Abstract Classes should be non copy-assignable

---

CRITICAL  A Class that has pointer data members must provide a copy Constructor

---

CRITICAL  Action Artifacts should not directly call a JSP page

---

CRITICAL  Action Artifacts should not directly use database objects

---

Action Classes should have only one public method

---

Action Classes should only be called by Action Mappings tag (for Struts 1.x) or Action tag (for Struts 2.x)

---

Action Classes should only call Business Classes

---

All ALLOCATE statements in Fortran-90 Functions must use the return code STAT (Fortran)

---

All ALLOCATE statements in Fortran-90 Modules must use the return code STAT (Fortran)

---

All ALLOCATE statements in Fortran-90 Programs must use the return code STAT (Fortran)

---

All ALLOCATE statements in Fortran-90 Subroutines must use the return code STAT (Fortran)

---

All constructors that are callable with a single argument of fundamental type shall be declared explicit.

---

Allow only HTTPS communication

---

All Read and Write statements in Functions must use the return code IOSTAT (Fortran)

---

All Read and Write statements in Modules must use the return code IOSTAT (Fortran)

---

All Read and Write statements in Programs must use the return code IOSTAT (Fortran)

---

All Read and Write statements in Subroutines must use the return code IOSTAT (Fortran)

---

All traffic to particular domains should use HTTPS

---

All types of a serializable class must be serializable

---

All types of a serializable Class must be serializable

---

Always activate unlockedDeviceRequired to avoid data decryption when device is unlocked

---

Always avoid http redirects to unknown or untrusted URLs

---

Always check all the BiometricPrompt acquired options in the onAuthenticationSucceeded method

---

Always check all the BiometricPrompt error options in the onAuthenticationError method

---

Always check the device supports Biometric capability before using BiometricPrompt API

---

CRITICAL  Always define column names when inserting values

---

CRITICAL  Always enable authorization checks at function level for functions called on by APIs

---

CRITICAL  Always enabled validateRequest in ASPX page

---

Always enable HttpOnly for cookies in Config file

---

Always enable RequireSSL attribute for cookies in Config file (ASP.NET)

---

Always enable validation input when doing ASP.NET Http Post/Put Request

---

Always handle errors when using ajax with RxJS

---

Always implement done, fail and/or always callbacks for $.ajax calls when using jQuery 3.0 (and latest)

---

CRITICAL  Always implement readObject() to prevent untrusted deserialization when loading from ObjectInputStream

---

CRITICAL  Always implement the success/error/complete or done/fail/always callbacks when using jQuery ajax call

---

Always manage the BiometricPrompt onAuthenticationFailed method

---

Always mark Windows Forms starting point as STAThread

---

Always pass optional parameters too, when making 'base' calls

---

CRITICAL  Always protect against CSRF in FastAPI application

---

CRITICAL  Always protect against CSRF in Flask application

---

Always provide deserialization methods for optional fields

---

Always provide error callbacks when subscribing to HttpClient observables

---

Always Revert After Impersonation

---

Always unsubscribe events in Angular onDestroy method

---

Always use ConfigureAwait(false) in library code awaited tasks

---

CRITICAL  Always use HTTPS Redirection Middleware and HSTS Middleware in your ASP.NET Core application

---

Always use JSON.parse & JSON.stringify with try/catch block (Javascript)

---

Always use JSON.parse & JSON.stringify with try/catch block (TypeScript)

---

Always use LAContext canEvaluatePolicy: before using evaluatePolicy:

---

Always use LAContext canEvaluatePolicy: before using evaluatePolicy:

---

Always use LAContext canEvaluatePolicy before using evaluatePolicy (Swift)

---

Always use onActivityResult to pass the login results when using Facebook SDK

---

Always use System.Uri instead of string to build URLs

---

CRITICAL  Always validate user input with Request variables

---

A permission is required for securing Activities

---

A permission is required for securing Receivers

---

A permission is required for securing Services

---

Apply signature-based permissions

---

Architecture Check: CACEIS:Avoid deprecated programs (Error)

---

Architecture Check: CACEIS:Avoid deprecated programs (Warning)

---

Architecture Check: Clarity Allowed

---

Architecture Check: Database Access Validation Architecture Model

---

A Read permission is required to read data of Content Provider

---

Arguments to a function-like macro shall not contain tokens that look like preprocessing directives.

---

Assignment operator should assign all non-static members of the target object

---

Authorization check should be done before calling a transaction

---

CRITICAL  Avoid accessing SAP standard Tables in modification from custom code

---

Avoid Action artifacts that call packages that reference database

---

CRITICAL  Avoid Action Mapping based on wildcards with Struts 2.3.14.2 and older versions

---

CRITICAL  Avoid action mappings validator turned off

---

CRITICAL  Avoid addEventListener containing hard coded strings (Flex)

---

CRITICAL  Avoid adding or removing displayable children from updateDisplayList (Flex specific) (Flex)

---

CRITICAL  Avoid AE Schema with Target namespace not defined (TIBCO BW)

---

Avoid allowing File IO unrestricted access

---

CRITICAL  Avoid * and use strongly typed objects instead in fields (Flex)

---

CRITICAL  Avoid * and use strongly typed objects instead in variables (Flex)

---

Avoid any non-static data members not initialized in constructor

---

CRITICAL  Avoid ArrayElementType metadata not specified for the array-type field (Flex)

---

Avoid artifacts having db.collection.ensureIndex() to create new indexes

---

Avoid artifacts having Incorrect Type Conversion or Cast

---

Avoid Avoid Cookie Misconfiguration (PHP)

---

CRITICAL  Avoid BindingUtils class that uses hard coded strings (Flex)

---

Avoid blocking async methods (.NET, VB)

---

CRITICAL  Avoid Buffer Overruns when using ADD, SUBTRACT, MULTIPLY, DIVIDE & COMPUTE statement inside a loop

---

Avoid bypassing angular security trust

---

Avoid bypassing self-signed ssl certificate (Node.js)

---

CRITICAL  Avoid bypassing self-signed ssl certificate with Node.js (TypeScript)

---

CRITICAL  Avoid CairngormEventDispatcher called explicitly (Flex)

---

CRITICAL  Avoid calling Alert.show directly (Flex)

---

Avoid calling blocking functions with an infinite timeout

---

CRITICAL  Avoid calling callLater explicitly (Flex specific) (Flex)

---

CRITICAL  Avoid calling CoSetProxyBlanket and CoInitializeSecurity

---

Avoid calling database commands directly using system functions as "C_DB_EXECUTE" and "C_DB_FUNCTION"

---

Avoid calling finalize()

---

Avoid calling programs statically

---

CRITICAL  Avoid Calling RFC Function Module without Authorization Check

---

CRITICAL  Avoid calling system function (CALL 'cfunc') BETA

---

CRITICAL  Avoid calling unsafe C library functions from COBOL

---

Avoid calls between JSP Pages

---

CRITICAL  Avoid calls to the StyleManager that do not pass FALSE as the second parameter (Flex)

---

Avoid catch-all except blocks with empty handlers

---

Avoid 'catch-all' statement

---

Avoid catch blocks with assertion

---

Avoid catching an exception of type Exception (C# .Net)

---

Avoid catching an exception of type Exception, RuntimeException, or Throwable

---

Avoid catching an exception of type Exception, RuntimeException, or Throwable (JEE)

---

CRITICAL  Avoid ChangeWatcher class that uses hard coded strings to specify the attribute name, to listen to. Prefer listening to events or setters (Flex)

---

Avoid changing parent properties from child components using $parent

---

CRITICAL  Avoid checking Integer overflow without explicit cast

---

Avoid circular references between header files

---

CRITICAL  Avoid classes exceeding maximum length (PHP)

---

CRITICAL  Avoid Classes using "new" to allocate Instances but not defining a copy Constructor

---

Avoid Classes with a copy Constructor and the default Destructor or assignment operator

---

Avoid Classes with a High Public Data Ratio

---

Avoid Classes with a High Public Data Ratio (C++)

---

Avoid Classes with a High Public Data Ratio (C# .Net)

---

Avoid Classes with a High Public Data Ratio (JEE)

---

Avoid Classes with a High Public Data Ratio (PowerBuilder)

---

Avoid Classes with a High Public Data Ratio (Visual Basic)

---

Avoid Classes with an assignment operator and the default Destructor or assignment operator

---

Avoid Classes with a non-empty Destructor and the default assignment operator or copy Constructor

---

CRITICAL  Avoid classes with misplaced metadata (Flex)

---

CRITICAL  Avoid classes with unknown metadata attribute (Flex)

---

Avoid client provided dictionaries to have high request sizes

---

CRITICAL  Avoid clone event not overiden in a custom event (Flex)

---

CRITICAL  Avoid code injection

---

CRITICAL  Avoid code injection (PHP)

---

CRITICAL  Avoid code injection through API requests

---

CRITICAL  Avoid comparing passwords against hard-coded strings

---

Avoid comparing types of different widths in a loop

---

Avoid Constructors not supplying an initial value for all non-static data members

---

CRITICAL  Avoid constructor with a return type (Flex)

---

CRITICAL  Avoid control statement in Constructor (must be as lightweight as possible) (Flex)

---

CRITICAL  Avoid cookie injection

---

CRITICAL  Avoid cookie injection (PHP)

---

CRITICAL  Avoid cookie poisoning

---

CRITICAL  Avoid copying needless the variables (PHP)

---

CRITICAL  Avoid creating application cookie without SameSite option (PHP)

---

Avoid creating cookies without enabling httponly attribute

---

Avoid creating cookie without setting httpOnly option

---

Avoid creating cookie without setting httpOnly option (Javascript)

---

CRITICAL  Avoid creating cookie without setting httpOnly option (PHP)

---

CRITICAL  Avoid creating cookie without setting httpOnly option (TypeScript)

---

CRITICAL  Avoid creating cookie without setting SameSite option (JEE)

---

CRITICAL  Avoid creating cookie with overly broad domain (AngularJS)

---

Avoid creating cookie with overly broad domain (Node.js)

---

CRITICAL  Avoid creating cookie with overly broad domain (Vue.js)

---

CRITICAL  Avoid creating cookie with overly broad path (AngularJS)

---

Avoid creating cookie with overly broad path (C#)

---

Avoid creating cookie with overly broad path (Javascript)

---

Avoid creating cookie with overly broad path (JEE)

---

Avoid creating cookie with overly broad path (Node.js)

---

CRITICAL  Avoid creating cookie with overly broad path (TypeScript)

---

CRITICAL  Avoid creating cookie with overly broad path (Vue.js)

---

Avoid creating file without protection

---

Avoid creating file without protection

---

Avoid creating file without protection (Swift)

---

CRITICAL  Avoid creating unsecured HTTPS GET metadata endpoint in code

---

CRITICAL  Avoid creating unsecured HTTPS GET metadata endpoint in configuration

---

CRITICAL  Avoid creation of temporary file with insecure permissions (JEE)

---

Avoid Cross-Client Database Access using Open SQL statements with CLIENT SPECIFIED/USING CLIENT addition

---

CRITICAL  Avoid cross-site scripting DOM vulnerabilities ( CWE-79 )

---

CRITICAL  Avoid Cross-Site Scripting (Persistent)

---

CRITICAL  Avoid cross-site scripting (persistent) (PHP)

---

CRITICAL  Avoid cross-site scripting (persistent) (Python)

---

Avoid cross site scripting (single quoted attribute) (PHP)

---

CRITICAL  Avoid cross-site scripting through API requests

---

CRITICAL  Avoid cross-site scripting within events such as onclick, onmouseover ... events (Razor)

---

Avoid custom code with OSS notes

---

CRITICAL  Avoid cyclical calls and inheritances between namespaces content

---

CRITICAL  Avoid cyclical calls and inheritances between packages

---

Avoid cyclic calls between Event and its handled Method

---

Avoid cyclic references in the definition of CDS views (S4/HAHA)

---

CRITICAL  Avoid dangerous file inclusion

---

CRITICAL  Avoid dangerous file inclusion (JSTL) (Javascript/HTML5)

---

CRITICAL  Avoid dangerous File Upload

---

Avoid database tables associated to more than one Entity

---

Avoid data fields binded to columns to return sensitive data via APIs

---

CRITICAL  Avoid data filter injection

---

CRITICAL  Avoid data filter injection through API requests

---

Avoid data members that are not private

---

Avoid Datawindows accessing Database Procedures or Functions

---

Avoid Datawindows accessing Database Tables (PowerBuilder)

---

Avoid Datawindows that does not access a database data

---

Avoid debug binaries that include detailed debug information

---

Avoid debug code in the production system (PHP)

---

Avoid debug forging

---

Avoid debug forging through API requests

---

Avoid declaring Final Instance Variables that are not dynamically initialized

---

Avoid declaring Inner Classes

---

Avoid declaring Instance Variables without defined access type

---

Avoid declaring Non Final Class Variables with Public or Package access type

---

CRITICAL  Avoid declaring null arrays; prefer to set to empty (EGL)

---

CRITICAL  Avoid declaring public Fields

---

Avoid declaring throwing an exception and not throwing it

---

Avoid Default exclude patterns (excludeParams) in Apache Struts 2.3.20

---

Avoid #define or #undef macros anywhere other than global namespace

---

Avoid defining, redefining or undefining standard macros from standard library

---

Avoid delete operators to exit with an exception.

---

CRITICAL  Avoid deserialization injection

---

CRITICAL  Avoid deserialization injection (PHP)

---

CRITICAL  Avoid deserialization injection through API requests

---

Avoid direct access to database Procedures/Functions (JSP)

---

Avoid direct access to Database Tables

---

CRITICAL  Avoid direct access to database Tables (ASP)

---

CRITICAL  Avoid direct access to Database Tables (C# .Net)

---

Avoid direct access to Database Tables in Javascript

---

CRITICAL  Avoid direct access to database Tables (JSP)

---

Avoid direct Class inheritance from java.lang.Throwable

---

Avoid direct definition of JavaScript Functions in a Web page

---

Avoid direct definition of JavaScript Functions in a Web page (Javascript/HTML5)

---

CRITICAL  Avoid directly instantiating a Class used as a Spring bean

---

CRITICAL  Avoid direct usage of database tables (C++)

---

CRITICAL  Avoid direct usage of database Tables (C Lang.)

---

CRITICAL  Avoid Direct usage of database Tables (Visual Basic)

---

Avoid direct usage of EJB Entity from the client

---

Avoid direct use of database objects (ASP - JavaScript)

---

Avoid direct use of Database objects (JSP/ASP)

---

Avoid disabling authentication mode messages when using MSMQ transport security

---

Avoid disabling certificate check when requesting secured urls

---

CRITICAL  Avoid disabling CSRF Protection in fastapi_jwt_auth

---

Avoid disabling custom errors mode to prevent exposure of exceptions and error data

---

Avoid disabling EnableViewStateMac in ASPX page

---

CRITICAL  Avoid disabling EnableViewStateMac in Config file

---

Avoid disabling Header Checking flag in config file

---

CRITICAL  Avoid disabling HMAC signature verification (C#)

---

CRITICAL  Avoid disabling OR not defining encryption behavior for encryption when connecting with Database

---

Avoid disabling source code inspection

---

Avoid disabling SSL verification in node-curl

---

CRITICAL  Avoid disabling SSL verification in node-curl (TypeScript)

---

Avoid disabling Strict Contextual Escaping (SCE) when created

---

CRITICAL  Avoid disabling the automatic HTML escaping for Spring

---

CRITICAL  Avoid disabling the expiration time requirement of a JWT token

---

CRITICAL  Avoid disabling the expiration time validation of a JWT token

---

CRITICAL  Avoid disabling the signature requirement of a JWT token

---

CRITICAL  Avoid disabling the XSRF/CSRF Protection (ASP.NET Core MVC)

---

Avoid disabling ValidateInput on controller

---

CRITICAL  Avoid disabling ValidateRequest in Config file

---

Avoid disabling withCredentials option for the httpProvider

---

Avoid disabling xsrf check in HttpClientXsrfModule

---

CRITICAL  Avoid DispatchEvent function not dispatching constant strings (Flex)

---

Avoid DISPLAY ... UPON CONSOLE

---

CRITICAL  Avoid double checked locking

---

Avoid Duplicate Struts validation forms with the same name

---

CRITICAL  Avoid dynamic class (Flex)

---

CRITICAL  Avoid dynamic code injection in WKWebView (Swift)

---

CRITICAL  Avoid Dynamic Function/Method call without Authorization Check

---

Avoid EJBs using 'synchronized' qualifier, 'wait', 'notify' and 'notifyAll' Methods

---

CRITICAL  Avoid empty catch blocks

---

CRITICAL  Avoid empty catch blocks

---

CRITICAL  Avoid empty catch blocks

---

CRITICAL  Avoid empty CATCH blocks (ABAP)

---

CRITICAL  Avoid empty catch blocks (C# .Net)

---

Avoid empty catch blocks for methods with high fan-in

---

CRITICAL  Avoid empty catch blocks (JEE)

---

CRITICAL  Avoid empty catch blocks (PHP)

---

CRITICAL  Avoid empty catch statement (Flex)

---

Avoid empty componentDidCatch blocks

---

Avoid empty componentDidCatch blocks (Typescript)

---

Avoid empty finally block

---

Avoid empty finally block

---

Avoid empty finally blocks

---

Avoid empty finally blocks (C# .Net)

---

Avoid empty finally blocks (JEE)

---

Avoid Empty Finally Block When Calling Resource

---

CRITICAL  Avoid empty generic catch blocks (Swift)

---

CRITICAL  Avoid empty IF-ENDIF blocks

---

CRITICAL  Avoid empty jQuery ajax error/fail blocks

---

Avoid enabling autocomplete "on" for inputs/forms

---

Avoid enabling dangerous protocols in whitelist APIs

---

CRITICAL  Avoid enabling unsecure Node.js (TypeScript)

---

CRITICAL  Avoid eval injection (PHP)

