elselse commited on
Commit
5a016b1
·
verified ·
1 Parent(s): d2b9fb3

Training in progress, epoch 1

Browse files
Files changed (3) hide show
  1. config.json +239 -231
  2. model.safetensors +2 -2
  3. training_args.bin +1 -1
config.json CHANGED
@@ -38,34 +38,34 @@
38
  "25": "CWE-1385 Missing Origin Validation in WebSockets",
39
  "26": "CWE-1395 Dependency on Vulnerable Third-Party Component",
40
  "27": "CWE-173",
41
- "28": "CWE-184 Incomplete List of Disallowed Inputs",
42
- "29": "CWE-189 - Numeric Error",
43
  "30": "CWE-190 - Integer Overflow",
44
  "31": "CWE-190 Integer Overflow",
45
  "32": "CWE-190 Integer Overflow or Wraparound",
46
  "33": "CWE-190: Integer Overflow or Wraparound",
47
- "34": "CWE-191: Integer Underflow (Wrap or Wraparound)",
48
- "35": "CWE-20 - Improper Input Validation",
49
  "36": "CWE-20 Improper Input Validation",
50
  "37": "CWE-200 - Information Disclosure",
51
  "38": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
52
  "39": "CWE-200 Information Disclosure",
53
- "40": "CWE-203 Information Exposure Through Discrepancy",
54
- "41": "CWE-208 Observable Timing Discrepancy",
55
- "42": "CWE-208: Observable Timing Discrepancy",
56
- "43": "CWE-209 Generation of Error Message Containing Sensitive Information",
57
- "44": "CWE-209 Information Exposure Through Error Message",
58
- "45": "CWE-21 Pathname Traversal",
59
- "46": "CWE-22 - Path Traversal",
60
- "47": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
61
- "48": "CWE-22 Path Traversal",
62
- "49": "CWE-23 - Relative Path Traversal",
63
- "50": "CWE-235 Improper Handling of Extra Parameters",
64
- "51": "CWE-24 - Path Traversal: '../filedir'",
65
- "52": "CWE-24 Path Traversal: '../filedir'",
66
- "53": "CWE-241: Improper Handling of Unexpected Data Type",
67
- "54": "CWE-259 Use of Hard-coded Password",
68
- "55": "CWE-266 - Incorrect Privilege Assignment",
69
  "56": "CWE-269",
70
  "57": "CWE-269 Improper Privilege Management",
71
  "58": "CWE-276 Incorrect Default Permissions",
@@ -75,25 +75,25 @@
75
  "62": "CWE-285 Improper Authorization",
76
  "63": "CWE-287 Improper Authentication",
77
  "64": "CWE-295 Improper Certificate Validation",
78
- "65": "CWE-306 Missing Authentication for Critical Function",
79
- "66": "CWE-307 Improper Restriction of Excessive Authentication Attempts",
80
- "67": "CWE-320 - Key Management Error",
81
  "68": "CWE-321 - Use of Hard-coded Cryptographic Key",
82
  "69": "CWE-330 Insufficiently Random Values",
83
  "70": "CWE-330 Use of Insufficiently Random Values",
84
  "71": "CWE-337 Predictable Seed in Pseudo-Random Number Generator (PRNG)",
85
- "72": "CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator",
86
- "73": "CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)",
87
- "74": "CWE-340 Generation of Predictable Numbers or Identifiers",
88
- "75": "CWE-345 Insufficient Verification of Data Authenticity",
89
- "76": "CWE-352 - Cross-Site Request Forgery",
90
- "77": "CWE-352 Cross-Site Request Forgery",
91
- "78": "CWE-352 Cross-Site Request Forgery (CSRF)",
92
- "79": "CWE-354 Improper Validation of Integrity Check Value",
93
- "80": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')",
94
- "81": "CWE-362 Race Condition",
95
- "82": "CWE-366 Race Condition within a Thread",
96
- "83": "CWE-377 Insecure Temporary File",
97
  "84": "CWE-384 Session Fixiation",
98
  "85": "CWE-385 Covert Timing Channel",
99
  "86": "CWE-392 Missing Report of Error Condition",
@@ -110,88 +110,92 @@
110
  "97": "CWE-415 Double Free",
111
  "98": "CWE-416 - Use After Free",
