software composition analysis
Blog News Pricing Partners
Resources
Vulnerability database
About Us Log In
software composition analysis
Not all vulnerability pages have gone live yet. Please stay tuned while we roll out the update.

DerScanner Vulnerability Database

Discover the vulnerabilities DerScanner can help you mitigate

Severity
Programming language

VULNERABILITY

language

CWE

C
T-SQL : Weak encryption algorithm

CWE-327 CWE-1032

C
T-SQL : Weak hashing algorithm

CWE-328

C
T-SQL : Weak random number generator

CWE-330 CWE-338

L
T-SQL : Incorrect comparison with NULL

CWE-480 CWE-754

L
T-SQL : Date conversion

N/A

M
T-SQL : Null encryption key

CWE-321

M
T-SQL : SQL injection

CWE-20 CWE-89 CWE-1027

M
T-SQL : Insecure GRANT usage

CWE-266 CWE-1033

M
T-SQL : Default account

CWE-1031

M
T-SQL : DOS attack possible

CWE-400

L
T-SQL : Use of TOP without ORDER BY

N/A

C
T-SQL : Insecure function

CWE-242 CWE-676

L
T-SQL : Error handling: empty catch block

CWE-390

M
T-SQL : Hardcoded password

CWE-256 CWE-257 CWE-259 CWE-522 CWE-656 CWE-798 CWE-862 CWE-1028 CWE-1032

M
T-SQL : Undocumented feature: special account

CWE-506 CWE-798 CWE-862