---

CRITICAL  Avoid event dispatched in a constructor (Flex)

---

Avoid exposing methods that use Platform Invocation Services to access unmanaged code

---

CRITICAL  Avoid expression language injection

---

CRITICAL  Avoid expression language injection through API requests

---

CRITICAL  Avoid external control of system or configuration setting

---

CRITICAL  Avoid external control of system or configuration setting through API requests

---

CRITICAL  Avoid Fields in Action Classes that are not final static

---

CRITICAL  Avoid Fields in Servlet Classes that are not final static

---

CRITICAL  Avoid file path manipulation (PHP)

---

CRITICAL  Avoid file path manipulation (Python)

---

CRITICAL  Avoid file path manipulation vulnerabilities ( CWE-73 )

---

CRITICAL  Avoid file path manipulation vulnerabilities through API requests

---

Avoid files that declare both symbols and execute logic with side effects (PHP)

---

Avoid filtering sensitive data using front-end

---

CRITICAL  Avoid Form Field without Validator

---

CRITICAL  Avoid Function and Procedures using Builtin Function "String" (PL1)

---

Avoid Functions and Procedures doing an Insert, Update or Delete without managing a transaction

---

Avoid Functions and Procedures doing an Insert, Update or Delete without managing a transaction (SQL)

---

Avoid Functions and Procedures having a SELECT without the default OTHERWISE clause (PL1)

---

Avoid Functions and Procedures having subscripts used in arrays or in do loops and not declared as BINARY FIXED(31) (PL1)

---

Avoid Functions and Procedures not having variable declared on a separate line (PL1)

---

Avoid Functions and Procedures not testing the SQLCODE return code after each SQL statement (PL1)

---

CRITICAL  Avoid Functions and Procedures not using the REORDER option (PL1)

---

Avoid Functions and Procedures using BIN FIXED(15) instead of BIN FIXED(31) for all local variables (PL1)

---

CRITICAL  Avoid Functions and Procedures using BLKSIZE or RECSIZE (PL1)

---

Avoid Functions and Procedures with DB2 SQL containing "UNION" clause without "ALL" option (PL1)

---

Avoid Functions and Procedures with "OR" logical operator in DB2 queries and in cursor definitions (PL1)

---

CRITICAL  Avoid functions having the optional parameters before the others (PHP)

---

CRITICAL  Avoid Functions throwing exceptions and not having a @Throws tag (PHP)

---

Avoid functions without returning exit code (Shell)

---

CRITICAL  Avoid generating key with insufficient random generator in cookies

---

Avoid getter functions of computed properties that do not return any value

---

CRITICAL  Avoid globally bindable classes. (Flex)

---

CRITICAL  Avoid hard-coded JWT secret keys

---

CRITICAL  Avoid hardcoded network resource names

---

Avoid hardcoded network resource names

---

Avoid hardcoded network resource names in Javascript

---

CRITICAL  Avoid hardcoded network resource names (Kotlin)

---

Avoid hardcoded network resource names (.NET, VB)

---

Avoid hard-coded network resource names (Swift)

---

Avoid hardcoded network resource names (Typescript)

---

CRITICAL  Avoid hard-coded password in connection string

---

Avoid hardcoded passwords

---

CRITICAL  Avoid hardcoded passwords and credentials (Kotlin)

---

Avoid hardcoded passwords (Javascript)

---

Avoid hardcoded passwords (Swift)

---

Avoid hardcoded passwords (TypeScript)

---

CRITICAL  Avoid hardcoded timeout in Process Activities (TIBCO BW)

---

Avoid having applications with the debug mode activated

---

Avoid having applications with the tracing activated in the source code

---

Avoid having applications with the tracing activated in the web config file

---

Avoid having aspx pages with tracing activated

---

Avoid having boolean operators with non-boolean operands (C/C++)

---

Avoid having call function return ignored (PHP)

---

Avoid having code dynamically executed

---

CRITICAL  Avoid having constructors with a return value (PHP)

---

Avoid having cookie with an overly broad domain (C#)

---

Avoid having cookie with an overly broad domain (Javascript)

---

Avoid having cookie with an overly broad domain (JEE)

---

CRITICAL  Avoid having cookie with an overly broad domain (TypeScript)

---

Avoid having errors without throwing them

---

Avoid having expressions with bool type to be used as operands on operators other than =, &&, ||, !, ==, !=, the unary & operator, and the conditional operator

---

Avoid having functions with no return (PHP)

---

Avoid having handleHardIOErrors property enabled (EGL)

---

Avoid having iframe inside a tag

---

Avoid having local forward with same name as global forward

---

Avoid having lock on this object

---

Avoid having lonely variables (PHP)

---

Avoid having long timeout for HttpCookie (> 5 mn)

---

Avoid having MongoDB databases access without authentication activated

---

Avoid having multiple artifacts deleting data on the same SQL table

---

Avoid having multiple artifacts deleting data on the same SQL table (EGL)

---

CRITICAL  Avoid having multiple artifacts deleting data on the same SQL table (PLC)

---

CRITICAL  Avoid having multiple artifacts deleting data on the same SQL table (PLI)

---

Avoid having multiple Artifacts inserting data on the same SQL Table

---

Avoid having multiple artifacts inserting data on the same SQL table (EGL)

---

CRITICAL  Avoid having multiple artifacts inserting data on the same SQL table (PLC)

---

CRITICAL  Avoid having multiple artifacts inserting data on the same SQL table (PLI)

---

Avoid having multiple Artifacts updating data on the same SQL Table

---

Avoid having multiple artifacts updating data on the same SQL table (EGL)

---

CRITICAL  Avoid having multiple artifacts updating data on the same SQL table (PLC)

---

CRITICAL  Avoid having multiple artifacts updating data on the same SQL table (PLI)

---

CRITICAL  Avoid having overrided record declaration with a duplicate declaration in the same application (EGL)

---

Avoid having properties with __get and no __set (PHP)

---

CRITICAL  Avoid having the assignment to "$this" (PHP)

---

Avoid having the property IncludeExceptionDetailInFaults activated in the source code

---

Avoid having V60ExceptionCompatibility property set to NO (EGL)

---

Avoid header files circular references

---

CRITICAL  Avoid hidden form fields to prevent parameter tampering (Javascript/HTML5)

---

Avoid hosting HTML code in iframe srcdoc

---

CRITICAL  Avoid HTTP header injection (Python)

---

CRITICAL  Avoid HTTP response splitting through API requests

---

Avoid Http Session never expires

---

Avoid "id" attributes for forms as well as submit

---

Avoid if statements and blocks that are always TRUE or FALSE

---

Avoid Impersonate Globally

---

Avoid improper instantiation of argument exceptions

---

CRITICAL  Avoid improper neutralization of HTTP headers (PHP)

---

CRITICAL  Avoid improper processing of the execution status of data handling operations

---

Avoid Include Circular references

---

Avoid include JavaScript Files

---

Avoid incoherent file accesses in Cobol programs and DISP clauses in JCL

---

Avoid inconsistent initialization when deriving a new exception

---

CRITICAL  Avoid incorrect signature of the message interceptor. (Flex)

---

CRITICAL  Avoid Insecure dynamic call of a function module through variable P_NAME

---

CRITICAL  Avoid insecure parameters for Argon2 password encoder

---

CRITICAL  Avoid insecure parameters for BCrypt password encoder

---

CRITICAL  Avoid insecure parameters for PBKDF2 password encoder

---

CRITICAL  Avoid insecure parameters for SCrypt password encoder

---

CRITICAL  Avoid insecure use of YAML deserialization when using SnakeYaml (JEE)

---

Avoid instanceof in Methods that override or implement Object.equals(), Comparable.compareTo()

---

CRITICAL  Avoid instanciating a variable in a loop (Flex)

---

Avoid instantiating Boolean

---

Avoid iterator invalidation.

---

CRITICAL  Avoid Javascript string interpolations to prevent SQL injections

---

Avoid JavaScript to block page loading

---

CRITICAL  Avoid JDBC Connections having password type as string (TIBCO BW)

---

CRITICAL  Avoid JMS Synchronous Activities (TIBCO BW)

---

Avoid jump statements in finally

---

Avoid large number of String concatenation

---

Avoid large number of String concatenation

---

CRITICAL  Avoid LDAP injection (PHP)

---

CRITICAL  Avoid LDAP injection (Python)

---

CRITICAL  Avoid LDAP injection vulnerabilities ( CWE-90 )

---

CRITICAL  Avoid LDAP injection vulnerabilities through API requests

---

CRITICAL  Avoid leaving temporary files in directory (JEE)

---

Avoid lines starting with "#" with invalid pre-processing directive

---

Avoid local variables that are not initialized at declaration time

---

Avoid locking of Objects with weak identities

---

CRITICAL  Avoid Log forging vulnerabilities ( CWE-117 )

---

CRITICAL  Avoid log forging vulnerabilities through API requests

---

CRITICAL  Avoid logging sensitive data (Python)

---

Avoid Logical Files using DYNSLT (DB400)

---

CRITICAL  Avoid Logical Files using DYNSLT (DDS400)

---

Avoid Logical File without associated Physical File (DB400)

---

CRITICAL  Avoid Logical File without associated Physical File (DDS400)

---

Avoid Long request parameter names in Struts 2.0.0 - struts 2.3.4

---

Avoid Main Procedures having LEAVE statement (PL1)

---

CRITICAL  Avoid Main Procedures not having an ON ERROR clause (PL1)

---

CRITICAL  Avoid Main procedures using the DATE builtin Function via include PLC (PL1)

---

Avoid Managed type declaration for Win32 API using Overlapped IO

---

Avoid manipulating a list while iterating over it

---

Avoid many-to-many association

---

Avoid message security without authentication for an anonymous client

---

CRITICAL  Avoid method metadata argument redundant with the handler name (Flex)

---

CRITICAL  Avoid Methods and Functions directly access to database tables (PHP)

---

Avoid missing default in switch statements

---

Avoid missing default in switch statements (JEE)

---

Avoid Missing Form Bean in Struts 1.x

---

CRITICAL  Avoid missing WHEN OTHERS in CASE statements

---

CRITICAL  Avoid mixing trusted and untrusted data in HTTP requests (PHP)

---

CRITICAL  Avoid mixing trusted and untrusted data in HTTP requests (Python)

---

CRITICAL  Avoid mixing trusted and untrusted data in HTTP requests through API requests

---

CRITICAL  Avoid modelLocator that is Bindable at a class level (Flex)

---

CRITICAL  Avoid more than one reference of ModelLocator per class (Flex)

---

Avoid move constructor and move assignment operator to exit with an exception

---

Avoid multiple validation form with the same name

---

Avoid mutable default parameter values

---

CRITICAL  Avoid MVC injection

---

CRITICAL  Avoid MVC injection through API requests

---

CRITICAL  Avoid MXML component with more than 1 public variable (Flex)

---

CRITICAL  Avoid MXML component with more than 2 public variables (Flex)

---

Avoid non-public custom exception types

---

Avoid non serializable Entities

---

Avoid non serializable Entity beans

---

CRITICAL  Avoid non thread safe singleton

---

CRITICAL  Avoid non validated inputs

---

Avoid non-void return type function without an explicit return of an expression (C/C++)

---

CRITICAL  Avoid NoSQL injection on MongoDB (C#)

---

CRITICAL  Avoid NoSQL injection through API requests

---

Avoid not enabling throttling while setting service behavior

---

Avoid NULL Pointer Dereference (C#, VB.NET)

---

CRITICAL  Avoid numerical data corruption during incompatible mutation

---

CRITICAL  Avoid numeric user inputs in SQL queries

---

CRITICAL  Avoid numeric user inputs in SQL queries through API requests

---

Avoid Objects having exposed pointers allowed to access unmanaged memory

---

CRITICAL  Avoid observable authentication response discrepancy (Python)

---

Avoid old VAGen Compatibility statements (EGL)

---

Avoid orphaned synonyms

---

Avoid orphaned synonyms in PL/SQL context

---

CRITICAL  Avoid OS command injection (PHP)

---

CRITICAL  Avoid OS command injection (Python)

---

CRITICAL  Avoid OS command injection vulnerabilities ( CWE-78 )

---

CRITICAL  Avoid OS command injection vulnerabilities through API requests

---

Avoid overly permissive Cross-Origin Resource Sharing (CORS) policy

---

CRITICAL  Avoid overly permissive Cross-Origin Resource Sharing (CORS) policy (Python)

---

Avoid override artifacts not having link demands identical to base

---

CRITICAL  Avoid package configuration having no or wildcard namespace with Struts2

---

CRITICAL  Avoid packages with misplaced metadata (Flex)

---

CRITICAL  Avoid packages with unknown metadata attribute (Flex)

---

CRITICAL  Avoid parsing XML data without restriction of XML External Entity Reference (XXE) (PHP)

---

CRITICAL  Avoid parsing XML data without restriction of XML External Entity Reference (XXE) (Python)

---

Avoid passing an existing array with spread operator as an argument using vararg as parameters (Kotlin)

---

Avoid passing parameter by value

---

Avoid passing the variables of a function by reference(PHP)

---

Avoid PB Function/Event/Method accessing Database Procedures or Functions

---

Avoid PB Function/Event/Method accessing Database Tables (PowerBuilder)

---

Avoid PHP Dangerous Feature (PHP)

---

CRITICAL  Avoid PHP Remote File Inclusion (PHP)

---

Avoid Physical File updated by multiple program (DB400)

---

Avoid PL1 Errors Blocks having ON ERROR SYSTEM blocks and not containing and displaying ONCODE and ONLOC (PL1)

---

CRITICAL  Avoid plaintext storage of password

---

CRITICAL  Avoid PLC Copybooks using FIXED variable type declaration (PL1)

---

CRITICAL  Avoid PLC Copybooks using variables with ALLOCATE and without FREE (PL1)

---

Avoid PLC Copybook with a very low comment/code ratio (PL1)

---

Avoid PLC Procedures & Functions with a very low comment/code ratio (PL1)

---

CRITICAL  Avoid PLI Main procedures using variables with ALLOCATE and without FREE (PL1)

---

Avoid PLI Procedures & Functions with a very low comment/code ratio (PL1)

---

CRITICAL  Avoid popup using dynamic filters (Flex)

---

CRITICAL  Avoid Procedures using an Insert, Update, Delete, Create Table or Select without including error management

---

CRITICAL  Avoid process control

---

CRITICAL  Avoid process control through API requests

---

CRITICAL  Avoid Processes using JDBC SQL Direct (TIBCO BW)

---

Avoid processing Google Sign In Client without catching error

---

CRITICAL  Avoid program calls outside a try end block (EGL)

---

CRITICAL  Avoid Program calls without checking the return code (EGL)

---

Avoid Programs accessing directly to Physical Files (RPG300)

---

Avoid Programs accessing directly to Physical Files (RPG400)

---

Avoid Programs accessing directly to Physical Files (RPG_FP)

---

Avoid Programs accessing more than X physical files (RPG300)

---

Avoid Programs accessing more than X physical files (RPG400)

---

Avoid Programs accessing more than X physical files (RPG_FP)

---

Avoid Programs declaring STATIC variables (PL1)

---

Avoid Programs having cursors that doesn't contain the "FOR UPDATE" clause and not containing the "FOR READ ONLY" or "FOR FETCH ONLY" clause (PL1)

---

Avoid Programs having files declared and not having the ON UNDF or ON UNDEFINEDFILE statement except SYSPRINT and SYSIN (PL1)

---

Avoid Programs having files declared as RECORD INPUT or RECORD UPDATE and not having the ON EOF or ON ENDFILE statement (PL1)

---

Avoid Programs having FIXED without BIN or BINARY or DEC or DECIMAL.The character "(" is mandatory. (PL1)

---

Avoid programs not having the property allowUnqualifiedItemReferences set to YES (EGL)

---

Avoid programs not having the property I4GLItemsNullable set to NO (EGL)

---

Avoid Programs not having the property includeReferencedFunctions set to YES (EGL)

---

CRITICAL  Avoid Programs not using explicitly OPEN and CLOSE files (PL1)

---

Avoid Programs overriding the *PROCESS statement (PL1)

---

Avoid providing password in Web Service URL

---

Avoid providing password in Web Service URL

---

Avoid providing password in Web Service URL

---

Avoid providing password in Web Service URL

---

Avoid Psysical Files using large buffers (DB400)

---

Avoid public/protected setter for the generated identifier field

---

Avoid public/protected setter for the generated identifier field

---

CRITICAL  Avoid public variables inside a custom event (Flex)

---

Avoid Python string interpolations to prevent SQL injections

---

Avoid queries using old style join convention instead of ANSI-Standard joins

---

Avoid raising an exception in a Web Dynpro Supply Function or in a Method called by a Supply Function

---

Avoid raising exceptions in unexpected location

---

CRITICAL  Avoid Record Column without having the same nullable requirement as the corresponding SQL Table column (EGL)

---

CRITICAL  Avoid Reflected Cross-site Scripting (Non Persistent)

---

CRITICAL  Avoid reflected cross-site scripting (PHP)

---

CRITICAL  Avoid reflected cross-site scripting (Python)

---

CRITICAL  Avoid reflection injection

---

CRITICAL  Avoid reflection injection through API requests

---

CRITICAL  Avoid Regular expression injection

---

CRITICAL  Avoid Regular expression injection through API requests

---

CRITICAL  Avoid resource injection

---

CRITICAL  Avoid resource injection (Python)

---

CRITICAL  Avoid resource injection through API requests

---

CRITICAL  Avoid resource URL manipulation

---

CRITICAL  Avoid resource URL manipulation through API requests

---

Avoid rethrow exception explicitly

---

Avoid returning null from non-async Task/Task method

---

Avoid returning null from ToString()

---

Avoid return statement in @finally block

---

Avoid return statement in @finally block

---

Avoid return statement in finally block

---

Avoid return statement in finally block

---

Avoid return statements in finally blocks (JEE)

---

Avoid scripts and functions using SQL static statements (Shell)

---

Avoid scripts and functions with SQL code in temporary files (Shell)

---

CRITICAL  Avoid second order code injection (PHP)

---

CRITICAL  Avoid second order cookie injection (PHP)

---

CRITICAL  Avoid second order deserialization injection

---

CRITICAL  Avoid second order deserialization injection (PHP)

---

CRITICAL  Avoid second order expression language injection

---

CRITICAL  Avoid second order file path manipulation (PHP)

---

CRITICAL  Avoid second order HTTP header injection (PHP)

---

CRITICAL  Avoid second order LDAP injection

---

CRITICAL  Avoid second order LDAP injection (PHP)

---

CRITICAL  Avoid second order LDAP injection (Python)

---

CRITICAL  Avoid second order numeric user inputs in SQL queries

---

CRITICAL  Avoid second order OS command injection

---

CRITICAL  Avoid second order OS command injection (PHP)

---

CRITICAL  Avoid second order PHP Remote File Inclusion

---

CRITICAL  Avoid second order reflection injection (PHP)

---

CRITICAL  Avoid second order Regular expression injection

---

CRITICAL  Avoid second order server-side request forgery

---

CRITICAL  Avoid second order server-side request forgery (PHP)

---

CRITICAL  Avoid second order SQL injection

---

CRITICAL  Avoid second order SQL injection (PHP)

---

CRITICAL  Avoid second order URL redirection to untrusted site

---

CRITICAL  Avoid second order XPath injection

---

CRITICAL  Avoid second order XPath injection (PHP)

---

CRITICAL  Avoid second order XQuery injection

---

CRITICAL  Avoid Sections directly access to database tables (PHP)

---

CRITICAL  Avoid server-side request forgery

---

CRITICAL  Avoid server-side request forgery (PHP)

---

CRITICAL  Avoid server-side request forgery (Python)

---

CRITICAL  Avoid server-side request forgery through API requests

---

Avoid Session Fixation (PHP)

---

Avoid setting android:grantUriPermissions as True

---

CRITICAL  Avoid setting a pointer to the address of a local variable defined in a lower scope

---

Avoid shadowing class variables

---

Avoid SQL injection in dynamic SQL for Oracle

---

CRITICAL  Avoid SQL injection (PHP)

---

CRITICAL  Avoid SQL injection vulnerabilities ( CWE-89 )

---

CRITICAL  Avoid SQL injection vulnerabilities through API requests

---

CRITICAL  Avoid SQL query outside try-on block (EGL)

---

CRITICAL  Avoid Stateful Beans not removed

---

Avoid static Field of type collection

---

Avoid static Fields that are not final

---

Avoid Stored Procedures not returning a status value

---

CRITICAL  Avoid storing Non-Serializable Object as HttpSessionState attributes.