112
  "99": "CWE-416 Use After Free",
113
- "100": "CWE-426 Untrusted Search Path",
114
- "101": "CWE-428 Unquoted Search Path or Element",
115
- "102": "CWE-434 - Unrestricted Upload",
116
- "103": "CWE-434 Unrestricted Upload",
117
- "104": "CWE-434 Unrestricted Upload of File with Dangerous Type",
118
- "105": "CWE-440 Expected Behavior Violation",
119
- "106": "CWE-444 HTTP Request Smuggling",
120
- "107": "CWE-472 External Control of Assumed-Immutable Web Parameter",
121
- "108": "CWE-476 - NULL Pointer Dereference",
122
- "109": "CWE-476 NULL Pointer Dereference",
123
- "110": "CWE-497",
124
- "111": "CWE-502 - Deserialization",
125
- "112": "CWE-502 Deserialization",
126
- "113": "CWE-502 Deserialization of Untrusted Data",
127
- "114": "CWE-502: Deserialization of Untrusted Data",
128
  "115": "CWE-522 Insufficiently Protected Credentials",
129
  "116": "CWE-532",
130
- "117": "CWE-548 Exposure of Information Through Directory Listing",
131
- "118": "CWE-59 Improper Link Resolution Before File Access ('Link Following')",
132
- "119": "CWE-597 Use of Wrong Operator in String Comparison",
133
- "120": "CWE-601 - Open Redirect",
134
- "121": "CWE-601 Open Redirect",
135
- "122": "CWE-606 Unchecked Input for Loop Condition",
136
- "123": "CWE-61 Symlink Following",
137
- "124": "CWE-611 XML External Entity Reference",
138
- "125": "CWE-613 Insufficient Session Expiration",
139
- "126": "CWE-614 Sensitive Cookie Without Secure Attribute",
140
- "127": "CWE-617 - Reachable Assertion",
141
- "128": "CWE-639 - Authorization Bypass",
142
- "129": "CWE-640 Weak Password Recovery",
143
- "130": "CWE-667 Improper Locking",
144
- "131": "CWE-690 Unchecked Return Value to NULL Pointer Dereference",
145
- "132": "CWE-693 Protection Mechanism Failure",
146
- "133": "CWE-697 Incorrect Comparison",
147
- "134": "CWE-704 Incorrect Type Conversion",
148
- "135": "CWE-707 - Improper Neutralization",
149
- "136": "CWE-73 File Inclusion",
150
- "137": "CWE-732 Incorrect Permission Assignment for Critical Resource",
151
- "138": "CWE-74 - Injection",
152
- "139": "CWE-74 Injection",
153
- "140": "CWE-755 Improper Handling of Exceptional Conditions",
154
- "141": "CWE-769 - Uncontrolled File Descriptor Consumption",
155
- "142": "CWE-77 - Command Injection",
156
- "143": "CWE-77 Command Injection",
157
- "144": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')",
158
- "145": "CWE-770",
159
- "146": "CWE-770 Allocation of Resources Without Limits or Throttling",
160
- "147": "CWE-78 - OS Command Injection",
161
- "148": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')",
162
- "149": "CWE-78 OS Command Injection",
163
- "150": "CWE-787 - Out-of-bounds Write",
164
- "151": "CWE-787 - out-of-bounds write",
165
- "152": "CWE-787 Out-of-bounds Write",
166
- "153": "CWE-789 Uncontrolled Memory Allocation",
167
- "154": "CWE-79",
168
- "155": "CWE-79 - Cross Site Scripting",
169
- "156": "CWE-79 Cross Site Scripting",
170
- "157": "CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')",
171
- "158": "CWE-798 Hard-coded Credentials",
172
- "159": "CWE-80 Basic Cross Site Scripting",
173
- "160": "CWE-824 - Uninitialized Pointer",
174
- "161": "CWE-834 Excessive Iteration",
175
- "162": "CWE-835 Infinite Loop",
176
- "163": "CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')",
177
- "164": "CWE-840 - Business Logic Errors",
178
- "165": "CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')",
179
- "166": "CWE-862 - Missing Authorization",
180
- "167": "CWE-862 Missing Authorization",
