References

Bibliographic references cited across the CWE and CAPEC catalogs

All CWE CAPEC
1300 CWE
The Developer's Guide to Azure
Microsoft · 2021
REF-1301 CWE
Default encryption at rest
Google Cloud · 2022
1 citation(s)
REF-1302 CWE
Authentication and authorization use cases
Google Cloud · 2022
1 citation(s)
REF-1303 CWE
Researchers Out Default Passwords Packaged With ICS/SCADA Wares
Kelly Jackson Higgins · 2016
2 citation(s)
REF-1304 CWE
ICS Alert (ICS-ALERT-13-164-01): Medical Devices Hard-Coded Passwords
ICS-CERT · 2013
3 citation(s)
REF-1305 CWE
Discussion Thread: Time to retire CWE-262 and CWE-263
Kurt Seifried and other members of the CWE-Research mailing list · 2021
2 citation(s)
REF-1306 CWE
Remediate anonymous public read access to blob data (Azure Resource Manager deployments)
Microsoft · 2022
REF-1307 CWE
CIS Microsoft Azure Foundations Benchmark version 1.5.0
Center for Internet Security · 2022
5 citation(s)
REF-1308 CWE
Enable and manage Azure Storage Analytics logs (classic)
Microsoft · 2023
1 citation(s)
REF-1309 CWE
Require secure transfer to ensure secure connections
Microsoft · 2022
1 citation(s)
REF-1310 CWE
Enable infrastructure encryption for double encryption of data
Microsoft · 2022
1 citation(s)
REF-1311 CWE
The Cases for Using the SBOMs We Build
Amélie Koran, Wendy Nather, Stewart Scott, Sara Ann Brackett · 2022
1 citation(s)
REF-1312 CWE
OWASP Dependency-Check
OWASP
1 citation(s)
REF-1313 CWE
The Unfortunate Reality of Insecure Libraries
Jeff Williams, Arshan Dabirsiaghi · 2014
1 citation(s)
REF-1314 CWE
ICS Alert (ICS-ALERT-20-063-01): SweynTooth Vulnerabilities
ICS-CERT · 2020
2 citation(s)
REF-1315 CWE
Unleashing Mayhem over Bluetooth Low Energy
Matheus E. Garbelini, Sudipta Chattopadhyay, Chundong Wang, Singapore University of Technology and Design · 2020
2 citation(s)
REF-1316 CWE
Alert (AA21-356A): Mitigating Log4Shell and Other Log4j-Related Vulnerabilities
CISA · 2021
1 citation(s)
REF-1317 CWE
What Log4Shell taught us about application security, and how to respond now
Daniel Thomas · 2022
1 citation(s)
REF-1318 CWE
Analyzing the Hidden Danger of Environment Variables for Keeping Secrets
David Fiser, Alfredo Oliveira · 2022
1 citation(s)
REF-1319 CWE
Using environment variables is security-sensitive
Nicolas Harraudeau · 2021
1 citation(s)
REF-1320 CWE
A Framework for a Medical Device Security Program at a Healthcare Delivery Organization
Ali Youssef · 2022
1 citation(s)
REF-1321 CWE
Shared Responsibility Model Explained
Cloud Security Alliance · 2020
1 citation(s)
REF-1322 CWE
Medical Device Cybersecurity Regional Incident Preparedness and Response Playbook
Melissa Chase, Steven Christey Coley, Julie Connolly, Ronnie Daldos, Margie Zuk · 2022
1 citation(s)
REF-1323 CWE
Cyrix coma bug
· 2006
1 citation(s)
REF-1324 CWE
Undocumented M6800 Instructions
Gary Wheeler · 1977
1 citation(s)
REF-1325 CWE
exec package - os/exec - Go Packages
· 2023
1 citation(s)
REF-1326 CWE
Git LFS Changelog
Brian M. Carlson · 2022
1 citation(s)
REF-1327 CWE
CIS Google Cloud Computing Platform Benchmark version 1.3.0
Center for Internet Security · 2022
2 citation(s)
REF-1328 CWE
Software Memory Safety
National Security Agency · 2022
REF-1329 CWE
What is memory safety and why does it matter?
Prossimo
REF-1330 CWE
CVE --> CWE Mapping Guidance - Quick Tips
MITRE · 2021
REF-1331 CWE
The Pentium F00F Bug
Robert R. Collins · 1998
1 citation(s)
REF-1332 CWE
Prelink and address space randomization
John Richard Moser · 2006
9 citation(s)
REF-1333 CWE
Jump Over ASLR: Attacking Branch Predictors to Bypass ASLR
Dmitry Evtyushkin, Dmitry Ponomarev, Nael Abu-Ghazaleh · 2016
9 citation(s)
REF-1334 CWE
Stack Frame Canary Validation (D3-SFCV)
D3FEND · 2023
8 citation(s)
REF-1335 CWE
Segment Address Offset Randomization (D3-SAOR)
D3FEND · 2023
9 citation(s)
REF-1336 CWE
Process Segment Execution Prevention (D3-PSEP)
D3FEND · 2023
7 citation(s)
REF-1337 CWE
Bypassing Browser Memory Protections: Setting back browser security by 10 years
Alexander Sotirov and Mark Dowd · 2008
9 citation(s)
REF-1338 CWE
Hackatdac19 ariane_soc_pkg.sv
· 2019
1 citation(s)
REF-1339 CWE
csr_regfile.sv
Florian Zaruba, Michael Schaffner, Andreas Traber · 2019
1 citation(s)
REF-1340 CWE
Hackatdac19 csr_regfile.sv
· 2019
1 citation(s)
REF-1341 CWE
The RISC-V Instruction Set Manual
Andrew Waterman, Yunsup Lee, Rimas Avižienis, David Patterson, Krste Asanović · 2016
1 citation(s)
REF-1342 CWE
Hackatdac19 commit_stage.sv
· 2019
1 citation(s)
REF-1343 CWE
commit_stage.sv
Florian Zaruba, Michael Schaffner, Stefan Mach, Andreas Traber · 2018
1 citation(s)
REF-1344 CWE
2023 CWE Top 25 Most Dangerous Software Weaknesses
· 2023
REF-1345 CWE
csr_regfile.sv
Florian Zaruba, Michael Schaffner, Andreas Traber · 2019
1 citation(s)
REF-1346 CWE
axi_node_intf_wrap.sv
· 2019
1 citation(s)
REF-1347 CWE
axi_node_intf_wrap.sv
· 2019
1 citation(s)
REF-1348 CWE
bootrom.sv
· 2019
1 citation(s)
REF-1349 CWE
bootrom.sv
· 2019
1 citation(s)
« 17 / 21 »