---

Avoid storing passwords in Comments

---

Avoid storing passwords in the config files

---

Avoid String concatenation in loops for artifacts with high fan in

---

Avoid String initialization with String object (created using the 'new' keyword)

---

CRITICAL  Avoid string interpolations to prevent SQL injections (TypeScript)

---

CRITICAL  Avoid Struts 2 Action Fields without Validation

---

Avoid Struts 2 Validator field not referencing a java class field

---

Avoid Struts action Mapping with disabled validator

---

CRITICAL  Avoid Struts Invalidated Action Form 1.x

---

CRITICAL  Avoid switch statement without a default statement (Flex)

---

Avoid synchronizing the credentials with iCloud

---

Avoid synchronizing the credentials with iCloud

---

Avoid synchronizing the credentials with iCloud (Swift)

---

Avoid table and column names that are too long (portability)

---

CRITICAL  Avoid Tables without Primary Key

---

CRITICAL  Avoid test containing a hard coded boolean value. (Flex)

---

Avoid testing floating point numbers for equality

---

CRITICAL  Avoid testing floating point numbers for equality

---

CRITICAL  Avoid testing specific values for SY-UNAME

---

Avoid with v-model having child elements</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020700,Avoid-the-lack-of-error-handling-in-the-Nodejs-callbacks" style="color:#444">Avoid the lack of error handling in the Node.js callbacks</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020874,Avoid-the-lack-of-error-handling-in-the-Nodejs-callbacks-TypeScript" style="color:#444">Avoid the lack of error handling in the Node.js callbacks (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7208,Avoid-the-use-of-is-inside-loops" style="color:#444">Avoid the use of is inside loops</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7728,Avoid-thread-creation-for-application-running-on-application-server" style="color:#444">Avoid thread creation for application running on application server</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8436,Avoid-thread-injection-vulnerabilities" style="color:#444">Avoid thread injection vulnerabilities</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8498,Avoid-thread-injection-vulnerabilities-through-API-requests" style="color:#444">Avoid thread injection vulnerabilities through API requests</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7652,Avoid-throwing-an-exception-in-a-catch-block-without-chaining-it" style="color:#444">Avoid throwing an exception in a catch block without chaining it</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065034,Avoid-throwing-an-exception-object-of-pointer-type-C" style="color:#444">Avoid throwing an exception object of pointer type (C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7356,Avoid-throwing-an-exception-of-type-Exception-C-Net" style="color:#444">Avoid throwing an exception of type Exception (C# .Net)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,4654,Avoid-throwing-an-exception-of-type-Exception-JEE" style="color:#444">Avoid throwing an exception of type Exception (JEE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1027050,Avoid-throwing-ArgumentException-from-yielding-method" style="color:#444">Avoid throwing ArgumentException from yielding method.</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1027066,Avoid-throwing-exception-from-property-getters" style="color:#444">Avoid throwing exception from property getters</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1027016,Avoid-throwing-exceptions-in-destructors" style="color:#444">Avoid throwing exceptions in destructors</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1027018,Avoid-throwing-exceptions-in-finally-block" style="color:#444">Avoid throwing exceptions in finally block</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065056,Avoid-throwing-exceptions-outside-of-main" style="color:#444">Avoid throwing exceptions outside of main()</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7720,Avoid-too-many-EJB-bean" style="color:#444">Avoid too many EJB bean</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7676,Avoid-too-many-packages-referencing-Mainframe" style="color:#444">Avoid too many packages referencing Mainframe</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1019004,Avoid-to-set-client-credential-type-other-than-Certificate-or-Windows-when-using-message-mode" style="color:#444">Avoid to set client credential type other than Certificate or Windows when using message mode</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7734,Avoid-to-use-Logdebug-without-calling-LogisDebugEnabled" style="color:#444">Avoid to use Log.debug() without calling Log.isDebugEnabled()</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7442,Avoid-to-use-this-within-Constructor-in-multi-thread-environment" style="color:#444">Avoid to use this within Constructor in multi-thread environment</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1000110,Avoid-transactions-with-database-resource-open-capability-but-without-the-associated-close-capability" style="color:#444">Avoid transactions with database resource open capability but without the associated close capability</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1000100,Avoid-transactions-with-too-many-severe-Efficiency-Memory-Network-and-Disk-Space-Management-issues-along-the-path" style="color:#444">Avoid transactions with too many severe Efficiency - Memory, Network and Disk Space Management issues along the path</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1000104,Avoid-transactions-with-too-many-severe-Programming-Practices-Error-and-Exception-Handling-issues-along-the-path" style="color:#444">Avoid transactions with too many severe Programming Practices - Error and Exception Handling issues along the path</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1003184,Avoid-type-metadata-argument-redundant-with-the-handler-argument-type-Flex" style="color:#444">Avoid type metadata argument redundant with the handler argument type (Flex)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1003156,Avoid-type-not-found-within-analysis-scope-Flex" style="color:#444">Avoid type not found within analysis scope (Flex)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8086,Avoid-types-that-own-disposable-fields-and-are-not-disposable" style="color:#444">Avoid types that own disposable fields and are not disposable</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1021134,Avoid-Unchecked-Input-for-Loop-Condition-Python" style="color:#444">Avoid Unchecked Input for Loop Condition (Python)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7690,Avoid-unchecked-return-code-SQLCODE-after-EXEC-SQL-query" style="color:#444">Avoid unchecked return code (SQLCODE) after EXEC SQL query</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8014,Avoid-unchecked-return-code-SY-SUBRC-after-AUTHORITY-CHECK" style="color:#444">Avoid unchecked return code (SY-SUBRC) after AUTHORITY-CHECK</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8012,Avoid-unchecked-return-code-SY-SUBRC-after-opening-and-reading-dataset" style="color:#444">Avoid unchecked return code (SY-SUBRC) after opening and reading dataset</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7520,Avoid-unchecked-return-code-SY-SUBRC-after-OPEN-SQL-or-READ-statement" style="color:#444">Avoid unchecked return code (SY-SUBRC) after OPEN SQL or READ statement</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8098,Avoid-uncontrolled-format-string-CWE-134" style="color:#444">Avoid uncontrolled format string (CWE-134)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1021124,Avoid-uncontrolled-format-string-Python" style="color:#444">Avoid uncontrolled format string (Python)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8510,Avoid-uncontrolled-format-string-through-API-requests" style="color:#444">Avoid uncontrolled format string through API requests</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1034060,Avoid-uncontrolled-import-into-the-current-symbol-table-PHP" style="color:#444">Avoid uncontrolled import into the current symbol table (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1034058,Avoid-uncontrolled-sleep-calls-PHP" style="color:#444">Avoid uncontrolled sleep calls (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1021088,Avoid-uncontrolled-sleep-calls-Python" style="color:#444">Avoid uncontrolled sleep calls (Python)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1042024,Avoid-Unescaped-User-controlled-Input-attribute-in-Struts-which-Causes-XSS" style="color:#444">Avoid Unescaped User-controlled Input attribute in Struts which Causes XSS</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1030020,Avoid-unhandled-Exceptions-in-servlet-methods-Kotlin" style="color:#444">Avoid unhandled Exceptions in servlet methods (Kotlin)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1021108,Avoid-unsafe-access-to-object-attributes" style="color:#444">Avoid unsafe access to object attributes</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1021078,Avoid-unsafe-deserialization-Python" style="color:#444">Avoid unsafe deserialization (Python)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020888,Avoid-unsecure-connection-to-the-express-Nodejs-server-TypeScript" style="color:#444">Avoid unsecure connection to the express Node.js server (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8016,Avoid-unsecured-EJB-remote-method" style="color:#444">Avoid unsecured EJB remote method</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8134,Avoid-unsorted-data-after-SELECT-queries-BETA" style="color:#444">Avoid unsorted data after SELECT queries BETA</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1003158,Avoid-unspecified-event-type-Flex" style="color:#444">Avoid unspecified event type (Flex)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002250,Avoid-untested-Return-Code-variables-after-ALLOCATE-in-Functions-Fortran" style="color:#444">Avoid untested Return Code variables after ALLOCATE in Functions (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002252,Avoid-untested-Return-Code-variables-after-ALLOCATE-in-Modules-Fortran" style="color:#444">Avoid untested Return Code variables after ALLOCATE in Modules (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002246,Avoid-untested-Return-Code-variables-after-ALLOCATE-in-Programs-Fortran" style="color:#444">Avoid untested Return Code variables after ALLOCATE in Programs (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002248,Avoid-untested-Return-Code-variables-after-ALLOCATE-in-Subroutines-Fortran" style="color:#444">Avoid untested Return Code variables after ALLOCATE in Subroutines (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002242,Avoid-untested-Return-Code-variables-after-Read-or-Write-in-Functions-Fortran" style="color:#444">Avoid untested Return Code variables after Read or Write in Functions (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002244,Avoid-untested-Return-Code-variables-after-Read-or-Write-in-Modules-Fortran" style="color:#444">Avoid untested Return Code variables after Read or Write in Modules (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002238,Avoid-untested-Return-Code-variables-after-Read-or-Write-in-Programs-Fortran" style="color:#444">Avoid untested Return Code variables after Read or Write in Programs (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002240,Avoid-untested-Return-Code-variables-after-Read-or-Write-in-Subroutines-Fortran" style="color:#444">Avoid untested Return Code variables after Read or Write in Subroutines (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7380,Avoid-unused-validation-form" style="color:#444">Avoid unused validation form</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1042012,Avoid-Unused-Validation-Form-in-Struts-1x" style="color:#444">Avoid Unused Validation Form in Struts 1.x</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8446,Avoid-URL-redirection-to-untrusted-site" style="color:#444">Avoid URL redirection to untrusted site</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1021100,Avoid-URL-redirection-to-untrusted-site-Python" style="color:#444">Avoid URL redirection to untrusted site (Python)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8516,Avoid-URL-redirection-to-untrusted-site-through-API-requests" style="color:#444">Avoid URL redirection to untrusted site through API requests</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7922,Avoid-usage-of-stdfindfirstof" style="color:#444">Avoid usage of 'std::find_first_of'</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1012000,Avoid-Usage-of-weak-encryption-algorithm-like-DES" style="color:#444">Avoid Usage of weak encryption algorithm like DES</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8414,Avoid-use-of-a-broken-or-risky-cryptographic-algorithm" style="color:#444">Avoid use of a broken or risky cryptographic algorithm</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8416,Avoid-use-of-a-reversible-one-way-hash" style="color:#444">Avoid use of a reversible one-way hash</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1004840,Avoid-use-of-DLYJOB-CL400" style="color:#444">Avoid use of DLYJOB (CL400)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1012018,Avoid-use-of-DLYJOB-CL400" style="color:#444">Avoid use of DLYJOB (CL400)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1012022,Avoid-use-of-NOMAX-CL400" style="color:#444">Avoid use of *NOMAX (CL400)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1004844,Avoid-use-of-NOMAX-CL400" style="color:#444">Avoid use of *NOMAX (CL400)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1004842,Avoid-use-of-RCLRSC-CL400" style="color:#444">Avoid use of RCLRSC (CL400)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1012020,Avoid-use-of-RCLRSC-CL400" style="color:#444">Avoid use of RCLRSC (CL400)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,2580,Avoid-use-of-ScriptingFileSystemObject" style="color:#444">Avoid use of Scripting.FileSystemObject</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,3064,Avoid-use-of-Session-variables-from-SessionOnEnd" style="color:#444">Avoid use of Session variables from Session_OnEnd</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,2236,Avoid-use-of-standard-SQL-API" style="color:#444">Avoid use of standard SQL API</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,4070,Avoid-use-of-truncate-table" style="color:#444">Avoid use of "truncate table"</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065008,Avoid-use-of-unvalidated-input-in-array-indexing-and-memory-allocation" style="color:#444">Avoid use of unvalidated input in array indexing and memory allocation</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8546,Avoid-using-ABAP-command-CALL-SYSTEM" style="color:#444">Avoid using ABAP command CALL 'SYSTEM'</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8548,Avoid-using-ABAP-command-INSERT-REPORT" style="color:#444">Avoid using ABAP command INSERT REPORT</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8552,Avoid-using-ABAP-command-OPEN-DATASET-with-the-FILTER-addition" style="color:#444">Avoid using ABAP command OPEN DATASET with the FILTER addition</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1042008,Avoid-using-ActionForward-with-untrusted-data-source-to-prevent-file-path-disclosure" style="color:#444">Avoid using ActionForward with untrusted data source to prevent file path disclosure</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020322,Avoid-using-Ajax-method-without-dataType-before-jQuery-30" style="color:#444">Avoid using Ajax method without dataType before jQuery 3.0</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1024028,Avoid-using-Android-Protected-Confirmation-without-User-Confirmation" style="color:#444">Avoid using "Android Protected Confirmation" without User Confirmation</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020830,Avoid-using-Angular-ElementRef-API-to-manipulate-DOM" style="color:#444">Avoid using Angular ElementRef API to manipulate DOM</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020530,Avoid-using-angularisUndefined-and-angularisDefined-in-AngularJS-application" style="color:#444">Avoid using !angular.isUndefined() and !angular.isDefined() in AngularJS application</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039074,Avoid-using-Apache-ActiveMQ-5x-before-5130" style="color:#444">Avoid using Apache ActiveMQ 5.x before 5.13.0</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020332,Avoid-using-append-after-with-jQuery-142-or-older" style="color:#444">Avoid using .append() after() with jQuery 1.4.2 (or older)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1007214,Avoid-using-arrays-as-parameters-of-str-functions-PHP" style="color:#444">Avoid using arrays as parameters of str functions (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7536,Avoid-using-AT-Events-in-combination-of-LOOP-AT-WHERE-constructs" style="color:#444">Avoid using AT Events in combination of LOOP AT .... WHERE constructs</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065016,Avoid-using-atofatol-atoll-or-atoi-functions-from-stdlibh-CC" style="color:#444">Avoid using atof,atol, atoll or atoi functions from <stdlib.h> (C/C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020334,Avoid-using-attr-with-jQuery-300-rc1" style="color:#444">Avoid using attr() with jQuery 3.0.0-rc1</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020028,Avoid-using-autofocus-and-onblur-in-submitted-markup" style="color:#444">Avoid using autofocus and onblur in submitted markup</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020026,Avoid-using-autofocus-and-onfocus-in-submitted-markup" style="color:#444">Avoid using autofocus and onfocus in submitted markup</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7524,Avoid-using-BREAK-or-BREAK-POINT-statement" style="color:#444">Avoid using BREAK or BREAK-POINT statement</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1007176,Avoid-using-break-statement-in-FOR-loops-PHP" style="color:#444">Avoid using break statement in FOR loops (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020782,Avoid-using-Buffer-deprecated-APIs" style="color:#444">Avoid using Buffer deprecated APIs</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020914,Avoid-using-Bufferfill-andor-Bufferalloc-with-vulnerable-nodejs-versions-TypeScript" style="color:#444">Avoid using Buffer.fill() and/or Buffer.alloc() with vulnerable nodejs versions (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020758,Avoid-using-Bufferfill-andor-Bufferalloc-with-vulnerable-versions" style="color:#444">Avoid using Buffer.fill() and/or Buffer.alloc() with vulnerable versions</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020760,Avoid-using-Buffer-library-and-UCS-2-encoding-with-vulnerable-versions" style="color:#444">Avoid using Buffer library and UCS-2 encoding with vulnerable versions</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020916,Avoid-using-Buffer-library-and-UCS-2-encoding-with-vulnerable-versions-TypeScript" style="color:#444">Avoid using Buffer library and UCS-2 encoding with vulnerable versions (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8120,Avoid-using-CALL-FUNCTION-without-error-handling-BETA" style="color:#444">Avoid using CALL FUNCTION without error handling BETA</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8122,Avoid-using-CALL-METHOD-without-error-handling-BETA" style="color:#444">Avoid using CALL METHOD without error handling BETA</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8074,Avoid-using-class-or-struct-parameters-with-variadic-Functions" style="color:#444">Avoid using 'class' or 'struct' parameters with variadic Functions</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8422,Avoid-Using-COMMIT-WORK-or-ROLLBACK-WORK-during-update-work-process" style="color:#444">Avoid Using COMMIT WORK or ROLLBACK WORK during update work process</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020060,Avoid-using-consolelog" style="color:#444">Avoid using console.log()</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020804,Avoid-using-console-logging" style="color:#444">Avoid using console logging</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1027082,Avoid-using-console-logging" style="color:#444">Avoid using console logging</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1040032,Avoid-Using-ControllerAdvice-And-HandlerExceptionResolver-Simultaneously" style="color:#444">Avoid Using ControllerAdvice And HandlerExceptionResolver Simultaneously</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020608,Avoid-using-Controls-Hardcoded-IDs-inside-a-Controller-Component-or-JSView-SapUI5" style="color:#444">Avoid using Controls Hardcoded IDs inside a Controller, Component or JSView (SapUI5)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1042022,Avoid-using-CookieInterceptor-with-2316-and-Older" style="color:#444">Avoid using CookieInterceptor with 2.3.16 (and Older)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1025016,Avoid-using-cookie-without-the-HttpOnly-flag" style="color:#444">Avoid using cookie without the HttpOnly flag</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1005052,Avoid-using-copyStr-and-compareStr-functions-EGL" style="color:#444">Avoid using copyStr and compareStr functions (EGL)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1007184,Avoid-using-count-function-inside-a-for-loop" style="color:#444">Avoid using count function inside a for loop</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1027020,Avoid-using-Count-or-LongCount-where-Any-can-be-used" style="color:#444">Avoid using Count or LongCount where Any can be used</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050050,Avoid-using-cryptography-hash-without-salt" style="color:#444">Avoid using cryptography hash without salt</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8228,Avoid-using-cryptography-hash-without-salt" style="color:#444">Avoid using cryptography hash without salt</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1055044,Avoid-using-cryptography-hash-without-salt-Swift" style="color:#444">Avoid using cryptography hash without salt (Swift)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065010,Avoid-using-cstdio-stream-input-output-library-C" style="color:#444">Avoid using <cstdio> stream input output library (C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065020,Avoid-using-ctime-C" style="color:#444">Avoid using <ctime> (C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1019002,Avoid-using-debug-information-in-production-environment" style="color:#444">Avoid using debug information in production environment</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1039030,Avoid-using-DefaultHttpClient-constructor" style="color:#444">Avoid using DefaultHttpClient constructor</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020054,Avoid-using-delete-on-arrays" style="color:#444">Avoid using delete on arrays</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8004,Avoid-using-delete-this" style="color:#444">Avoid using 'delete this'</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020040,Avoid-using-delete-with-no-object-properties" style="color:#444">Avoid using delete with no object properties</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8220,Avoid-using-deprecated-method-constructor-field-type-or-package" style="color:#444">Avoid using deprecated method, constructor, field, type or package</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,4574,Avoid-using-deprecated-objects" style="color:#444">Avoid using deprecated objects</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050022,Avoid-using-deprecated-SSL-protocol" style="color:#444">Avoid using deprecated SSL protocol</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8170,Avoid-using-deprecated-SSL-protocol" style="color:#444">Avoid using deprecated SSL protocol</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1055012,Avoid-using-deprecated-SSL-protocol-Swift" style="color:#444">Avoid using deprecated SSL protocol (Swift)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1027004,Avoid-using-deprecated-XmlTextReader-NET-API" style="color:#444">Avoid using deprecated XmlTextReader .NET API</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020336,Avoid-using-Dialog-Widget-with-jQuery-UI-version-older-than-1100" style="color:#444">Avoid using Dialog Widget with jQuery UI version older than 1.10.0</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020324,Avoid-using-dialog-with-closeText-parameter-before-jQuery-UI-112" style="color:#444">Avoid using dialog with closeText parameter before jQuery UI 1.12</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1003170,Avoid-using-Dictionnary-class-Flex" style="color:#444">Avoid using Dictionnary class (Flex)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065068,Avoid-using-Digraphs-C" style="color:#444">Avoid using Digraphs (C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,2280,Avoid-using-Documentall-collection" style="color:#444">Avoid using Document.all collection</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039032,Avoid-using-DocumentBuilder-without-restriction-of-XML-External-Entity-Reference-XXE" style="color:#444">Avoid using DocumentBuilder without restriction of XML External Entity Reference (XXE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039086,Avoid-using-DOMParser-without-restriction-of-XML-External-Entity-Reference-XXE" style="color:#444">Avoid using DOMParser without restriction of XML External Entity Reference (XXE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1007182,Avoid-using-double-quote-for-long-strings-without-variables" style="color:#444">Avoid using double quote for long strings without variables</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7638,Avoid-using-DriverManager" style="color:#444">Avoid using DriverManager</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1042046,Avoid-Using-Dynamic-Method-Invocation-for-Apache-Struts-2x" style="color:#444">Avoid Using Dynamic Method Invocation for Apache Struts 2.x</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7874,Avoid-using-dynamic-queries" style="color:#444">Avoid using dynamic queries</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,6126,Avoid-using-dynamic-SQL-in-scripts" style="color:#444">Avoid using dynamic SQL in scripts</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007206,Avoid-using-error-suppression-PHP" style="color:#444">Avoid using @error suppression (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1021036,Avoid-using-eval" style="color:#444">Avoid using eval</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020058,Avoid-using-eval" style="color:#444">Avoid using eval()</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1007156,Avoid-using-eval-expressions-PHP" style="color:#444">Avoid using eval expressions (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1021038,Avoid-using-exec" style="color:#444">Avoid using exec</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1101920,Avoid-using-explain-in-production-code-JEE" style="color:#444">Avoid using explain() in production code (JEE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1018142,Avoid-using-External-Command-Activities-TIBCO-BW" style="color:#444">Avoid using External Command Activities (TIBCO BW)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,4602,Avoid-using-Fields-non-static-final-from-other-Classes" style="color:#444">Avoid using Fields (non static final) from other Classes</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7936,Avoid-using-finalize" style="color:#444">Avoid using finalize()</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1024030,Avoid-using-FingerprintManager-as-biometric-API" style="color:#444">Avoid using FingerprintManager as biometric API</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1030004,Avoid-using-foreach-to-iterate-over-a-explicit-range-Kotlin" style="color:#444">Avoid using "foreach" to iterate over a explicit range (Kotlin)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8154,Avoid-using-GCCollect" style="color:#444">Avoid using GC.Collect()</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8580,Avoid-using-GENERATE-SUBROUTINE-POOL-statement-without-Authorization-Check" style="color:#444">Avoid using GENERATE SUBROUTINE POOL statement without Authorization Check</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1040030,Avoid-Using-Generic-Authentication-Exception-Class" style="color:#444">Avoid Using Generic Authentication Exception Class</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1060106,Avoid-using-generic-methods-such-as-ToJson-or-ToString-to-save-sensitive-or-PII-data" style="color:#444">Avoid using generic methods such as 'ToJson' or 'ToString' to save sensitive or PII data</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1018100,Avoid-using-Get-JMS-Queue-Message-TIBCO-BW" style="color:#444">Avoid using Get JMS Queue Message (TIBCO BW)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7994,Avoid-using-getopt-function" style="color:#444">Avoid using getopt() function</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7326,Avoid-using-getopt-function-C" style="color:#444">Avoid using getopt() function (C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7174,Avoid-using-getopt-function-C-Lang" style="color:#444">Avoid using getopt() function (C Lang.)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7992,Avoid-using-getpass-function" style="color:#444">Avoid using getpass() function</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7322,Avoid-using-getpass-function-C" style="color:#444">Avoid using getpass() function (C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7176,Avoid-using-getpass-function-C-Lang" style="color:#444">Avoid using getpass() function (C Lang.)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002098,Avoid-using-global-SAVE-in-Fortran-90-Functions-Fortran" style="color:#444">Avoid using global SAVE in Fortran-90 Functions (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002100,Avoid-using-global-SAVE-in-Fortran-90-Modules-Fortran" style="color:#444">Avoid using global SAVE in Fortran-90 Modules (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002280,Avoid-using-global-SAVE-in-Fortran-90-Programs-Fortran" style="color:#444">Avoid using global SAVE in Fortran-90 Programs (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002096,Avoid-using-global-SAVE-in-Fortran-90-Subroutines-Fortran" style="color:#444">Avoid using global SAVE in Fortran-90 Subroutines (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,5054,Avoid-using-HANDLE-ABEND" style="color:#444">Avoid using HANDLE ABEND</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,5050,Avoid-using-HANDLE-CONDITION" style="color:#444">Avoid using HANDLE CONDITION</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8424,Avoid-using-hard-coded-HMAC-keys" style="color:#444">Avoid using hard-coded HMAC keys</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1034056,Avoid-using-hard-coded-HMAC-keys-PHP" style="color:#444">Avoid using hard-coded HMAC keys (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7526,Avoid-using-hardcoded-paths" style="color:#444">Avoid using hardcoded paths</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8430,Avoid-using-hardcoded-seed-or-no-seed-at-all-for-random-values-generation" style="color:#444">Avoid using hardcoded seed or no seed at all for random values generation</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,4706,Avoid-using-Hashtable" style="color:#444">Avoid using Hashtable</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1043086,Avoid-using-HtmlRaw-or-HtmlHelperRaw" style="color:#444">Avoid using Html.Raw() or HtmlHelper.Raw()</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020328,Avoid-using-html-with-jQuery-190-or-older" style="color:#444">Avoid using html() with jQuery 1.9.0 (or older)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020746,Avoid-using-HTTP2-library-before-Nodejs-8113-9112-and-1041" style="color:#444">Avoid using HTTP/2 library before Node.js 8.11.3, 9.11.2 and 10.4.1</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020912,Avoid-using-HTTP2-library-with-vulnerable-nodejs-versions-TypeScript" style="color:#444">Avoid using HTTP/2 library with vulnerable nodejs versions (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020540,Avoid-using-http-success-and-error-function" style="color:#444">Avoid using $http success and error function</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039076,Avoid-using-HttpURLConnection-with-HTTP-protocol" style="color:#444">Avoid using HttpURLConnection with HTTP protocol</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,5052,Avoid-using-IGNORE-CONDITION" style="color:#444">Avoid using IGNORE CONDITION</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1024020,Avoid-using-implicit-intent" style="color:#444">Avoid using implicit intent</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020052,Avoid-using-import-with-external-URI" style="color:#444">Avoid using import with external URI</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1007180,Avoid-using-includeonce" style="color:#444">Avoid using include_once</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7668,Avoid-using-incorrect-XML-parsing-model" style="color:#444">Avoid using incorrect XML parsing model</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8144,Avoid-using-INITIALIZE-statement-on-data-structures" style="color:#444">Avoid using INITIALIZE statement on data structures</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7308,Avoid-using-Inner-Classes" style="color:#444">Avoid using Inner Classes</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8554,Avoid-using-insufficient-random-generator" style="color:#444">Avoid using insufficient random generator</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1034048,Avoid-using-insufficient-random-generator-PHP" style="color:#444">Avoid using insufficient random generator (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1021090,Avoid-using-insufficient-random-generator-Python" style="color:#444">Avoid using insufficient random generator (Python)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1018140,Avoid-using-Java-Activities-TIBCO-BW" style="color:#444">Avoid using Java Activities (TIBCO BW)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039090,Avoid-using-javabeansXMLDecoder-XXE" style="color:#444">Avoid using java.beans.XMLDecoder (XXE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,4594,Avoid-using-javaioFile" style="color:#444">Avoid using 'java.io.File'</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,4604,Avoid-using-javalangError" style="color:#444">Avoid using 'java.lang.Error'</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,4598,Avoid-using-javalangRuntimeexec" style="color:#444">Avoid using 'java.lang.Runtime.exec()'</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,4596,Avoid-using-javalangSystemgetenv" style="color:#444">Avoid using 'java.lang.System.getenv()'</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020056,Avoid-using-Javascript-Documentall-collection" style="color:#444">Avoid using Javascript Document.all collection</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020066,Avoid-using-Javascript-Function-constructor" style="color:#444">Avoid using Javascript Function constructor</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020832,Avoid-using-javascript-HTTP-request-in-Angular-Application" style="color:#444">Avoid using javascript HTTP request in Angular Application</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020030,Avoid-using-javascript-or-expression-in-the-CSS-file" style="color:#444">Avoid using javascript or expression in the CSS file</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020514,Avoid-using-Javascript-undefined-in-AngularJS-application" style="color:#444">Avoid using Javascript undefined in AngularJS application</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,4600,Avoid-using-javaSystemexit" style="color:#444">Avoid using 'java.System.exit()'</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039092,Avoid-using-JAXB-Unmarshaller-without-a-configurable-secure-parser-XXE" style="color:#444">Avoid using JAXB Unmarshaller without a configurable secure parser (XXE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020320,Avoid-using-jQuery-cookie" style="color:#444">Avoid using jQuery $.cookie</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020318,Avoid-using-jQuery-deprecated-methods" style="color:#444">Avoid using jQuery deprecated methods</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020330,Avoid-using-jQuery-locationhash-before-163" style="color:#444">Avoid using jQuery $(location.hash) before 1.6.3</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020618,Avoid-using-jQuerysapstorageTypelocal" style="color:#444">Avoid using "jQuery.sap.storage.Type.local"</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1042052,Avoid-using-JSON-lib-library-for-Rest-Plugin-of-Struts-25-to-2514" style="color:#444">Avoid using JSON-lib library for Rest Plugin of Struts 2.5 to 2.5.14</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1040048,Avoid-using-JWT-Issuer-Validation-in-spring-security-versions-51x-prior-to-512" style="color:#444">Avoid using JWT Issuer Validation in spring-security versions 5.1.x prior to 5.1.2</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039072,Avoid-using-jYAML-to-deserialize-YAML-JEE" style="color:#444">Avoid using jYAML to deserialize YAML (JEE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050024,Avoid-using-kSecAttrAccessibleAlways-attribute-when-storing-data-in-the-Keychain" style="color:#444">Avoid using kSecAttrAccessibleAlways attribute when storing data in the Keychain</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8172,Avoid-using-kSecAttrAccessibleAlways-attribute-when-storing-data-in-the-Keychain" style="color:#444">Avoid using kSecAttrAccessibleAlways attribute when storing data in the Keychain</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1055020,Avoid-using-kSecAttrAccessibleAlways-attribute-when-storing-data-in-the-Keychain-Swift" style="color:#444">Avoid using kSecAttrAccessibleAlways attribute when storing data in the Keychain (Swift)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7522,Avoid-using-literals-in-assignments-hardcoded-values" style="color:#444">Avoid using literals in assignments (hardcoded values)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1021016,Avoid-using-MD5-hashes-to-hash-passwords-or-to-encrypt-data" style="color:#444">Avoid using MD5 hashes to hash passwords or to encrypt data</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1072,Avoid-using-memory-management-Functions-freemallocrealloc" style="color:#444">Avoid using memory management Functions (free/malloc/realloc)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1024026,Avoid-using-MODEWORLDREADABLE-and-MODEWORLDWRITEABLE" style="color:#444">Avoid using MODE_WORLD_READABLE and MODE_WORLD_WRITEABLE</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8578,Avoid-using-MODIFY-without-Authorization-Check" style="color:#444">Avoid using MODIFY without Authorization Check</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020788,Avoid-using-moment-before-2193-with-Nodejs" style="color:#444">Avoid using moment before 2.19.3 with Node.js</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1027040,Avoid-using-multiple-OrderBy-calls" style="color:#444">Avoid using multiple OrderBy calls</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020600,Avoid-using-namespace-jQuerysap-as-deprecated-SAPUI5" style="color:#444">Avoid using namespace "jQuery.sap.*" as deprecated ( SAPUI5)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020806,Avoid-using-NaN-in-comparison" style="color:#444">Avoid using NaN in comparison</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8090,Avoid-using-NaN-to-test-the-result-of-an-expression" style="color:#444">Avoid using NaN to test the result of an expression</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,4612,Avoid-using-native-Methods-JNI" style="color:#444">Avoid using native Methods (JNI)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7882,Avoid-using-Native-SQL" style="color:#444">Avoid using Native SQL</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020768,Avoid-using-netSocket-object-as-stream-with-vulnerable-version-of-Nodejs" style="color:#444">Avoid using net.Socket object as stream with vulnerable version of Node.js</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020924,Avoid-using-netSocket-object-as-stream-with-vulnerable-version-of-Nodejs-TypeScript" style="color:#444">Avoid using net.Socket object as stream with vulnerable version of Node.js (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1027022,Avoid-using-new-Guid" style="color:#444">Avoid using "new Guid()"</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020876,Avoid-using-nodejs-processexit-TypeScript" style="color:#444">Avoid using nodejs process.exit() (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020766,Avoid-using-Nodejs-ps-library-with-vulnerable-versions" style="color:#444">Avoid using Node.js ps library with vulnerable versions</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020770,Avoid-using-Nodejs-query-mysql-third-party-before-003" style="color:#444">Avoid using Node.js query-mysql third-party before 0.0.3</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020918,Avoid-using-Nodejs-query-mysql-third-party-TypeScript" style="color:#444">Avoid using Node.js query-mysql third-party (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020780,Avoid-using-Nodejs-synchronous-FileSystem-API-without-trycatch-block" style="color:#444">Avoid using Node.js synchronous FileSystem API without try/catch block</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020784,Avoid-using-node-serialize-004-with-Nodejs" style="color:#444">Avoid using node-serialize 0.0.4 with Node.js</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020062,Avoid-using-non-thread-safe-Javascript-singleton-pattern" style="color:#444">Avoid using non thread-safe Javascript singleton pattern</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050026,Avoid-using-non-thread-safe-Objective-C-singleton-pattern" style="color:#444">Avoid using non thread-safe Objective-C singleton pattern</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8174,Avoid-using-non-thread-safe-Objective-C-singleton-pattern" style="color:#444">Avoid using non thread-safe Objective-C singleton pattern</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8204,Avoid-using-NSException-raiseformat-and-raiseformatarguments" style="color:#444">Avoid using NSException raise:format: and raise:format:arguments:</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050006,Avoid-using-NSException-raiseformat-and-raiseformatarguments" style="color:#444">Avoid using NSException raise:format: and raise:format:arguments:</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050008,Avoid-using-NSMutableString-appendFormat-on-behalf-of-NSURL-instance" style="color:#444">Avoid using NSMutableString appendFormat: on behalf of NSURL instance</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8206,Avoid-using-NSMutableString-appendFormat-on-behalf-of-NSURL-instance" style="color:#444">Avoid using NSMutableString appendFormat: on behalf of NSURL instance</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1055032,Avoid-using-NSPredicateformat" style="color:#444">Avoid using NSPredicate(format:)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050004,Avoid-using-NSPredicate-predicateWithFormat" style="color:#444">Avoid using NSPredicate predicateWithFormat</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8202,Avoid-using-NSPredicate-predicateWithFormat" style="color:#444">Avoid using NSPredicate predicateWithFormat</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8200,Avoid-using-NSString-stringWithFormat-on-behalf-of-NSURL-instance" style="color:#444">Avoid using NSString stringWithFormat on behalf of NSURL instance</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050002,Avoid-using-NSString-stringWithFormat-on-behalf-of-NSURL-instance" style="color:#444">Avoid using NSString stringWithFormat on behalf of NSURL