181
- "168": "CWE-863 Incorrect Authorization",
182
- "169": "CWE-89 - SQL Injection",
183
- "170": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')",
184
- "171": "CWE-89 SQL Injection",
185
- "172": "CWE-90 LDAP Injection",
186
- "173": "CWE-908 - Uninitialized Resource",
187
- "174": "CWE-918 - Server-Side Request Forgery",
188
- "175": "CWE-918 Server-Side Request Forgery",
189
- "176": "CWE-918 Server-Side Request Forgery (SSRF)",
190
- "177": "CWE-926 Improper Export of Android Application Components",
191
- "178": "CWE-927 Use of Implicit Intent for Sensitive Communication",
192
- "179": "CWE-94 - Code Injection",
193
- "180": "CWE-94 Code Injection",
194
- "181": "CWE-99 Improper Control of Resource Identifiers"
 
 
 
 
195
  },
196
  "initializer_range": 0.02,
197
  "intermediate_size": 3072,
@@ -224,34 +228,34 @@
224
  "CWE-1385 Missing Origin Validation in WebSockets": 25,
225
  "CWE-1395 Dependency on Vulnerable Third-Party Component": 26,
226
  "CWE-173": 27,
227
- "CWE-184 Incomplete List of Disallowed Inputs": 28,
228
- "CWE-189 - Numeric Error": 29,
229
  "CWE-190 - Integer Overflow": 30,
230
  "CWE-190 Integer Overflow": 31,
231
  "CWE-190 Integer Overflow or Wraparound": 32,
232
  "CWE-190: Integer Overflow or Wraparound": 33,
233
- "CWE-191: Integer Underflow (Wrap or Wraparound)": 34,
234
- "CWE-20 - Improper Input Validation": 35,
235
  "CWE-20 Improper Input Validation": 36,
236
  "CWE-200 - Information Disclosure": 37,
237
  "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor": 38,
238
  "CWE-200 Information Disclosure": 39,
239
- "CWE-203 Information Exposure Through Discrepancy": 40,
240
- "CWE-208 Observable Timing Discrepancy": 41,
241
- "CWE-208: Observable Timing Discrepancy": 42,
242
- "CWE-209 Generation of Error Message Containing Sensitive Information": 43,
243
- "CWE-209 Information Exposure Through Error Message": 44,
244
- "CWE-21 Pathname Traversal": 45,
245
- "CWE-22 - Path Traversal": 46,
246
- "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')": 47,
247
- "CWE-22 Path Traversal": 48,
248
- "CWE-23 - Relative Path Traversal": 49,
249
- "CWE-235 Improper Handling of Extra Parameters": 50,
250
- "CWE-24 - Path Traversal: '../filedir'": 51,
251
- "CWE-24 Path Traversal: '../filedir'": 52,
252
- "CWE-241: Improper Handling of Unexpected Data Type": 53,
253
- "CWE-259 Use of Hard-coded Password": 54,
254
- "CWE-266 - Incorrect Privilege Assignment": 55,
255
  "CWE-269": 56,
256
  "CWE-269 Improper Privilege Management": 57,
257
  "CWE-276 Incorrect Default Permissions": 58,
@@ -261,25 +265,25 @@
261
  "CWE-285 Improper Authorization": 62,
262
  "CWE-287 Improper Authentication": 63,
263
  "CWE-295 Improper Certificate Validation": 64,
264
- "CWE-306 Missing Authentication for Critical Function": 65,
265
- "CWE-307 Improper Restriction of Excessive Authentication Attempts": 66,
266
- "CWE-320 - Key Management Error": 67,
267
  "CWE-321 - Use of Hard-coded Cryptographic Key": 68,
268
  "CWE-330 Insufficiently Random Values": 69,
269
  "CWE-330 Use of Insufficiently Random Values": 70,
270
  "CWE-337 Predictable Seed in Pseudo-Random Number Generator (PRNG)": 71,
271
- "CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator": 72,
272
- "CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)": 73,
273
- "CWE-340 Generation of Predictable Numbers or Identifiers": 74,
274
- "CWE-345 Insufficient Verification of Data Authenticity": 75,
275
- "CWE-352 - Cross-Site Request Forgery": 76,
276
- "CWE-352 Cross-Site Request Forgery": 77,
277
