logo

Database

Swift fixes

006 Authentication mechanism absence or evasion007 Cross-site request forgery011 Use of software with known vulnerabilities013 Insecure object reference014 Insecure functionality015 Insecure authentication method - Basic016 Insecure encryption algorithm - SSL/TLS017 Sensitive information sent insecurely019 Administrative credentials stored in cache memory020 Non-encrypted confidential information022 Use of an insecure channel026 User enumeration028 Insecure temporary files034 Insecure generation of random numbers038 Business information leak052 Insecure encryption algorithm060 Insecure service configuration - Host verification066 Technical information leak - Console functions067 Improper resource allocation068 Insecure session expiration time069 Weak CAPTCHA076 Insecure session management091 Log injection092 Insecure encryption algorithm - Anonymous cipher suites094 Insecure encryption algorithm - Cipher Block Chaining096 Insecure deserialization113 Improper type assignation115 Security controls bypass or absence117 Unverifiable files119 Metadata with sensitive information124 Race condition126 Lack of isolation methods138 Inappropriate coding practices140 Insecure exceptions - Empty or no catch142 Sensitive information in source code - API Key145 Inappropriate coding practices - Cyclomatic complexity147 Insecure encryption algorithm - SSLContext156 Uncontrolled external site redirect172 Insecure service configuration - App Backup173 Insecure service configuration - Backup183 Debugging enabled in production184 Lack of data validation191 Lack of data validation - Responses194 Lack of data validation - Input Length197 Lack of data validation - Numbers199 Lack of data validation - Emails201 Unauthorized access to files204 Insufficient data authenticity validation210 Security controls bypass or absence - Facial Recognition233 Incomplete functional code237 Technical information leak - Print Functions240 Authentication mechanism absence or evasion - OTP262 Insecure encryption algorithm - SHA1265 Insecure encryption algorithm - AES268 Insecure service configuration - Webview269 Insecure encryption algorithm - Blowfish270 Insecure functionality - File Creation271 Insecure functionality - Password management273 Insecure functionality - Fingerprint275 Non-encrypted confidential information - Local data284 Non-encrypted confidential information - Base 64285 Insecure service configuration - App Transport Security298 Authentication mechanism absence or evasion - Redirect310 Unauthorized access to screen317 Improper resource allocation - Memory leak332 Use of insecure channel - Source code340 Lack of data validation - Special Characters345 Security controls bypass or absence - Session Invalidation346 Excessive privileges - Mobile App359 Sensitive information in source code - Credentials370 Authentication mechanism absence or evasion - Security Image378 Non-encrypted confidential information - Hexadecimal382 Insufficient data authenticity validation - Front bypass391 Inappropriate coding practices - Unused properties393 Use of software with known vulnerabilities in development395 Insecure generation of random numbers - Static IV421 Insecure encryption algorithm - Insecure Elliptic Curve428 Inappropriate coding practices - invalid file435 Use of software with known vulnerabilities in environments