instance</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050010,Avoid-using-NSURLRequest-setAllowsAnyHTTPSCertificateforHost" style="color:#444">Avoid using NSURLRequest setAllowsAnyHTTPSCertificate:forHost</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8208,Avoid-using-NSURLRequest-setAllowsAnyHTTPSCertificateforHost" style="color:#444">Avoid using NSURLRequest setAllowsAnyHTTPSCertificate:forHost</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8186,Avoid-using-NSURLRequestUseProtocolCachePolicy-for-NSURLRequest" style="color:#444">Avoid using NSURLRequestUseProtocolCachePolicy for NSURLRequest</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050038,Avoid-using-NSURLRequestUseProtocolCachePolicy-for-NSURLRequest" style="color:#444">Avoid using NSURLRequestUseProtocolCachePolicy for NSURLRequest</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1055042,Avoid-using-NSXMLParser-without-restriction-of-XML-External-Entity-Reference-XXE-Swift" style="color:#444">Avoid using NSXMLParser without restriction of XML External Entity Reference (XXE) (Swift)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1003164,Avoid-using-Object-class-in-fields-Flex" style="color:#444">Avoid using Object class in fields (Flex)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1003168,Avoid-using-Object-class-in-methods-parameters-Flex" style="color:#444">Avoid using Object class in methods' parameters (Flex)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1003166,Avoid-using-Object-class-in-variables-Flex" style="color:#444">Avoid using Object class in variables (Flex)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065052,Avoid-using-Octal-constants-or-escape-sequences-CC" style="color:#444">Avoid using Octal constants or escape sequences (C/C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065018,Avoid-using-offsetof-from-cstddef" style="color:#444">Avoid using offsetof from <cstddef></a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,2590,Avoid-using-On-error-Resume-Next-in-the-Class-event-terminate" style="color:#444">Avoid using "On error Resume Next" in the Class event terminate</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020046,Avoid-using-oninput-in-body-containing-input-autofocus" style="color:#444">Avoid using oninput in body containing input autofocus</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020036,Avoid-using-onscroll-event-with-autofocus-input" style="color:#444">Avoid using onscroll event with autofocus input</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8576,Avoid-using-OPEN-DATASET-without-Authorization-Check" style="color:#444">Avoid using OPEN DATASET without Authorization Check</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020536,Avoid-using-or-jQuery-use-angularelement-instead" style="color:#444">Avoid using $ or jQuery, use angular.element instead</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065120,Avoid-using-OR-operators-more-than-once-while-defining-macros" style="color:#444">Avoid using # OR ## operators more than once while defining macros</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020816,Avoid-using-output-of-the-function-that-does-not-return-anything" style="color:#444">Avoid using output of the function that does not return anything</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1042010,Avoid-using-ParametersInterceptor-with-2316-and-older" style="color:#444">Avoid using ParametersInterceptor with 2.3.16 (and older)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1005084,Avoid-using-parameters-on-the-Record-column-level-EGL" style="color:#444">Avoid using parameters on the Record column level (EGL)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8150,Avoid-using-Parse-for-primitive-types-and-used-instead-TryParse" style="color:#444">Avoid using Parse for primitive types and used instead TryParse</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020910,Avoid-using-path-library-parsing-functions-with-vulnerable-nodejs-versions-TypeScript" style="color:#444">Avoid using path library parsing functions with vulnerable nodejs versions (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020764,Avoid-using-path-library-parsing-functions-with-vulnerable-versions" style="color:#444">Avoid using path library parsing functions with vulnerable versions</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1007196,Avoid-using-period-for-echo-function" style="color:#444">Avoid using period for echo function</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1001106,Avoid-using-PLI-Main-Procedures-using-FIXED-variable-type-declaration-PL1" style="color:#444">Avoid using PLI Main Procedures using FIXED variable type declaration (PL1)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8480,Avoid-using-PREPARE-STMT-statement-Dynamic-SQL-with-STRING-containing-HOST-variables" style="color:#444">Avoid using PREPARE STMT statement (Dynamic SQL) with STRING containing HOST variables</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1007178,Avoid-using-print-function" style="color:#444">Avoid using "print" function</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020702,Avoid-using-processexit" style="color:#444">Avoid using process.exit()</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1005050,Avoid-using-Programs-having-textLiteralDefaultIsString-property-set-to-NO-EGL" style="color:#444">Avoid using Programs having textLiteralDefaultIsString property set to NO (EGL)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1101020,Avoid-using-quoted-identifiers" style="color:#444">Avoid using quoted identifiers</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020454,Avoid-using-React-dangerouslySetInnerHTML" style="color:#444">Avoid using React dangerouslySetInnerHTML</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020854,Avoid-using-React-dangerouslySetInnerHTML-Typescript" style="color:#444">Avoid using React dangerouslySetInnerHTML (Typescript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7756,Avoid-using-READ-statement-without-AT-END-clause" style="color:#444">Avoid using READ statement without AT END clause</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7990,Avoid-using-realpath-function" style="color:#444">Avoid using realpath() function</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7328,Avoid-using-realpath-function-C" style="color:#444">Avoid using realpath() function (C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7172,Avoid-using-realpath-function-C-Lang" style="color:#444">Avoid using realpath() function (C Lang.)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7722,Avoid-using-references-to-the-id-in-the-persistent-classs-method-equals" style="color:#444">Avoid using references to the id in the persistent class's method equals()</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1027102,Avoid-using-Regex-constructor-or-static-method-without-timeout" style="color:#444">Avoid using Regex constructor or static method without timeout</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1007188,Avoid-using-regular-expressions" style="color:#444">Avoid using regular expressions</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1021110,Avoid-using-regular-expression-vulnerable-to-ReDoS-Python" style="color:#444">Avoid using regular expression vulnerable to ReDoS (Python)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007190,Avoid-using-relative-path" style="color:#444">Avoid using relative path</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1043068,Avoid-using-RequireHttpsAttribute-on-Web-APIs-that-receive-sensitive-information" style="color:#444">Avoid using RequireHttpsAttribute on Web APIs that receive sensitive information</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1042042,Avoid-using-Rest-Plugin-with-XStream-handler-to-deserialise-XML-requests-in-Struts-212-Struts-2333-Struts-25-Struts-2512" style="color:#444">Avoid using Rest Plugin with XStream handler to deserialise XML requests in Struts 2.1.2 - Struts 2.3.33, Struts 2.5 - Struts 2.5.12</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1050064,Avoid-using-risky-cryptographic-hash" style="color:#444">Avoid using risky cryptographic hash</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020732,Avoid-using-risky-cryptographic-hash-Nodejs" style="color:#444">Avoid using risky cryptographic hash (Node.js)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020732,Avoid-using-risky-cryptographic-hash-Nodejs" style="color:#444">Avoid using risky cryptographic hash (Node.js)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020732,Avoid-using-risky-cryptographic-hash-Nodejs" style="color:#444">Avoid using risky cryptographic hash (Node.js)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020732,Avoid-using-risky-cryptographic-hash-Nodejs" style="color:#444">Avoid using risky cryptographic hash (Node.js)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1055006,Avoid-using-risky-cryptographic-hash-Swift" style="color:#444">Avoid using risky cryptographic hash (Swift)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020896,Avoid-using-risky-cryptographic-hash-with-nodejs-TypeScript" style="color:#444">Avoid using risky cryptographic hash with nodejs (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1007218,Avoid-using-rowxxx-PHP" style="color:#444">Avoid using $row[xxx] (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1012002,Avoid-using-RSA-Cryptographic-algorithms-without-OAEP" style="color:#444">Avoid using RSA Cryptographic algorithms without OAEP</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1030014,Avoid-using-RSA-Cryptographic-algorithms-without-OAEP-Optimal-Asymmetric-Encryption-Padding-Kotlin" style="color:#444">Avoid using RSA Cryptographic algorithms without OAEP (Optimal Asymmetric Encryption Padding) (Kotlin)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1027044,Avoid-using-SafeHandleDangerousGetHandle" style="color:#444">Avoid using SafeHandle.DangerousGetHandle</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020602,Avoid-using-sapuimodelodataODataModel-as-deprecated-in-version-SAPUI5-148" style="color:#444">Avoid using "sap.ui.model.odata.ODataModel" as deprecated in version: SAPUI5 1.48</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039084,Avoid-using-SAXBuilder-without-restriction-of-XML-External-Entity-Reference-XXE" style="color:#444">Avoid using SAXBuilder without restriction of XML External Entity Reference (XXE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039034,Avoid-using-SAXParserFactory-without-restriction-of-XML-External-Entity-Reference-XXE" style="color:#444">Avoid using SAXParserFactory without restriction of XML External Entity Reference (XXE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039082,Avoid-using-SAXTransformerFactory-without-restriction-of-XML-External-Entity-Reference-XXE" style="color:#444">Avoid using SAXTransformerFactory without restriction of XML External Entity Reference (XXE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039078,Avoid-using-SchemaFactory-without-restriction-of-XML-External-Entity-Reference-XXE" style="color:#444">Avoid using SchemaFactory without restriction of XML External Entity Reference (XXE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020456,Avoid-using-script-tag-in-HTML-template-used-by-Reactjs-components" style="color:#444">Avoid using "<script>" tag in HTML template used by React.js components</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020852,Avoid-using-script-tag-in-HTML-template-used-by-Reactjs-components-Typescript" style="color:#444">Avoid using "<script>" tag in HTML template used by React.js components (Typescript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020834,Avoid-using-script-tag-into-HTML-template-used-by-Angular-Application" style="color:#444">Avoid using "<script>" tag into HTML template used by Angular Application</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050040,Avoid-using-SecTransform-API" style="color:#444">Avoid using SecTransform API</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8234,Avoid-using-SecTransform-API" style="color:#444">Avoid using SecTransform API</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020786,Avoid-using-serialize-to-js-050-with-Nodejs" style="color:#444">Avoid using serialize-to-js 0.5.0 with Node.js</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7708,Avoid-using-sessionsetFlushModeFlushModeCOMMIT-FlushModeNEVER-or-FlushModeMANUAL" style="color:#444">Avoid using session.setFlushMode(FlushMode.COMMIT, FlushMode.NEVER or FlushMode.MANUAL)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020044,Avoid-using-setData-in-ondragstart-with-attribute-draggable-set-to-true" style="color:#444">Avoid using setData in ondragstart with attribute draggable set to true</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020080,Avoid-using-setInterval" style="color:#444">Avoid using setInterval()</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020860,Avoid-using-setInterval-TypeScript" style="color:#444">Avoid using setInterval() (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1042032,Avoid-using-setter-on-properties-for-the-data-coming-from-the-user-interface-with-Struts-2" style="color:#444">Avoid using setter on properties for the data coming from the user interface with Struts 2</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020078,Avoid-using-setTimeout" style="color:#444">Avoid using setTimeout()</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020870,Avoid-using-setTimeout-TypeScript" style="color:#444">Avoid using setTimeout() (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1007192,Avoid-using-short-tags-like-name" style="color:#444">Avoid using short tags like "<?=$name></a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065038,Avoid-using-signalh-CC" style="color:#444">Avoid using 'signal.h' (C/C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1074,Avoid-using-signals-management-Functions" style="color:#444">Avoid using signals management Functions</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065050,Avoid-using-sizeof-on-expressions-that-contain-side-effects" style="color:#444">Avoid using "sizeof" on expressions that contain side effects</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7334,Avoid-using-snprintf-function-C" style="color:#444">Avoid using snprintf() function (C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7166,Avoid-using-snprintf-function-C-Lang" style="color:#444">Avoid using snprintf() function (C Lang.)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7988,Avoid-using-snprintf-function-family" style="color:#444">Avoid using snprintf() function family</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020048,Avoid-using-source-tag-in-videoaudio-with-event-handler" style="color:#444">Avoid using source tag in video/audio with event handler</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1042050,Avoid-using-special-top-object-in-struts-200-struts-2324" style="color:#444">Avoid using special top object in struts 2.0.0 - struts 2.3.24</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1040046,Avoid-using-Spring-Data-with-XMLBeam-integration" style="color:#444">Avoid using Spring Data with XMLBeam integration</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1040044,Avoid-using-spring-integration-zip-in-versions-prior-to-101" style="color:#444">Avoid using spring-integration-zip in versions prior to 1.0.1</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1040042,Avoid-using-Spring-Security-in-combination-with-Spring-Framework-505" style="color:#444">Avoid using Spring Security in combination with Spring Framework 5.0.5</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1040038,Avoid-using-Spring-Security-Path-Matching-Inconsistency" style="color:#444">Avoid using Spring Security Path Matching Inconsistency</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8574,Avoid-using-statement-CALL-TRANSACTION-through-variable-PTCODE" style="color:#444">Avoid using statement CALL TRANSACTION through variable P_TCODE</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065022,Avoid-using-stdioh-CC" style="color:#444">Avoid using <stdio.h> (C/C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1040036,Avoid-using-STOMP-Spring-messaging-module" style="color:#444">Avoid using STOMP Spring messaging module</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7986,Avoid-using-streadd-function" style="color:#444">Avoid using streadd() function</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7318,Avoid-using-streadd-function-C" style="color:#444">Avoid using streadd() function (C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7178,Avoid-using-streadd-function-C-Lang" style="color:#444">Avoid using streadd() function (C Lang.)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7984,Avoid-using-strecpy-function" style="color:#444">Avoid using strecpy() function</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7312,Avoid-using-strecpy-function-C" style="color:#444">Avoid using strecpy() function (C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7180,Avoid-using-strecpy-function-C-Lang" style="color:#444">Avoid using strecpy() function (C Lang.)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020704,Avoid-using-string-concatenation-when-using-dirname-and-filename" style="color:#444">Avoid using string concatenation when using __dirname and __filename</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020894,Avoid-using-string-concatenation-when-using-nodejs-dirname-and-filename-variables-TypeScript" style="color:#444">Avoid using string concatenation when using nodejs __dirname and __filename variables (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1005046,Avoid-using-string-datatype-EGL" style="color:#444">Avoid using string datatype (EGL)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,3614,Avoid-using-StringEmpty-for-empty-string-tests" style="color:#444">Avoid using String.Empty for empty string tests</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8470,Avoid-using-STRING-without-overflow-check" style="color:#444">Avoid using STRING without overflow check</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7332,Avoid-using-strlen-function-C" style="color:#444">Avoid using strlen() function (C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7168,Avoid-using-strlen-function-C-Lang" style="color:#444">Avoid using strlen() function (C Lang.)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7982,Avoid-using-strlen-function-family" style="color:#444">Avoid using strlen() function family</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7980,Avoid-using-strtrns-function" style="color:#444">Avoid using strtrns() function</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7314,Avoid-using-strtrns-function-C" style="color:#444">Avoid using strtrns() function (C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7182,Avoid-using-strtrns-function-C-Lang" style="color:#444">Avoid using strtrns() function (C Lang.)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1042034,Avoid-using-Struts-REST-plugin-with-XStream-createXStream-to-deserialise-XML-requests-in-Struts-212-Struts-2333-Struts-25-Struts-2512" style="color:#444">Avoid using Struts REST plugin with XStream createXStream to deserialise XML requests in Struts 2.1.2 - Struts 2.3.33, Struts 2.5 - Struts 2.5.12</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1042040,Avoid-using-Struts-URLValidator-with-version-before-2513" style="color:#444">Avoid using Struts URLValidator with version before 2.5.13</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8572,Avoid-using-SUBMIT-statement-with-another-user-permission" style="color:#444">Avoid using SUBMIT statement with another user permission</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020022,Avoid-using-submitted-markup-containing-form-and-formaction-attributes" style="color:#444">Avoid using submitted markup containing "form" and "formaction" attributes</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,4606,Avoid-using-sun-Classes" style="color:#444">Avoid using 'sun.*' Classes</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7886,Avoid-using-SYSTEM-CALL" style="color:#444">Avoid using SYSTEM-CALL</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,4698,Avoid-using-Systemerr-and-Systemout-outside-a-try-catch-block" style="color:#444">Avoid using 'System.err' and 'System.out' outside a try catch block</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,4696,Avoid-using-Systemerr-and-Systemout-within-a-try-catch-block" style="color:#444">Avoid using 'System.err' and 'System.out' within a try catch block</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,4694,Avoid-using-Systemgc" style="color:#444">Avoid using 'System.gc'</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,4076,Avoid-using-temporary-Objects" style="color:#444">Avoid using temporary Objects</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020750,Avoid-using-the-file-path-validation-with-Nodejs-850" style="color:#444">Avoid using the file path validation with Node.js 8.5.0</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020908,Avoid-using-the-file-path-validation-with-Nodejs-850-TypeScript" style="color:#444">Avoid using the file path validation with Node.js 8.5.0 (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065014,Avoid-using-the-library-functions-bsearch-and-qsort-from-stdlibh-CC" style="color:#444">Avoid using the library functions bsearch and qsort from <stdlib.h> (C/C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039068,Avoid-using-the-Non-Serializable-Object-Stored-in-Session" style="color:#444">Avoid using the Non-Serializable Object Stored in Session</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8118,Avoid-using-the-RFCABAPINSTALLANDRUN-function-BETA" style="color:#444">Avoid using the RFC_ABAP_INSTALL_AND_RUN function BETA</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7978,Avoid-using-the-scanf-function-family" style="color:#444">Avoid using the scanf() function family</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7330,Avoid-using-the-scanf-function-family-C" style="color:#444">Avoid using the scanf() function family (C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7170,Avoid-using-the-scanf-function-family-C-Lang" style="color:#444">Avoid using the scanf() function family (C Lang.)