- "CWE-352 Cross-Site Request Forgery (CSRF)": 78,
278
- "CWE-354 Improper Validation of Integrity Check Value": 79,
279
- "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')": 80,
280
- "CWE-362 Race Condition": 81,
281
- "CWE-366 Race Condition within a Thread": 82,
282
- "CWE-377 Insecure Temporary File": 83,
283
  "CWE-384 Session Fixiation": 84,
284
  "CWE-385 Covert Timing Channel": 85,
285
  "CWE-392 Missing Report of Error Condition": 86,
@@ -296,88 +300,92 @@
296
  "CWE-415 Double Free": 97,
297
  "CWE-416 - Use After Free": 98,
298
  "CWE-416 Use After Free": 99,
299
- "CWE-426 Untrusted Search Path": 100,
300
- "CWE-428 Unquoted Search Path or Element": 101,
301
- "CWE-434 - Unrestricted Upload": 102,
302
- "CWE-434 Unrestricted Upload": 103,
303
- "CWE-434 Unrestricted Upload of File with Dangerous Type": 104,
304
- "CWE-440 Expected Behavior Violation": 105,
305
- "CWE-444 HTTP Request Smuggling": 106,
306
- "CWE-472 External Control of Assumed-Immutable Web Parameter": 107,
307
- "CWE-476 - NULL Pointer Dereference": 108,
308
- "CWE-476 NULL Pointer Dereference": 109,
309
- "CWE-497": 110,
310
- "CWE-502 - Deserialization": 111,
311
- "CWE-502 Deserialization": 112,
312
- "CWE-502 Deserialization of Untrusted Data": 113,
313
- "CWE-502: Deserialization of Untrusted Data": 114,
314
  "CWE-522 Insufficiently Protected Credentials": 115,
315
  "CWE-532": 116,
316
- "CWE-548 Exposure of Information Through Directory Listing": 117,
317
- "CWE-59 Improper Link Resolution Before File Access ('Link Following')": 118,
318
- "CWE-597 Use of Wrong Operator in String Comparison": 119,
319
- "CWE-601 - Open Redirect": 120,
320
- "CWE-601 Open Redirect": 121,
321
- "CWE-606 Unchecked Input for Loop Condition": 122,
322
- "CWE-61 Symlink Following": 123,
323
- "CWE-611 XML External Entity Reference": 124,
324
- "CWE-613 Insufficient Session Expiration": 125,
325
- "CWE-614 Sensitive Cookie Without Secure Attribute": 126,
326
- "CWE-617 - Reachable Assertion": 127,
327
- "CWE-639 - Authorization Bypass": 128,
328
- "CWE-640 Weak Password Recovery": 129,
329
- "CWE-667 Improper Locking": 130,
330
- "CWE-690 Unchecked Return Value to NULL Pointer Dereference": 131,
331
- "CWE-693 Protection Mechanism Failure": 132,
332
- "CWE-697 Incorrect Comparison": 133,
333
- "CWE-704 Incorrect Type Conversion": 134,
334
- "CWE-707 - Improper Neutralization": 135,
335
- "CWE-73 File Inclusion": 136,
336
- "CWE-732 Incorrect Permission Assignment for Critical Resource": 137,
337
- "CWE-74 - Injection": 138,
338
- "CWE-74 Injection": 139,
339
- "CWE-755 Improper Handling of Exceptional Conditions": 140,
340
- "CWE-769 - Uncontrolled File Descriptor Consumption": 141,
341
- "CWE-77 - Command Injection": 142,
342
- "CWE-77 Command Injection": 143,
343
- "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')": 144,
344
- "CWE-770": 145,
345
- "CWE-770 Allocation of Resources Without Limits or Throttling": 146,
346
- "CWE-78 - OS Command Injection": 147,
347
- "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')": 148,
348
- "CWE-78 OS Command Injection": 149,
349
- "CWE-787 - Out-of-bounds Write": 150,
350
- "CWE-787 - out-of-bounds write": 151,
351
- "CWE-787 Out-of-bounds Write": 152,
352
- "CWE-789 Uncontrolled Memory Allocation": 153,
353
- "CWE-79": 154,
354
- "CWE-79 - Cross Site Scripting": 155,
355
- "CWE-79 Cross Site Scripting": 156,
356
- "CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')": 157,
357
- "CWE-798 Hard-coded Credentials": 158,
358
- "CWE-80 Basic Cross Site Scripting": 159,
359
