Amazon Q
Detector Library
C++ detectors (43/43)
Disabled HTML autoescapeWeak pseudorandom number generationMissing Default in SwitchHardcoded credentialsUnsafe File ExtensionUse Of Incorrect OperatorIncorrect Order Of setuid and setgidOut Of Bounds ReadCode InjectionOut Of Bounds WriteThread safety violationIncorrect Pointer SubtractionMismatched memory management routines.File System AccessInsecure Buffer AccessIncorrect Use of SizeofIncorrect Pointer ScalingLoose File PermissionsSensitive information leakMissing AuthorizationReturn Stack AddressOS Command InjectionUse After FreeIncorrect ComparisonCross-Site Request Forgery (CSRF)off by one errorNumeric Truncation ErrorPath traversalInsecure temporary file or directoryInsecure CryptographyInsecure connection using unencrypted protocolUnchecked Null DereferenceSQL injectionLog injectionMissing check on method outputImproper Restriction on Memory BufferIncorrect Conversion Of Numeric TypesMultiple LocksImproper Input ValidationNull Pointer DereferenceImproper Certificate ValidationCross Site ScriptingImproper Authentication
Code Injection Critical
Code injection vulnerabilities occur when untrusted input is executed as code. This can happen through various means, such as system commands, eval functions, or database queries. If user input is not properly validated or sanitized, attackers can exploit this to execute arbitrary code on the server or client side. This can lead to severe consequences, including data breaches, system compromise, and denial of service.