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065024,Avoid-using-the-standard-library-time-and-date-functions-from-timeh-CC" style="color:#444">Avoid using the standard library time and date functions from "<time.h>" (C/C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065046,Avoid-using-the-unbounded-functions-of-cstring-library" style="color:#444">Avoid using the unbounded functions of <cstring> library</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1027014,Avoid-using-Thread-API-to-manage-activities-of-threads" style="color:#444">Avoid using Thread API to manage activities of threads</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,4702,Avoid-using-ThrowableprintStackTrace-outside-a-try-catch-block" style="color:#444">Avoid using 'Throwable.printStackTrace()' outside a try catch block</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,4700,Avoid-using-ThrowableprintStackTrace-within-a-try-catch-block" style="color:#444">Avoid using 'Throwable.printStackTrace()' within a try catch block</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1030002,Avoid-using-ThrowableprintStackTrace-with-no-argument-Kotlin" style="color:#444">Avoid using "Throwable.printStackTrace()" with no argument (Kotlin)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007210,Avoid-using-time-to-get-the-system-time-PHP" style="color:#444">Avoid using time() to get the system time (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020744,Avoid-using-TLS-library-before-Nodejs-9112-and-1041" style="color:#444">Avoid using TLS library before Node.js 9.11.2 and 10.4.1</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020906,Avoid-using-TLS-library-before-Nodejs-9112-and-1041-TypeScript" style="color:#444">Avoid using TLS library before Node.js 9.11.2 and 10.4.1 (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020338,Avoid-using-Tooltip-widget-with-jQuery-UI-version-older-than-1100" style="color:#444">Avoid using Tooltip widget with jQuery UI version older than 1.10.0</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,3102,Avoid-using-Transactions-in-an-ASP-Page" style="color:#444">Avoid using Transactions in an ASP Page</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039080,Avoid-using-TransformerFactory-without-restriction-of-XML-External-Entity-Reference-XXE" style="color:#444">Avoid using TransformerFactory without restriction of XML External Entity Reference (XXE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065070,Avoid-using-Trigraphs" style="color:#444">Avoid using Trigraphs</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1005048,Avoid-using-Unicode-or-dbCHar-datatypes-EGL" style="color:#444">Avoid using Unicode or dbCHar datatypes (EGL)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065072,Avoid-using-Unions" style="color:#444">Avoid using Unions</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1025052,Avoid-using-unnormalized-input-strings" style="color:#444">Avoid using unnormalized input strings</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020546,Avoid-using-unsanitized-AngularJS-application" style="color:#444">Avoid using unsanitized AngularJS application</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1055000,Avoid-using-unsecured-cookie" style="color:#444">Avoid using unsecured cookie</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1021050,Avoid-using-unsecured-cookie" style="color:#444">Avoid using unsecured cookie</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050066,Avoid-using-unsecured-cookie" style="color:#444">Avoid using unsecured cookie</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020554,Avoid-using-unsecured-cookie-AngularJS" style="color:#444">Avoid using unsecured cookie (AngularJS)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020096,Avoid-using-unsecured-cookie-Javascript" style="color:#444">Avoid using unsecured cookie (Javascript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020096,Avoid-using-unsecured-cookie-Javascript" style="color:#444">Avoid using unsecured cookie (Javascript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020096,Avoid-using-unsecured-cookie-Javascript" style="color:#444">Avoid using unsecured cookie (Javascript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020096,Avoid-using-unsecured-cookie-Javascript" style="color:#444">Avoid using unsecured cookie (Javascript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020734,Avoid-using-unsecured-cookie-Nodejs" style="color:#444">Avoid using unsecured cookie (Node.js)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020734,Avoid-using-unsecured-cookie-Nodejs" style="color:#444">Avoid using unsecured cookie (Node.js)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020734,Avoid-using-unsecured-cookie-Nodejs" style="color:#444">Avoid using unsecured cookie (Node.js)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020734,Avoid-using-unsecured-cookie-Nodejs" style="color:#444">Avoid using unsecured cookie (Node.js)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020458,Avoid-using-unsecured-cookie-Reactjs" style="color:#444">Avoid using unsecured cookie (React.js)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020864,Avoid-using-unsecured-cookie-TypeScript" style="color:#444">Avoid using unsecured cookie (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020218,Avoid-using-unsecured-cookie-Vuejs" style="color:#444">Avoid using unsecured cookie (Vue.js)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020886,Avoid-using-unsecured-cookie-with-express-TypeScript" style="color:#444">Avoid using unsecured cookie with express (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1039070,Avoid-using-URLequalsObject-obj-or-URLhashCode" style="color:#444">Avoid using URL.equals(Object obj) or URL.hashCode()</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020904,Avoid-using-urlparse-with-vulnerable-nodejs-versions-TypeScript" style="color:#444">Avoid using url.parse() with vulnerable nodejs versions (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020762,Avoid-using-urlparse-with-vulnerable-versions" style="color:#444">Avoid using url.parse() with vulnerable versions</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039088,Avoid-using-Validator-without-restriction-of-XML-External-Entity-Reference-XXE" style="color:#444">Avoid using Validator without restriction of XML External Entity Reference (XXE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1007160,Avoid-using-variable-without-testing-them-for-initialisation-PHP" style="color:#444">Avoid using variable without testing them for initialisation (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,4704,Avoid-using-Vector" style="color:#444">Avoid using Vector</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020206,Avoid-using-v-for-without-key" style="color:#444">Avoid using v-for without key</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020032,Avoid-using-video-poster-attributes-in-combination-with-javascript" style="color:#444">Avoid using video poster attributes in combination with javascript</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020210,Avoid-using-v-show-directive-inside-templates" style="color:#444">Avoid using v-show directive inside templates</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1024042,Avoid-using-weak-encryption-algorithm-Android" style="color:#444">Avoid using weak encryption algorithm (Android)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1022000,Avoid-using-weak-encryption-algorithm-as-DES-and-triple-DES" style="color:#444">Avoid using weak encryption algorithm as DES and triple DES</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1022000,Avoid-using-weak-encryption-algorithm-as-DES-and-triple-DES" style="color:#444">Avoid using weak encryption algorithm as DES and triple DES</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1022000,Avoid-using-weak-encryption-algorithm-as-DES-and-triple-DES" style="color:#444">Avoid using weak encryption algorithm as DES and triple DES</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1022000,Avoid-using-weak-encryption-algorithm-as-DES-and-triple-DES" style="color:#444">Avoid using weak encryption algorithm as DES and triple DES</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1030012,Avoid-using-weak-encryption-algorithm-as-DES-and-tripleDES-Kotlin" style="color:#444">Avoid using weak encryption algorithm as DES and tripleDES (Kotlin)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020018,Avoid-using-Web-SQL-databases" style="color:#444">Avoid using Web SQL databases</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1021020,Avoid-using-wildcard-imports" style="color:#444">Avoid using wildcard (*) imports</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1055040,Avoid-using-XMLDocument-without-restriction-of-XML-External-Entity-Reference-XXE-Swift" style="color:#444">Avoid using XMLDocument without restriction of XML External Entity Reference (XXE) (Swift)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8558,Avoid-using-XML-PARSE-without-VALIDATING" style="color:#444">Avoid using XML PARSE without 'VALIDATING'</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039036,Avoid-using-XMLReader-without-restriction-of-XML-External-Entity-Reference-XXE" style="color:#444">Avoid using XMLReader without restriction of XML External Entity Reference (XXE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039040,Avoid-using-XMLStreamReader-without-restriction-of-XML-External-Entity-Reference-XXE" style="color:#444">Avoid using XMLStreamReader without restriction of XML External Entity Reference (XXE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039094,Avoid-using-XPathExpression-without-a-configurable-secure-parser-XXE" style="color:#444">Avoid using XPathExpression without a configurable secure parser (XXE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039038,Avoid-using-XPathFactory-without-restriction-of-XML-External-Entity-Reference-XXE" style="color:#444">Avoid using XPathFactory without restriction of XML External Entity Reference (XXE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7382,Avoid-Validator-field-without-Form-Field" style="color:#444">Avoid Validator field without Form Field</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050046,Avoid-weak-encryption-algorithm" style="color:#444">Avoid weak encryption algorithm</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8226,Avoid-Weak-Encryption-Algorithm" style="color:#444">Avoid Weak Encryption Algorithm</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1055038,Avoid-weak-encryption-algorithm-Swift" style="color:#444">Avoid weak encryption algorithm (Swift)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8232,Avoid-weak-encryption-providing-sufficient-key-size" style="color:#444">Avoid weak encryption providing sufficient key size</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050044,Avoid-weak-encryption-providing-sufficient-key-size" style="color:#444">Avoid weak encryption providing sufficient key size</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1027010,Avoid-weak-encryption-providing-sufficient-key-size-NET" style="color:#444">Avoid weak encryption providing sufficient key size (.NET)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1055008,Avoid-weak-encryption-providing-sufficient-key-size-Swift" style="color:#444">Avoid weak encryption providing sufficient key size (Swift)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007278,Avoid-weak-hash-functions-PHP" style="color:#444">Avoid weak hash functions (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1030000,Avoid-when-statement-or-expression-without-an-else-Kotlin" style="color:#444">Avoid "when" statement or expression without an else (Kotlin)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020050,Avoid-white-listing-the-dirname-attribute-in-user-generated-content" style="color:#444">Avoid white-listing the "dirname" attribute in user generated content</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020538,Avoid-wrapping-angularelement-objects-with-jQuery-or-" style="color:#444">Avoid wrapping angular.element objects with jQuery or $</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1019006,Avoid-wrong-suppressAuditFailure-and-serviceAuthorizationAuditLevel-parameters-when-enabling-WCF-service-security-audit-feature" style="color:#444">Avoid wrong suppressAuditFailure and serviceAuthorizationAuditLevel parameters when enabling WCF service security audit feature</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1043084,Avoid-XML-schemas-with-unbounded-occurrences" style="color:#444">Avoid XML schemas with unbounded occurrences</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1034050,Avoid-XPath-injection-PHP" style="color:#444">Avoid XPath injection (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1021084,Avoid-XPath-injection-Python" style="color:#444">Avoid XPath injection (Python)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7750,Avoid-XPath-injection-vulnerabilities-CWE-91-" style="color:#444">Avoid XPath injection vulnerabilities ( CWE-91 )</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8504,Avoid-XPath-injection-vulnerabilities-through-API-requests" style="color:#444">Avoid XPath injection vulnerabilities through API requests</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8530,Avoid-XQuery-injection" style="color:#444">Avoid XQuery injection</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8534,Avoid-XQuery-injection-through-API-requests" style="color:#444">Avoid XQuery injection through API requests</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1005086,Avoif-functions-having-creator-to-prefix-table-names-in-SQL-statements-and-in-SQL-records-EGL" style="color:#444">Avoif functions having creator to prefix table names in SQL statements and in SQL records (EGL)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1024004,A-Writing-permission-is-required-to-write-data-of-Content-Provider" style="color:#444">A Writing permission is required to write data of Content Provider</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7864,BAPIs-must-not-cause-the-Program-to-abort-or-terminate" style="color:#444">BAPIs must not cause the Program to abort or terminate</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8138,Beans-with-normal-scope-must-be-proxyable-to-avoid-runtime-errors" style="color:#444">Beans with normal scope must be proxyable to avoid runtime errors</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065108,Bit-fields-shall-be-either-unsigned-integral-or-enumeration-with-underlying-type-of-unsigned-integral-type" style="color:#444">Bit-fields shall be either unsigned integral, or enumeration (with underlying type of unsigned integral type).</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8100,Blocking-synchronous-calls-should-have-associated-timeouts" style="color:#444">Blocking synchronous calls should have associated timeouts</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7266,Call-baseDispose-or-MyBaseFinalize-in-the-finally-block-of-Disposebool-methods" style="color:#444">Call 'base.Dispose()' or 'MyBase.Finalize()' in the "finally" block of 'Dispose(bool)' methods</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7252,Call-superfinalize-in-the-finally-block-of-finalize-methods" style="color:#444">Call 'super.finalize ()' in the "finally" block of 'finalize ()' methods</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1104008,CDS-View-AccessControlauthorizationCheck-should-not-be-set-to-NOTREQUIRED-S4HANA" style="color:#444">CDS View AccessControl.authorizationCheck should not be set to '#NOT_REQUIRED' (S4/HANA)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8030,Check-alphanumeric-data-before-moving-it-into-numeric-data" style="color:#444">Check alphanumeric data before moving it into numeric data</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8160,Check-PCB-status-code-after-DLI-queries" style="color:#444">Check PCB status code after DLI queries</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,2278,Check-the-use-of-foreach-custom-tag-library" style="color:#444">Check the use of "foreach" custom tag library</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7202,Check-usage-of-and-on-objects" style="color:#444">Check usage of '==' and '!=' on objects</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1000002,Check-usage-of-and-on-XX-Shared-objects" style="color:#444">Check usage of '==' and '!=' on XX-Shared objects</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8162,CICS-return-code-should-be-checked" style="color:#444">CICS return code should be checked</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8104,Close-database-resources-ASAP" style="color:#444">Close database resources ASAP</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,3612,Close-SQL-connection-ASAP" style="color:#444">Close SQL connection ASAP</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8108,Close-the-outermost-stream-ASAP" style="color:#444">Close the outermost stream ASAP</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1000006,Close-the-outermost-stream-ASAP-in-XX-Shared-object" style="color:#444">Close the outermost stream ASAP in XX-Shared object</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7508,Collection-typed-attributes-getter-must-be-defined-with-the-correct-interface" style="color:#444">Collection-typed attributes getter must be defined with the correct interface</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1101076,Column-references-should-be-qualified" style="color:#444">Column references should be qualified</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065104,Converting-a-multiplication-to-a-larger-type-should-be-done-before-the-multiplication-takes-place" style="color:#444">Converting a multiplication to a larger type should be done before the multiplication takes place</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1040010,Cookies-must-be-deleted-during-the-logout" style="color:#444">Cookies must be deleted during the logout</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020616,Create-Keys-for-CRUD-Statements-SAPUI5" style="color:#444">Create Keys for CRUD Statements (SAPUI5)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1039026,CWE-1004-Avoid-creating-cookie-without-setting-httpOnly-option-JEE" style="color:#444">CWE-1004 : Avoid creating cookie without setting httpOnly option (JEE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1040006,CWE-1021Ensure-that-Content-Security-Policy-is-set-for-Spring-Application" style="color:#444">CWE-1021:Ensure that Content-Security-Policy is set for Spring Application</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007284,CWE-200-Avoid-Cookie-Misconfiguration-httpOnly-flag-PHP" style="color:#444">CWE-200: Avoid Cookie Misconfiguration (httpOnly flag) (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007280,CWE-214-Avoid-System-Information-Leakage-PHP" style="color:#444">CWE-214: Avoid System Information Leakage (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1039012,CWE-293-Avoid-using-referer-header-field-in-HTTP-request" style="color:#444">CWE-293: Avoid using referer header field in HTTP request</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007248,CWE-311-Use-sufficient-SSLTLS-context-PHP" style="color:#444">CWE-311: Use sufficient SSL\TLS context (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1039002,CWE-319-Avoid-using-Deprecated-SSL-protocols-to-secure-connection" style="color:#444">CWE-319: Avoid using Deprecated SSL protocols to secure connection</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1039020,CWE-327-Avoid-using-javaxcryptoNullCipher" style="color:#444">CWE-327: Avoid using javax.crypto.NullCipher</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1039010,CWE-327Avoid-using-risky-cryptographic-hash-JEE" style="color:#444">CWE-327:Avoid using risky cryptographic hash (JEE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1039028,CWE-327-Avoid-weak-encryption-providing-not-sufficient-key-size-JEE" style="color:#444">CWE-327 : Avoid weak encryption providing not sufficient key size (JEE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8242,CWE-330-Use-of-insufficiently-random-values" style="color:#444">CWE-330: Use of insufficiently random values</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1039006,CWE-336-Avoid-using-predictable-SecureRandom-Seeds" style="color:#444">CWE-336: Avoid using predictable SecureRandom Seeds</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1040002,CWE-352Spring-Security-CSRF-Protection-must-not-be-disabled" style="color:#444">CWE-352:Spring Security CSRF Protection must not be disabled</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1039014,CWE-353-Avoid-using-Cipher-with-no-HMAC-to-ensure-data-integrity" style="color:#444">CWE-353: Avoid using Cipher with no HMAC to ensure data integrity</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007264,CWE-434-Avoid-unrestricted-file-upload-PHP" style="color:#444">CWE-434: Avoid unrestricted file upload (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8218,CWE-434-Content-type-should-be-checked-when-receiving-a-HTTP-Post" style="color:#444">CWE-434: Content type should be checked when receiving a HTTP Post</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1040014,CWE-439Avoid-using-Spring-Securitys-debug-mode" style="color:#444">CWE-439:Avoid using Spring Security's debug mode</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8238,CWE-501-Trust-boundary-violation" style="color:#444">CWE-501: Trust boundary violation</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007274,CWE-502-Avoid-Object-Injection-PHP" style="color:#444">CWE-502: Avoid Object Injection (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1039008,CWE-600-Avoid-thrown-Exceptions-in-servlet-methods" style="color:#444">CWE-600: Avoid thrown Exceptions in servlet methods</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1039016,CWE-601-Avoid-Unvalidated-Redirect" style="color:#444">CWE-601: Avoid Unvalidated