2023 CWE Top 25 KEV Weaknesses

'Comparator' class not declared 'Serializable'  

Java

CWE-502

@NotNull field is not initialized  

Java

CWE-476

@NotNull/@Nullable problems  

Java

CWE-476 ,  CWE-754

Call to 'Connection.prepare*()' with non-constant string  

Java

CWE-89

Call to 'Statement.execute()' with non-constant string  

Java

CWE-89 ,  CWE-564

Non-safe string is used as SQL  

UAST

CWE-89 ,  CWE-564

Nullability and data flow problems  

Java

CWE-129 ,  CWE-252 ,  CWE-253 ,  CWE-394 ,  CWE-395 ,  CWE-476 ,  CWE-570 ,  CWE-571 ,  CWE-690

Optional.get() is called without isPresent() check  

Java

CWE-252 ,  CWE-476