- "CWE-824 - Uninitialized Pointer": 160,
360
- "CWE-834 Excessive Iteration": 161,
361
- "CWE-835 Infinite Loop": 162,
362
- "CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')": 163,
363
- "CWE-840 - Business Logic Errors": 164,
364
- "CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')": 165,
365
- "CWE-862 - Missing Authorization": 166,
366
- "CWE-862 Missing Authorization": 167,
367
- "CWE-863 Incorrect Authorization": 168,
368
- "CWE-89 - SQL Injection": 169,
369
- "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')": 170,
370
- "CWE-89 SQL Injection": 171,
371
- "CWE-90 LDAP Injection": 172,
372
- "CWE-908 - Uninitialized Resource": 173,
373
- "CWE-918 - Server-Side Request Forgery": 174,
374
- "CWE-918 Server-Side Request Forgery": 175,
375
- "CWE-918 Server-Side Request Forgery (SSRF)": 176,
376
- "CWE-926 Improper Export of Android Application Components": 177,
377
- "CWE-927 Use of Implicit Intent for Sensitive Communication": 178,
378
- "CWE-94 - Code Injection": 179,
379
- "CWE-94 Code Injection": 180,
380
- "CWE-99 Improper Control of Resource Identifiers": 181
 
 
 
 
381
  },
382
  "layer_norm_eps": 1e-05,
383
  "max_position_embeddings": 514,
@@ -388,7 +396,7 @@
388
  "pad_token_id": 1,
389
  "position_embedding_type": "absolute",
390
  "torch_dtype": "float32",
391
- "transformers_version": "4.54.1",
392
  "type_vocab_size": 1,
393
  "use_cache": true,
394
  "vocab_size": 50265
 
38
  "25": "CWE-1385 Missing Origin Validation in WebSockets",
39
  "26": "CWE-1395 Dependency on Vulnerable Third-Party Component",
40
  "27": "CWE-173",
41
+ "28": "CWE-178 Improper Handling of Case Sensitivity",
42
+ "29": "CWE-184 Incomplete List of Disallowed Inputs",
43
  "30": "CWE-190 - Integer Overflow",
44
  "31": "CWE-190 Integer Overflow",
45
  "32": "CWE-190 Integer Overflow or Wraparound",
46
  "33": "CWE-190: Integer Overflow or Wraparound",
47
+ "34": "CWE-191 Integer Underflow (Wrap or Wraparound)",
48
+ "35": "CWE-191: Integer Underflow (Wrap or Wraparound)",
49
  "36": "CWE-20 Improper Input Validation",
50
  "37": "CWE-200 - Information Disclosure",
51
  "38": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
52
  "39": "CWE-200 Information Disclosure",
53
+ "40": "CWE-201: Insertion of Sensitive Information Into Sent Data",
54
+ "41": "CWE-203 Information Exposure Through Discrepancy",
55
+ "42": "CWE-208 Observable Timing Discrepancy",
56
+ "43": "CWE-208: Observable Timing Discrepancy",
57
+ "44": "CWE-209 - Information Exposure Through Error Message",
58
+ "45": "CWE-209 Generation of Error Message Containing Sensitive Information",
59
+ "46": "CWE-209 Information Exposure Through Error Message",
60
+ "47": "CWE-21 Pathname Traversal",
61
+ "48": "CWE-22 - Path Traversal",
62
+ "49": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
63
+ "50": "CWE-22 Path Traversal",
64
+ "51": "CWE-235 Improper Handling of Extra Parameters",
65
+ "52": "CWE-24 - Path Traversal: '../filedir'",
66
+ "53": "CWE-24 Path Traversal: '../filedir'",
67
+ "54": "CWE-241: Improper Handling of Unexpected Data Type",
68
+ "55": "CWE-259 Use of Hard-coded Password",
69
  "56": "CWE-269",
70
  "57": "CWE-269 Improper Privilege Management",
71
  "58": "CWE-276 Incorrect Default Permissions",
 
75
  "62": "CWE-285 Improper Authorization",
76
  "63": "CWE-287 Improper Authentication",
77
  "64": "CWE-295 Improper Certificate Validation",
78
+ "65": "CWE-297",
79
+ "66": "CWE-306 Missing Authentication for Critical Function",
80
+ "67": "CWE-307 Improper Restriction of Excessive Authentication Attempts",