Redirect</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007282,CWE-614-Avoid-Cookie-Misconfiguration-secure-flag-PHP" style="color:#444">CWE-614: Avoid Cookie Misconfiguration (secure flag) (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1039024,CWE-614-Avoid-using-unsecured-cookie-JEE" style="color:#444">CWE-614 : Avoid using unsecured cookie (JEE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8240,CWE-614-Sensitive-Cookie-in-HTTPS-Session-Without-Secure-Attribute" style="color:#444">CWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007250,CWE-624-Avoid-pregreplace-with-e-option-PHP" style="color:#444">CWE-624: Avoid preg_replace with /e option (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007252,CWE-661-Avoid-filesystem-function-calls-without-sanitizing-user-input-PHP" style="color:#444">CWE-661: Avoid filesystem function calls without sanitizing user input (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8214,CWE-672-Expired-or-Released-Resource-should-not-be-used" style="color:#444">CWE-672: Expired or Released Resource should not be used</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8216,CWE-681-Avoid-numerical-data-corruption-during-incompatible-mutation" style="color:#444">CWE-681: Avoid numerical data corruption during incompatible mutation</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007262,CWE-73-Avoid-file-name-or-path-controlled-by-raw-user-input-PHP" style="color:#444">CWE-73: Avoid file name or path controlled by raw user input (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1039018,CWE-759-Avoid-using-cryptography-hash-with-hardcoded-salt-JEE" style="color:#444">CWE-759: Avoid using cryptography hash with hardcoded salt (JEE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007260,CWE-78-Avoid-Command-Injection-Improper-Neutralization-of-Special-Elements-used-in-an-OS-Command-PHP" style="color:#444">CWE-78: Avoid Command Injection - Improper Neutralization of Special Elements used in an OS Command (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8222,CWE-798-Use-of-Hard-coded-Credentials" style="color:#444">CWE-798 : Use of Hard-coded Credentials</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007258,CWE-79-Avoid-cross-site-scripting-Improper-Neutralization-of-input-during-web-page-generation-PHP" style="color:#444">CWE-79: Avoid cross-site scripting - Improper Neutralization of input during web page generation (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007256,CWE-79-Avoid-cross-site-scripting-Improper-Neutralization-of-input-in-script-tag-during-web-page-generation-PHP" style="color:#444">CWE-79: Avoid cross-site scripting - Improper Neutralization of input in script tag during web page generation (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007244,CWE-79-Avoid-use-of-raw-user-input-that-can-expose-XSS-vulnerability-PHP" style="color:#444">CWE-79: Avoid use of raw user input that can expose XSS vulnerability (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1039004,CWE-807-Avoid-using-HttpServletRequestgetRequestedSessionId" style="color:#444">CWE-807: Avoid using HttpServletRequest.getRequestedSessionId()</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007270,CWE-89-Avoid-SQL-Injection-Improper-Neutralization-of-Special-Elements-used-in-an-SQL-Command-in-dynamic-query-PHP" style="color:#444">CWE-89: Avoid SQL Injection - Improper Neutralization of Special Elements used in an SQL Command in dynamic query (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007266,CWE-89-Avoid-SQL-Injection-Improper-Neutralization-of-Special-Elements-used-in-an-SQL-Command-within-single-quotes-PHP" style="color:#444">CWE-89: Avoid SQL Injection - Improper Neutralization of Special Elements used in an SQL Command within single quotes (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007268,CWE-89-Avoid-SQL-Injection-Improper-Neutralization-of-Special-Elements-used-in-an-SQL-Command-without-quotes-PHP" style="color:#444">CWE-89: Avoid SQL Injection - Improper Neutralization of Special Elements used in an SQL Command without quotes (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1039022,CWE-916Cryptographic-HashAvoid-using-Insecure-PBE-Iteration-Count" style="color:#444">CWE-916:Cryptographic Hash:Avoid using Insecure PBE Iteration Count</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1007246,CWE-98-Avoid-use-of-user-input-that-can-expose-Stream-Injection-vulnerability-PHP" style="color:#444">CWE-98: Avoid use of user input that can expose Stream Injection vulnerability (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8412,CXROOT-should-not-be-used-in-TRY-CATCH-ENDTRY-block" style="color:#444">"CX_ROOT" should not be used in TRY .. CATCH.. ENDTRY block</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,3616,Data-Access-must-be-based-on-Stored-Procedure-Calls" style="color:#444">Data Access must be based on Stored Procedure Calls</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7258,DataReader-must-be-called-using-CommandBehaviorCloseConnection-enumeration" style="color:#444">DataReader must be called using CommandBehavior.CloseConnection enumeration</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,6124,Datawindows-accessing-database-must-be-based-on-procedure" style="color:#444">Datawindows accessing database must be based on procedure</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7254,Declare-as-static-all-Methods-not-using-Instance-Fields" style="color:#444">Declare as static all Methods not using Instance Fields</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7270,Declare-as-static-all-Methods-not-using-Instance-Fields" style="color:#444">Declare as static all Methods not using Instance Fields</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7506,Define-equals-and-hashCode-for-component" style="color:#444">Define equals() and hashCode() for component</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7268,Dispose-methods-should-call-GCSuppressFinalize" style="color:#444">Dispose() methods should call GC.SuppressFinalize</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8010,Do-not-overload-the-ampersand-comma-logical-AND-or-logical-OR-operators" style="color:#444">Do not overload the ampersand, comma, logical AND or logical OR operators</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065054,Do-not-override-the-standard-library-functions-CC" style="color:#444">Do not override the standard library functions (C/C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8068,Do-not-return-a-dereferenced-pointer-allocated-inside-the-function" style="color:#444">Do not return a dereferenced pointer allocated inside the function</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8124,Do-not-use-function-module-DBEXISTSINDEX-HANA-BETA" style="color:#444">Do not use function module DB_EXISTS_INDEX (HANA) BETA</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1012026,Do-not-use-MONMSG-CPF0000-without-EXEC-CL400" style="color:#444">Do not use MONMSG CPF0000 without EXEC (CL400)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1004848,Do-not-use-MONMSG-CPF0000-without-EXEC-CL400" style="color:#444">Do not use MONMSG CPF0000 without EXEC (CL400)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,4744,EJB-Entity-access-through-their-local-Interface" style="color:#444">EJB Entity access through their local Interface</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,4746,EJB-Session-access-through-their-local-Interface" style="color:#444">EJB Session access through their local Interface</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020542,Enable-Content-Security-Policy-when-creating-an-AngularJS-application" style="color:#444">Enable Content Security Policy when creating an AngularJS application</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1005072,Enable-Exception-for-migrated-programs-throwNrfEofExceptions-property-must-be-set-to-YES-EGL" style="color:#444">Enable Exception for migrated programs - throwNrfEofExceptions property must be set to YES (EGL)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7372,Enable-Struts-Validator-plugin" style="color:#444">Enable Struts Validator plugin</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,2592,Encapsulation-compliance" style="color:#444">Encapsulation compliance</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1065110,Ensure-arrays-and-containers-are-accessed-using-unsigned-values" style="color:#444">Ensure arrays and containers are accessed using unsigned values</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1043052,Ensure-aspnetUseLegacyFormsAuthenticationTicketCompatibility-is-set-to-true" style="color:#444">Ensure aspnet:UseLegacyFormsAuthenticationTicketCompatibility is set to true</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020450,Ensure-catching-Javascript-error-in-React-components" style="color:#444">Ensure catching Javascript error in React components</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020856,Ensure-catching-Typescript-error-in-React-components" style="color:#444">Ensure catching Typescript error in React components</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1034064,Ensure-enabling-httpOnly-option-when-creating-session-PHP" style="color:#444">Ensure enabling httpOnly option when creating session (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065026,Ensure-exception-objects-are-always-caught-by-reference-C" style="color:#444">Ensure exception objects are always caught by reference (C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039096,Ensure-httpOnly-option-is-enabled-when-creating-session-JEE" style="color:#444">Ensure httpOnly option is enabled when creating session (JEE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020730,Ensure-Nodejs-filesystem-are-closed" style="color:#444">Ensure Node.js filesystem are closed</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020892,Ensure-Nodejs-filesystem-are-closed-TypeScript" style="color:#444">Ensure Node.js filesystem are closed (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1043022,Ensure-not-to-disable-Secure-attribute-while-creating-cookie-C" style="color:#444">Ensure not to disable Secure attribute while creating cookie (C#)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039102,Ensure-SameSite-option-is-enabled-when-creating-session-JEE" style="color:#444">Ensure SameSite option is enabled when creating session (JEE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1034068,Ensure-SameSite-option-is-enabled-when-creating-session-PHP" style="color:#444">Ensure SameSite option is enabled when creating session (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1039098,Ensure-secure-option-is-enabled-when-creating-session-JEE" style="color:#444">Ensure secure option is enabled when creating session (JEE)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1040024,Ensure-Spring-Boot-MisConfiguration-Shutdown-Actuator-Endpoint-is-Enabled" style="color:#444">Ensure Spring Boot MisConfiguration-Shutdown Actuator Endpoint is Enabled</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1034070,Ensure-strict-mode-is-enabled-when-creating-session-PHP" style="color:#444">Ensure strict mode is enabled when creating session (PHP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1040004,Ensure-that-any-application-request-is-authenticated-with-HTTP-basic" style="color:#444">Ensure that any application request is authenticated with HTTP basic</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020718,Ensure-that-browser-cannot-cache-or-store-a-page" style="color:#444">Ensure that browser cannot cache or store a page</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020884,Ensure-that-browser-cannot-cache-or-store-a-page-when-using-express-TypeScript" style="color:#444">Ensure that browser cannot cache or store a page when using express (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020726,Ensure-that-CSRF-Protection-is-enabled" style="color:#444">Ensure that CSRF Protection is enabled</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1043044,Ensure-that-CSRF-Protection-is-enabled-ASPNET-MVC" style="color:#444">Ensure that CSRF Protection is enabled (ASP.NET MVC)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020890,Ensure-that-CSRF-Protection-is-enabled-when-using-express-TypeScript" style="color:#444">Ensure that CSRF Protection is enabled when using express (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065004,Ensure-that-dynamically-allocated-memory-on-local-pointer-in-functionsmethods-is-freed" style="color:#444">Ensure that dynamically allocated memory on local pointer in functions/methods is freed.</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1040012,Ensure-that-HTTP-Session-is-invalidated-during-logout" style="color:#444">Ensure that HTTP Session is invalidated during logout</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8184,Ensure-that-iOS-Projects-are-ARC-enabled" style="color:#444">Ensure that iOS Projects are ARC enabled</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050036,Ensure-that-iOS-Projects-are-ARC-enabled" style="color:#444">Ensure that iOS Projects are ARC enabled</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8182,Ensure-that-LAContext-evaluatePolicy-reply-block-is-not-empty" style="color:#444">Ensure that LAContext evaluatePolicy: reply block is not empty</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050034,Ensure-that-LAContext-evaluatePolicy-reply-block-is-not-empty" style="color:#444">Ensure that LAContext evaluatePolicy: reply block is not empty</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1055014,Ensure-that-LAContext-evaluatePolicy-reply-block-is-not-empty-Swift" style="color:#444">Ensure that LAContext evaluatePolicy reply block is not empty (Swift)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050032,Ensure-that-LAContext-evaluatePolicy-reply-block-success-is-checked" style="color:#444">Ensure that LAContext evaluatePolicy: reply block success is checked</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8180,Ensure-that-LAContext-evaluatePolicy-reply-block-success-is-checked" style="color:#444">Ensure that LAContext evaluatePolicy: reply block success is checked</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1055016,Ensure-that-LAContext-evaluatePolicy-reply-block-success-is-checked-Swift" style="color:#444">Ensure that LAContext evaluatePolicy reply block success is checked (Swift)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1040008,Ensure-that-login-form-is-declared-after-requesting-authorization-and-authentication" style="color:#444">Ensure that login form is declared after requesting authorization and authentication</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020724,Ensure-that-marked-is-sanitized" style="color:#444">Ensure that marked is sanitized</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065058,Ensure-that-there-is-at-least-one-exception-handler-to-catch-all-otherwise-unhandled-exceptions-in-the-main-functionC" style="color:#444">Ensure that there is at least one exception handler to catch-all otherwise unhandled exceptions in the main function(C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020706,Ensure-the-Content-Security-Policy-is-activated" style="color:#444">Ensure the Content-Security-Policy is activated</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020902,Ensure-the-Content-Security-Policy-is-activated-with-express-TypeScript" style="color:#444">Ensure the Content-Security-Policy is activated with express (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020882,Ensure-the-express-X-Frame-Options-header-is-setup-TypeScript" style="color:#444">Ensure the express X-Frame-Options header is setup (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020880,Ensure-the-express-X-Powered-By-header-is-disabled-TypeScript" style="color:#444">Ensure the express X-Powered-By header is disabled (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1020878,Ensure-the-express-X-XSS-Protection-header-is-enabled-TypeScript" style="color:#444">Ensure the express X-XSS-Protection header is enabled (TypeScript)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1021126,Ensure-the-HTTP-Strict-Transport-Security-header-HSTS-is-set-up-for-Flask-Python" style="color:#444">Ensure the HTTP Strict-Transport-Security header (HSTS) is set up for Flask (Python)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050030,Ensure-the-Objective-C-error-condition-check-is-not-fragile" style="color:#444">Ensure the Objective-C error condition check is not fragile</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8178,Ensure-the-Objective-C-error-condition-check-is-not-fragile" style="color:#444">Ensure the Objective-C error condition check is not fragile</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1021114,Ensure-the-Strict-Transport-Security-header-HSTS-is-set-up-for-FastAPI-Python" style="color:#444">Ensure the Strict-Transport-Security header (HSTS) is set up for FastAPI (Python)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020712,Ensure-the-X-Frame-Options-header-is-setup" style="color:#444">Ensure the X-Frame-Options header is setup</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1043030,Ensure-the-X-Frame-Options-header-is-setup-ASPNET" style="color:#444">Ensure the X-Frame-Options header is setup (ASP.NET)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020708,Ensure-the-X-Powered-By-header-is-disabled" style="color:#444">Ensure the X-Powered-By header is disabled</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020710,Ensure-the-X-XSS-Protection-header-is-enabled" style="color:#444">Ensure the X-XSS-Protection header is enabled</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1040020,Ensure-to-enable-Spring-Boot-Actuator-Endpoint" style="color:#444">Ensure to enable Spring Boot Actuator Endpoint</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1040022,Ensure-to-enable-Spring-Boot-Admin-MBean" style="color:#444">Ensure to enable Spring Boot Admin MBean</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1043062,Ensure-to-limit-users-access-only-to-authorized-resources-C" style="color:#444">Ensure to limit users access only to authorized resources (C#)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1040026,Ensure-To-Specify-Http-Methods-In-RequestMapping" style="color:#444">"Ensure To Specify Http Methods In RequestMapping</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020214,Ensure-to-turn-off-and-clear-event-listeners-after-component-is-destroyed" style="color:#444">Ensure to turn off and clear event listeners after component is destroyed</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020722,Ensure-to-use-secure-HTTPS-protocol" style="color:#444">Ensure to use secure HTTPS protocol</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1101092,Errors-should-be-handled-in-stored-procedures-and-functions" style="color:#444">Errors should be handled in stored procedures and functions</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1022002,Expired-or-Released-Resource-should-not-be-usedCWE-672" style="color:#444">Expired or Released Resource should not be used(CWE-672)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7150,Favor-PreparedStatement-or-CallableStatement-over-Statement" style="color:#444">Favor PreparedStatement or CallableStatement over Statement</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7698,Files-should-be-declared-with-a-FILE-STATUS" style="color:#444">Files should be declared with a FILE-STATUS</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7192,Form-Bean-must-extend-Validator-Class" style="color:#444">Form Bean must extend Validator Class</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1006014,Function-should-not-be-named-as-UNIX-commands-Shell" style="color:#444">Function should not be named as UNIX commands (Shell)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065082,Handlers-of-a-function-try-block-implementation-of-a-class-constructor-ordestructor-shall-not-reference-non-static-members-from-this-class-or-its-bases" style="color:#444">Handlers of a function-try-block implementation of a class constructor ordestructor shall not reference non-static members from this class or its bases.