CWE-1110 - Incomplete Design Documentation

Home/CWEs/CWE info/

CWE-1110

Abstraction:
Base

Structure:
Simple

Status:
Incomplete

Weakness Name: Incomplete Design Documentation

Description: The product's design documentation does not adequately describe control flow, data flow, system initialization, relationships between tasks, components, rationales, or other important aspects of the design.

Related Weaknesses: CWE-1059Insufficient Technical Documentation

Release Date:
2019-01-03

Latest Modification Date:
2024-02-29

Latest Security News

Premium WPLMS WordPress plugins address seven critical flaws

US court finds spyware maker NSO liable for WhatsApp hacks

How CISOs Can Communicate With Their Boards Effectively

Middle East Cyberwar Rages On, With No End in Sight

Name That Toon: Sneaking Around

AI Could Generate 10,000 Malware Variants, Evading Detection in 88% of Case

Apache fixes remote code execution bypass in Tomcat web server

Microsoft fixes bug behind random Office 365 deactivation errors

Common Alerts

HighServer Side Template Injection (Blind)

HighExternal Redirect

LowMultiple HREFs Redirect Detected (Potential Sensitive Information Leak)

HighRemote Code Execution - CVE-2012-1823

InformationalInformation Disclosure - Suspicious Comments in XML via WebSocket

MediumSource Code Disclosure - PHP

MediumVulnerable JS Library

LowCSP: X-WebKit-CSP

HighViewstate without MAC Signature (Sure)

MediumMultiple X-Frame-Options Header Entries

Latest CVE List

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

CVE-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

Common CWEs

CWE-823 Use of Out-of-range Pointer Offset

CWE-599 Missing Validation of OpenSSL Certificate

CWE-1293 Missing Source Correlation of Multiple Independent Data

CWE-13 ASP.NET Misconfiguration: Password in Configuration File

CWE-282 Improper Ownership Management

CWE-9 J2EE Misconfiguration: Weak Access Permissions for EJB Methods

CWE-916 Use of Password Hash With Insufficient Computational Effort

CWE-1204 Generation of Weak Initialization Vector (IV)

CWE-443 DEPRECATED: HTTP response splitting

CWE-588 Attempt to Access Child of a Non-structure Pointer

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-1110 - Incomplete Design Documentation

The product's design documentation does not adequately describe control flow, data flow, system initialization, relationships between tasks, components, rationales, or other important aspects of the design.