> <li> <a name="00046" href="msg00046.html">RE: [EXTERNAL]: Re: [External] - Re: Bad loop construct</a> Kevin Hale </li> </ul> </li> <li> <a name="00033" href="msg00033.html">CWE 4.7 Now Available!</a> Alec J Summers <li> <a name="00032" href="msg00032.html">Recommendation: Deprecate CWE-365: Race Condition in Switch</a> Steve Battista <li> <a name="00031" href="msg00031.html">CWE/CAPEC REST API Working Group</a> Alec J Summers <li> <a name="00028" href="msg00028.html">New CWE for DNS domain normalization/canonicalization with trailing dot</a> Kurt Seifried <ul> <li> <a name="00029" href="msg00029.html">RE: New CWE for DNS domain normalization/canonicalization with trailing dot</a> Steven M Christey </li> <li> <a name="00030" href="msg00030.html">Re: New CWE for DNS domain normalization/canonicalization with trailing dot</a> Kurt Seifried </li> </ul> </li> <li> <a name="00027" href="msg00027.html">Additional case for CWE-1007 - needs another CWE?</a> Kurt Seifried <li> <a name="00018" href="msg00018.html">Time to retire CWE-262 and CWE-263</a> Kurt Seifried <ul> <li> <a name="00019" href="msg00019.html">RE: Time to retire CWE-262 and CWE-263</a> Steven M Christey </li> <li> <a name="00020" href="msg00020.html">RE: Time to retire CWE-262 and CWE-263</a> Chris Eng </li> <li> <a name="00023" href="msg00023.html">Re: Time to retire CWE-262 and CWE-263</a> G. Ann Campbell </li> <li> <a name="00021" href="msg00021.html">RE: Time to retire CWE-262 and CWE-263</a> Larry Shields </li> <li> <a name="00024" href="msg00024.html">Re: Time to retire CWE-262 and CWE-263</a> Kurt Seifried </li> <li> <a name="00025" href="msg00025.html">Re: Time to retire CWE-262 and CWE-263</a> Jeffrey Walton </li> <li> <a name="00026" href="msg00026.html">Re: Time to retire CWE-262 and CWE-263</a> Jason Dryhurst-Smith </li> <li> <a name="00022" href="msg00022.html">Re: Time to retire CWE-262 and CWE-263</a> Jeffrey Walton </li> </ul> </li> <li> <a name="00015" href="msg00015.html">CWE Clarification: CWE-1007 and Homoglphys in Source Code</a> Hood, Jonathan W CTR USARMY DEVCOM AVMC (USA) <ul> <li> <a name="00016" href="msg00016.html">RE: CWE Clarification: CWE-1007 and Homoglphys in Source Code</a> Steven M Christey </li> <li> <a name="00017" href="msg00017.html">Re: CWE Clarification: CWE-1007 and Homoglphys in Source Code</a> Wojtek Andrijew </li> </ul> </li> <li> <a name="00008" href="msg00008.html">CWE 129 - Example 3</a> John Thomas <li> <a name="00002" href="msg00002.html">Cross-configuration attacks</a> Jeffrey Walton <ul> <li> <a name="00003" href="msg00003.html">Re: Cross-configuration attacks</a> Kurt Seifried </li> <li> <a name="00004" href="msg00004.html">RE: Cross-configuration attacks</a> Steven M Christey </li> <li> <a name="00005" href="msg00005.html">Re: Cross-configuration attacks</a> SebastianGanson </li> <li> <a name="00007" href="msg00007.html">Re: Cross-configuration attacks</a> Steve Battista </li> <li> <a name="00009" href="msg00009.html">RE: Cross-configuration attacks</a> Steven M Christey </li> <li> <a name="00011" href="msg00011.html">Re: Cross-configuration attacks</a> Kurt Seifried </li> <li> <a name="00013" href="msg00013.html">Re: Cross-configuration attacks</a> Kerry Crouse </li> <li> <a name="00014" href="msg00014.html">[EXT] Re: Cross-configuration attacks</a> Fredrick Omeniho </li> <li> <a name="00006" href="msg00006.html">RE: Cross-configuration attacks</a> John Thomas </li> <li> <a name="00010" href="msg00010.html">RE: Cross-configuration attacks</a> Paul.Wortman </li> <li> <a name="00012" href="msg00012.html">RE: Cross-configuration attacks</a> Kanuparthi, Arun </li> </ul> </li> <li> <a name="00001" href="msg00001.html">CWE-499 Java Questions (UNCLASSIFIED)</a> Hood, Jonathan W CTR USARMY DEVCOM AVMC (USA) <li> <a name="00000" href="msg00000.html">The 2021 CWE Top 25 is now available!</a> Alec J Summers </ul> <ul id="botLinks"> <li> </li> <li> </li> </ul> </div> </div>  <div id="extraDiv1"></div><div id="extraDiv2"></div><div id="extraDiv3"></div> <div id="extraDiv4"></div><div id="extraDiv5"></div><div id="extraDiv6"></div> </body> </html>