Q
Detector Library
C++ detectors (35/35)
Disabled HTML autoescapeWeak pseudorandom number generationMissing Default in SwitchUnsafe File ExtensionIncorrect Order Of setuid and setgidOut Of Bounds ReadOut Of Bounds WriteThread safety violationIncorrect Pointer SubtractionFile System AccessInsecure Buffer AccessIncorrect Use of SizeofIncorrect Pointer ScalingLoose File PermissionsSensitive information leakMissing AuthorizationReturn Stack AddressOS Command InjectionUse After FreeIncorrect Comparisonoff by one errorPath traversalInsecure temporary file or directoryInsecure CryptographyInsecure connection using unencrypted protocolUnchecked Null DereferenceSQL injectionMissing check on method outputImproper Restriction on Memory BufferMultiple LocksImproper Input ValidationNull Pointer DereferenceUse Of Redundant CodeImproper Certificate ValidationImproper Authentication
Tag: cryptography
Weak pseudorandom number generation
Insufficiently random generators (or hardcoded seeds) can make pseudorandom sequences predictable.
Insecure Cryptography
Use of insecure cryptography.
Insecure connection using unencrypted protocol
Connections that use insecure protocols transmit data in cleartext, which can leak sensitive information.