software composition analysis
Product
SAST
Catch vulnerabilities as you develop DAST
Test live web applications like an attacker SCA
Secure open-source and supply chain MAST
Secure mobile apps from code to store Compliance
Align with standards while shipping secure code
Resources
Vulnerability database Healthy Package
Blog News
Pricing Partners About Us Log In
software composition analysis

DerScanner Vulnerability Database

Discover the vulnerabilities DerScanner can help you mitigate

Severity
Programming language

VULNERABILITY

language

CWE

C
T-SQL : Weak encryption algorithm

CWE-327 CWE-1032

C
T-SQL : Weak hashing algorithm

CWE-328

C
T-SQL : Weak random number generator

CWE-330 CWE-338

L
T-SQL : Incorrect comparison with NULL

CWE-480 CWE-754

L
T-SQL : Date conversion

N/A

M
T-SQL : Null encryption key

CWE-321

M
T-SQL : SQL injection

CWE-20 CWE-89 CWE-1027

M
T-SQL : Insecure GRANT usage

CWE-266 CWE-1033

M
T-SQL : Default account

CWE-1031

M
T-SQL : DOS attack possible

CWE-400

L
T-SQL : Use of TOP without ORDER BY

N/A

C
T-SQL : Insecure function

CWE-242 CWE-676

L
T-SQL : Error handling: empty catch block

CWE-390

M
T-SQL : Hardcoded password

CWE-256 CWE-257 CWE-259 CWE-522 CWE-656 CWE-798 CWE-862 CWE-1028 CWE-1032

M
T-SQL : Undocumented feature: special account

CWE-506 CWE-798 CWE-862