CWE-1110 - Incomplete Design Documentation

Home/CWEs/CWE info/

CWE-1110

Abstraction:
Base

Structure:
Simple

Status:
Incomplete

Weakness Name: Incomplete Design Documentation

Description: The product's design documentation does not adequately describe control flow, data flow, system initialization, relationships between tasks, components, rationales, or other important aspects of the design.

Related Weaknesses: CWE-1059Insufficient Technical Documentation

Release Date:
2019-01-03

Latest Modification Date:
2024-02-29

Latest Security News

Canada Orders TikTok to Shut Down Canadian Operations Over Security Concerns

Hackers increasingly use Winos4.0 post-exploitation kit in attacks

Microsoft Notepad to get AI-powered rewriting tool on Windows 11

Cisco bug lets hackers run commands as root on UWRB access points

New SteelFox malware hijacks Windows PCs using vulnerable driver

VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware

Washington courts' systems offline following weekend cyberattack

Germany drafts law to protect researchers who find security flaws

Top Alert List

InformationalInformation Disclosure - Suspicious Comments

MediumAbsence of Anti-CSRF Tokens

LowCookie without SameSite Attribute

Cross-Domain Misconfiguration

MediumMissing Anti-clickjacking Header

MediumDirectory Browsing

LowCross-Domain JavaScript Source File Inclusion

LowInformation Disclosure - Debug Error Messages

Content Security Policy (CSP) Header Not Set

MediumCSP: Wildcard Directive

Top CVE List

CVE-2024-38094 Microsoft SharePoint Deserialization Vulnerability

CVE-2022-3075 Google Chromium Mojo Insufficient Data Validation Vulnerability

CVE-2024-8957 PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability

CVE-2024-37383 RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability

CVE-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability

CVE-2024-8956 PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability

CVE-2020-3452 Cisco ASA and FTD Read-Only Path Traversal Vulnerability

CVE-2020-3837 Apple Multiple Products Memory Corruption Vulnerability

CVE-2021-34486 Microsoft Windows Event Tracing Privilege Escalation Vulnerability

CVE-2022-22948 VMware vCenter Server Incorrect Default File Permissions Vulnerability

Common CWEs

MediumCWE-273 Improper Check for Dropped Privileges

CWE-831 Signal Handler Function Associated with Multiple Signals

HighCWE-67 Improper Handling of Windows Device Names

CWE-1245 Improper Finite State Machines (FSMs) in Hardware Logic

CWE-509 Replicating Malicious Code (Virus or Worm)

CWE-425 Direct Request ('Forced Browsing')

CWE-396 Declaration of Catch for Generic Exception

LowCWE-749 Exposed Dangerous Method or Function

HighCWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE-530 Exposure of Backup File to an Unauthorized Control Sphere

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-1110 - Incomplete Design Documentation

The product's design documentation does not adequately describe control flow, data flow, system initialization, relationships between tasks, components, rationales, or other important aspects of the design.