</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8,HealthNet-Ensure-all-Files-opened-are-actually-closed" style="color:#444">HealthNet : Ensure all Files opened are actually closed</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020304,Implement-success-and-error-callbacks-when-using-ajax-interface" style="color:#444">Implement success and error callbacks when using $.ajax interface</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,5092,Include-a-WHEN-OTHER-clause-when-using-EVALUATE" style="color:#444">Include a WHEN OTHER clause when using EVALUATE</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8048,Invoke-delete-with-the-same-form-as-the-matching-new" style="color:#444">Invoke 'delete' with the same form as the matching 'new'</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1018862,JDBC-connection-must-use-Global-variable-for-username-and-password-parametrization-of-database-url-TIBCO-BW" style="color:#444">JDBC connection must use Global variable for username and password parametrization of database url (TIBCO BW)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7148,JSP-pages-should-always-be-accessed-through-their-tiles-definition" style="color:#444">JSP pages should always be accessed through their tiles definition</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7146,JSP-pages-should-only-reference-Java-Objects-associated-to-J2EE-Scoped-Bean" style="color:#444">JSP pages should only reference Java Objects associated to J2EE Scoped Bean</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7384,Large-Programs-should-be-called-dynamically" style="color:#444">Large Programs should be called dynamically</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1024006,Limit-the-accessibility-of-your-apps-Content-Provider" style="color:#444">Limit the accessibility of your app's Content Provider</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002106,Limit-the-use-of-the-attribute-ALLOCATE-in-Fortran-90-Functions-Fortran" style="color:#444">Limit the use of the attribute ALLOCATE in Fortran-90 Functions (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002108,Limit-the-use-of-the-attribute-ALLOCATE-in-Fortran-90-Modules-Fortran" style="color:#444">Limit the use of the attribute ALLOCATE in Fortran-90 Modules (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002102,Limit-the-use-of-the-attribute-ALLOCATE-in-Fortran-90-Programs-Fortran" style="color:#444">Limit the use of the attribute ALLOCATE in Fortran-90 Programs (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002104,Limit-the-use-of-the-attribute-ALLOCATE-in-Fortran-90-Subroutines-Fortran" style="color:#444">Limit the use of the attribute ALLOCATE in Fortran-90 Subroutines (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1024022,Media-Resources-should-be-released" style="color:#444">Media Resources should be released</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8056,Method-override-fails-due-to-mismatch-of-constvolatile-qualifiers" style="color:#444">Method override fails due to mismatch of const/volatile qualifiers</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8194,Method-override-fails-due-to-slight-differences-when-compared-with-base-class-method" style="color:#444">Method override fails due to slight differences when compared with base class method</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1004806,MONMSG-command-must-be-formated-CL400" style="color:#444">MONMSG command must be formated (CL400)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1012010,MONMSG-command-must-be-formated-CL400" style="color:#444">MONMSG command must be formated (CL400)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7554,Never-access-an-IMS-segment-with-an-access-mode-not-authorized-in-the-PCB" style="color:#444">Never access an IMS segment with an access mode not authorized in the PCB</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1027034,Never-catch-NullReferenceException" style="color:#444">Never catch NullReferenceException</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8072,Never-define-collection-of-stdautoptr" style="color:#444">Never define collection of 'std::auto_ptr'</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1040028,Never-Enable-Spring-Boot-Devtools-in-Production" style="color:#444">Never Enable Spring Boot Devtools in Production</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7910,Never-exit-a-finally-block-with-a-return-break-continue-or-throw" style="color:#444">Never exit a finally block with a return, break, continue, or throw</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8188,Never-perform-C-style-cast-between-incompatible-Class-pointers" style="color:#444">Never perform C-style cast between incompatible Class pointers</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8002,Never-perform-C-style-cast-between-incompatible-Class-pointers" style="color:#444">Never perform C-style cast between incompatible Class pointers</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,678,Never-throw-an-exception-from-a-Destructor" style="color:#444">Never throw an exception from a Destructor</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7688,Never-truncate-data-in-MOVE-statements" style="color:#444">Never truncate data in MOVE statements</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7976,Never-use-gets-function" style="color:#444">Never use gets() function</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7160,Never-use-gets-function-C" style="color:#444">Never use gets() function (C)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7324,Never-use-gets-function-C" style="color:#444">Never use gets() function (C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7548,Never-use-incompatible-statements-with-the-CICS-environment" style="color:#444">Never use incompatible statements with the CICS environment</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7974,Never-use-scanf-function" style="color:#444">Never use scanf() function</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7320,Never-use-scanf-function-C" style="color:#444">Never use scanf() function (C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7158,Never-use-scanf-function-C-Lang" style="color:#444">Never use scanf() function (C Lang.)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7972,Never-use-sprintf-or-vsprintf-functions" style="color:#444">Never use sprintf() or vsprintf() functions</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7316,Never-use-sprintf-or-vsprintf-functions-C" style="color:#444">Never use sprintf() or vsprintf() functions (C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7164,Never-use-sprintf-or-vsprintf-functions-C-Lang" style="color:#444">Never use sprintf() or vsprintf() functions (C Lang.)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8196,Never-use-stdautoptr" style="color:#444">Never use 'std::auto_ptr'</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7968,Never-use-strcat-function" style="color:#444">Never use strcat() function</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8164,Never-use-strcat-function" style="color:#444">Never use strcat() function</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050016,Never-use-strcat-function" style="color:#444">Never use strcat() function</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7310,Never-use-strcat-function-C" style="color:#444">Never use strcat() function (C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1100,Never-use-strcat-function-C-Lang" style="color:#444">Never use strcat() function (C Lang.)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8166,Never-use-strcpy-function" style="color:#444">Never use strcpy() function</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050018,Never-use-strcpy-function" style="color:#444">Never use strcpy() function</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7970,Never-use-strcpy-function" style="color:#444">Never use strcpy() function</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7338,Never-use-strcpy-function-C" style="color:#444">Never use strcpy() function (C++)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7162,Never-use-strcpy-function-C-Lang" style="color:#444">Never use strcpy() function (C Lang.)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7528,Never-use-the-ON-CHANGE-OF-statement" style="color:#444">Never use the ON CHANGE OF statement</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1101054,Never-use-WHEN-OTHER-THEN-NULL" style="color:#444">Never use WHEN OTHER THEN NULL</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7484,Objects-in-Universe-using-inexistent-TableColumn" style="color:#444">Objects in Universe using inexistent Table/Column</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1039042,OptionalisPresent-should-be-used-before-invoking-Optionalget-to-access-value" style="color:#444">'Optional.isPresent' should be used before invoking 'Optional.get' to access value</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7724,Overriden-equals-Methods-in-persistent-Subclasses-should-only-reference-properties-from-the-persistent-base-Class" style="color:#444">Overriden equals() Methods in persistent Subclasses should only reference properties from the persistent base Class</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,2232,Pages-should-use-error-handling-page" style="color:#444">Pages should use error handling page</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1040016,PermitAll-or-user-role-should-be-specified-to-access-URLs-of-the-application" style="color:#444">PermitAll or user role should be specified to access URL(s) of the application</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8156,Persistent-classes-should-implement-GetHashCode-and-Equals" style="color:#444">Persistent classes should implement GetHashCode() and Equals()</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7504,Persistent-classes-should-Implement-hashCode-and-equals" style="color:#444">Persistent classes should Implement hashCode() and equals()</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7494,Persistent-class-methods-equals-and-hashCode-must-access-its-fields-through-getter-methods" style="color:#444">Persistent class method's equals() and hashCode() must access its fields through getter methods</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1020606,Prefer-using-Asynchronous-Loading" style="color:#444">Prefer using Asynchronous Loading</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8584,Prefer-using-OPEN-DATASET-statement-with-file-Path-instead-of-file-name" style="color:#444">Prefer using OPEN DATASET statement with file Path instead of file name</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1045010,Prefer-using-version-number-instead-of-timestamp-for-Hibernate-Entity" style="color:#444">Prefer using version number instead of timestamp for Hibernate Entity</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002020,Process-the-default-case-in-the-instruction-SELECT-CASE-in-Fortran-90-Functions-Fortran" style="color:#444">Process the default case in the instruction SELECT CASE in Fortran-90 Functions (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002022,Process-the-default-case-in-the-instruction-SELECT-CASE-in-Fortran-90-Modules-Fortran" style="color:#444">Process the default case in the instruction SELECT CASE in Fortran-90 Modules (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002016,Process-the-default-case-in-the-instruction-SELECT-CASE-in-Fortran-90-Programs-Fortran" style="color:#444">Process the default case in the instruction SELECT CASE in Fortran-90 Programs (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002018,Process-the-default-case-in-the-instruction-SELECT-CASE-in-Fortran-90-Subroutines-Fortran" style="color:#444">Process the default case in the instruction SELECT CASE in Fortran-90 Subroutines (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7560,Programs-accessing-relational-Databases-must-include-the-SQLCA-Copybook" style="color:#444">Programs accessing relational Databases must include the SQLCA Copybook</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1021048,Protect-sensitive-data-in-config-files-from-disclosure" style="color:#444">Protect sensitive data in config files from disclosure</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7256,Provide-a-private-default-Constructor-for-utility-Classes" style="color:#444">Provide a private default Constructor for utility Classes</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7272,Provide-a-private-default-Constructor-for-utility-Classes" style="color:#444">Provide a private default Constructor for utility Classes</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7996,Provide-a-private-default-Constructor-for-utility-Classes-or-use-free-Functions-in-a-Namespace" style="color:#444">Provide a private default Constructor for utility Classes or use free Functions in a Namespace</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1060112,Review-APIs-not-accessed-by-frontend-functions" style="color:#444">Review APIs not accessed by frontend functions</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1060104,Review-APIs-returning-sensitive-data-fields" style="color:#444">Review APIs returning sensitive data fields</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8158,Runtime-Resource-Management-Control-Element-in-a-Component-Built-to-Run-on-Application-Servers" style="color:#444">Runtime Resource Management Control Element in a Component Built to Run on Application Servers</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7444,Serialize-session-objects" style="color:#444">Serialize session objects</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1101012,Specify-column-names-instead-of-column-numbers-in-ORDER-BY-clauses" style="color:#444">Specify column names instead of column numbers in ORDER BY clauses</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1009074,Specify-Error-Subroutine-for-File-Exception-Handling-RPG300" style="color:#444">Specify Error Subroutine for File Exception Handling (RPG300)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1004290,Specify-Error-Subroutine-for-File-Exception-Handling-RPG300" style="color:#444">Specify Error Subroutine for File Exception Handling (RPG300)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1008074,Specify-Error-Subroutine-for-File-Exception-Handling-RPG400" style="color:#444">Specify Error Subroutine for File Exception Handling (RPG400)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1004104,Specify-Error-Subroutine-for-File-Exception-Handling-RPG400" style="color:#444">Specify Error Subroutine for File Exception Handling (RPG400)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1234104,Specify-Error-Subroutine-for-File-Exception-Handling-RPGFP" style="color:#444">Specify Error Subroutine for File Exception Handling (RPG_FP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1004292,Specify-Program-Status-Data-Area-RPG300" style="color:#444">Specify Program Status Data Area (RPG300)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1004106,Specify-Program-Status-Data-Area-RPG400" style="color:#444">Specify Program Status Data Area (RPG400)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1008076,Specify-Program-Status-Data-Area-RPG400" style="color:#444">Specify Program Status Data Area (RPG400)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1234106,Specify-Program-Status-Data-Area-RPGFP" style="color:#444">Specify Program Status Data Area (RPG_FP)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7486,Split-universes-of-more-than-X-MB" style="color:#444">Split universes of more than X MB</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1101094,Stored-Procedures-should-always-RETURN-a-status-value" style="color:#444">Stored Procedures should always RETURN a status value</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1040034,StrictHttpFirewall-should-be-set-as-the-HttpFirewall" style="color:#444">"StrictHttpFirewall" should be set as the HttpFirewall</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8042,Struts-2-Validation-Avoid-unused-validation-form" style="color:#444">Struts 2 Validation: Avoid unused validation form</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7396,Subprograms-called-multiple-times-should-be-called-statically" style="color:#444">Subprograms called multiple times should be called statically</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1101074,Tables-aliases-should-not-end-with-a-numeric-suffix" style="color:#444">Tables aliases should not end with a numeric suffix</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1101072,Tables-should-be-aliased" style="color:#444">Tables should be aliased</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1040040,The-Endpoint-URI-must-not-include-a-fragment-component-OAuth" style="color:#444">The Endpoint URI must not include a fragment component (OAuth)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7824,The-exception-Exception-should-never-been-thrown-Always-Subclass-Exception-and-throw-the-subclassed-Classes" style="color:#444">The exception Exception should never been thrown. Always Subclass Exception and throw the subclassed Classes.</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,4722,Track-Classes-referencing-Database-objects" style="color:#444">Track Classes referencing Database objects</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1606,Triggers-should-not-directly-modify-tables-a-procedure-or-function-should-be-used-instead" style="color:#444">Triggers should not directly modify tables, a procedure or function should be used instead</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8212,UIApplication-delegate-applicationDidEnterBackground-must-delete-sensitive-data" style="color:#444">UIApplication delegate applicationDidEnterBackground: must delete sensitive data</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1050014,UIApplication-delegate-applicationDidEnterBackground-must-delete-sensitive-data" style="color:#444">UIApplication delegate applicationDidEnterBackground: must delete sensitive data</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1055022,UIApplicationDelegate-applicationDidEnterBackground-must-delete-sensitive-data-Swift" style="color:#444">UIApplicationDelegate applicationDidEnterBackground must delete sensitive data (Swift)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002148,Unavoid-un-deallocated-variables-or-arrays-in-Fortran-90-Functions-Fortran" style="color:#444">Unavoid un-deallocated variables or arrays in Fortran-90 Functions (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002142,Unavoid-un-deallocated-variables-or-arrays-in-Fortran-90-Modules-Fortran" style="color:#444">Unavoid un-deallocated variables or arrays in Fortran-90 Modules (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002144,Unavoid-un-deallocated-variables-or-arrays-in-Fortran-90-Programs-Fortran" style="color:#444">Unavoid un-deallocated variables or arrays in Fortran-90 Programs (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1002146,Unavoid-un-deallocated-variables-or-arrays-in-Fortran-90-Subroutines-Fortran" style="color:#444">Unavoid un-deallocated variables or arrays in Fortran-90 Subroutines (Fortran)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1065116,Undefined-macro-identifiers-shall-not-be-used-in-if-or-elif-preprocessor-directives-except-as-operands-to-the-defined-operator" style="color:#444">Undefined macro identifiers shall not be used in #if or #elif preprocessor directives, except as operands to the defined operator</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,1101036,Use-ANSI-standard-operators-in-SQL-WHERE-clauses" style="color:#444">Use ANSI standard operators in SQL WHERE clauses</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,2564,Use-a-single-Error-Handling-Method" style="color:#444">Use a single Error Handling Method</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7730,Use-declarative-transaction" style="color:#444">Use declarative transaction</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,8136,Use-indexes-to-access-the-table-elements-instead-of-Subscript" style="color:#444">Use indexes to access the table elements instead of Subscript</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,5566,Use-of-callform-built-in-Function-from-a-centralized-location" style="color:#444">Use of call_form built-in Function from a centralized location</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,3062,Use-of-error-handling-page" style="color:#444">Use of error handling page</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,2230,Use-of-style-sheets" style="color:#444">Use of style sheets</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,3066,Use-of-Web-Classes" style="color:#444">Use of Web Classes</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7510,Use-only-Hibernate-API-to-access-to-the-database" style="color:#444">Use only Hibernate API to access to the database</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7700,Use-only-Struts-HTTP-Servlet" style="color:#444">Use only Struts HTTP Servlet</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7260,User-Interface-elements-must-not-use-directly-the-database" style="color:#444">User Interface elements must not use directly the database</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1576,Use-varchar2-instead-of-char-and-varchar" style="color:#444">Use varchar2 instead of char and varchar</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7636,Use-version-instead-of-timestamp" style="color:#444">Use version instead of timestamp</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1588,Use-WHEN-OTHERS-in-exception-management" style="color:#444">Use WHEN OTHERS in exception management</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1101052,Use-WHEN-OTHERS-in-exception-management-SQL" style="color:#444">Use WHEN OTHERS in exception management (SQL)</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7190,Validator-form-validate-Method-must-call-supervalidate" style="color:#444">Validator form validate() Method must call super.validate()</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1101086,VARCHAR2-and-NVARCHAR2-should-be-used" style="color:#444">VARCHAR2 and NVARCHAR2 should be used</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8034,Variables-defined-in-Working-Storage-section-must-be-initialized-before-to-be-read" style="color:#444">Variables defined in Working-Storage section must be initialized before to be read</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7892,Web-Dynpro-Avoid-changing-the-program-flow" style="color:#444">Web Dynpro - Avoid changing the program flow</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7888,Web-Dynpro-Never-use-direct-calls-to-routine-via-me-use-wdThis-instead" style="color:#444">Web Dynpro - Never use direct calls to routine via "me->", use "wd_This->" instead</a></h5> <hr> <h5 class="opacity" style="width:100%"> <span class="label label-danger" style="border-radius:3px"><strong>CRITICAL</strong></span>  <a href="security,7890,Web-Dynpro-Never-use-INCLUDE-statement" style="color:#444">Web Dynpro - Never use INCLUDE statement</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,7368,When-using-binary-data-items-COMP-then-use-the-SYNCHRONIZED-clause" style="color:#444">When using binary data items (COMP), then use the SYNCHRONIZED clause</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,1040018,X-Frame-Option-should-be-correctly-set-to-avoid-Clickjacking-attack" style="color:#444">X-Frame-Option should be correctly set to avoid Clickjacking attack</a></h5> <hr> <h5 class="opacity" style="width:100%"> <a href="security,8556,XML-GENERATE-should-be-used-with-WITH-ENCODING" style="color:#444">'XML GENERATE' should be used with 'WITH ENCODING'</a></h5> <hr> </div> <!--<div class="panel-footer"><a href="explore.php" class="btn btn-block btn-primary"><i class="glyphicon glyphicon-stats"></i> Explore Appmarq's Data</a></div>--> </div> </div> </body> <script> (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) })(window,document,'script','//www.google-analytics.com/analytics.js','ga'); ga('create', 'UA-2127556-16', 'auto'); ga('send', 'pageview'); </script> </html>