CWE-1110 - Incomplete Design Documentation

Home/CWEs/CWE info/

CWE-1110

Abstraction:
Base

Structure:
Simple

Status:
Incomplete

Weakness Name: Incomplete Design Documentation

Description: The product's design documentation does not adequately describe control flow, data flow, system initialization, relationships between tasks, components, rationales, or other important aspects of the design.

Related Weaknesses: CWE-1059Insufficient Technical Documentation

Release Date:
2019-01-03

Latest Modification Date:
2024-02-29

Latest Security News

Adobe warns of critical ColdFusion bug with PoC exploit code

Non-Human Identities Gain Momentum, Requires Both Management, Security

FTC orders Marriott and Starwood to implement strict data security

Premium WPLMS WordPress plugins address seven critical flaws

US court finds spyware maker NSO liable for WhatsApp hacks

How CISOs Can Communicate With Their Boards Effectively

Middle East Cyberwar Rages On, With No End in Sight

Name That Toon: Sneaking Around

Common Alerts

MediumCSP: style-src unsafe-hashes

HighXPath Injection

HighHttpoxy - Proxy Header Misuse

InformationalContent Security Policy (CSP) Report-Only Header Found

HighNoSQL Injection - MongoDB

MediumCSP: Wildcard Directive

MediumSub Resource Integrity Attribute Missing

HighSQL Injection

LowStrict-Transport-Security Malformed Content (Non-compliant with Spec)

InformationalBase64 Disclosure in WebSocket message

Top CVE List

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2023-36884 Microsoft Windows Search Remote Code Execution Vulnerability

CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability

CVE-2020-5849 Unraid Authentication Bypass Vulnerability

CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CVE-2024-43491 Microsoft Windows Update Use-After-Free Vulnerability

Common CWEs

CWE-204 Observable Response Discrepancy

CWE-341 Predictable from Observable State

CWE-1045 Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor

CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere

HighCWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

CWE-1177 Use of Prohibited Code

CWE-161 Improper Neutralization of Multiple Leading Special Elements

CWE-1281 Sequence of Processor Instructions Leads to Unexpected Behavior

CWE-1280 Access Control Check Implemented After Asset is Accessed

CWE-305 Authentication Bypass by Primary Weakness

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-1110 - Incomplete Design Documentation

The product's design documentation does not adequately describe control flow, data flow, system initialization, relationships between tasks, components, rationales, or other important aspects of the design.