81
  "68": "CWE-321 - Use of Hard-coded Cryptographic Key",
82
  "69": "CWE-330 Insufficiently Random Values",
83
  "70": "CWE-330 Use of Insufficiently Random Values",
84
  "71": "CWE-337 Predictable Seed in Pseudo-Random Number Generator (PRNG)",
85
+ "72": "CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)",
86
+ "73": "CWE-340 Generation of Predictable Numbers or Identifiers",
87
+ "74": "CWE-345 Insufficient Verification of Data Authenticity",
88
+ "75": "CWE-352 - Cross-Site Request Forgery",
89
+ "76": "CWE-352 Cross-Site Request Forgery",
90
+ "77": "CWE-352 Cross-Site Request Forgery (CSRF)",
91
+ "78": "CWE-354 Improper Validation of Integrity Check Value",
92
+ "79": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')",
93
+ "80": "CWE-362 Race Condition",
94
+ "81": "CWE-366 Race Condition within a Thread",
95
+ "82": "CWE-377 Insecure Temporary File",
96
+ "83": "CWE-384 - Session Fixiation",
97
  "84": "CWE-384 Session Fixiation",
98
  "85": "CWE-385 Covert Timing Channel",
99
  "86": "CWE-392 Missing Report of Error Condition",
 
110
  "97": "CWE-415 Double Free",
111
  "98": "CWE-416 - Use After Free",
112
  "99": "CWE-416 Use After Free",
113
+ "100": "CWE-428 Unquoted Search Path or Element",
114
+ "101": "CWE-434 - Unrestricted Upload",
115
+ "102": "CWE-434 Unrestricted Upload",
116
+ "103": "CWE-434 Unrestricted Upload of File with Dangerous Type",
117
+ "104": "CWE-440 Expected Behavior Violation",
118
+ "105": "CWE-444 HTTP Request Smuggling",
119
+ "106": "CWE-472 External Control of Assumed-Immutable Web Parameter",
120
+ "107": "CWE-476 - NULL Pointer Dereference",
121
+ "108": "CWE-476 NULL Pointer Dereference",
122
+ "109": "CWE-497",
123
+ "110": "CWE-502 - Deserialization",
124
+ "111": "CWE-502 Deserialization",
125
+ "112": "CWE-502 Deserialization of Untrusted Data",
126
+ "113": "CWE-502: Deserialization of Untrusted Data",
127
+ "114": "CWE-521 - Weak Password Requirements",
128
  "115": "CWE-522 Insufficiently Protected Credentials",
129
  "116": "CWE-532",
130
+ "117": "CWE-532 Insertion of Sensitive Information into Log File",
131
+ "118": "CWE-548 Exposure of Information Through Directory Listing",
132
+ "119": "CWE-59 Improper Link Resolution Before File Access ('Link Following')",
133
+ "120": "CWE-597 Use of Wrong Operator in String Comparison",
134
+ "121": "CWE-601 - Open Redirect",
135
+ "122": "CWE-601 Open Redirect",
136
+ "123": "CWE-606 Unchecked Input for Loop Condition",
137
+ "124": "CWE-61 Symlink Following",
138
+ "125": "CWE-611 XML External Entity Reference",
139
+ "126": "CWE-613 Insufficient Session Expiration",
140
+ "127": "CWE-614 Sensitive Cookie Without Secure Attribute",
141
+ "128": "CWE-617 - Reachable Assertion",
142
+ "129": "CWE-639 - Authorization Bypass",
143
+ "130": "CWE-640 Weak Password Recovery",
144
+ "131": "CWE-667 Improper Locking",
145
+ "132": "CWE-674 Uncontrolled Recursion",
146
+ "133": "CWE-690 Unchecked Return Value to NULL Pointer Dereference",
147
+ "134": "CWE-693 Protection Mechanism Failure",
148
+ "135": "CWE-697 Incorrect Comparison",
149
+ "136": "CWE-704 Incorrect Type Conversion",
150
+ "137": "CWE-73",
151
+ "138": "CWE-73 File Inclusion",
152
+ "139": "CWE-732 Incorrect Permission Assignment for Critical Resource",
153
+ "140": "CWE-74 - Injection",
154
+ "141": "CWE-74 Injection",
155
+ "142": "CWE-755 Improper Handling of Exceptional Conditions",
156
+ "143": "CWE-769 - Uncontrolled File Descriptor Consumption",
157
+ "144": "CWE-77 - Command Injection",
158
+ "145": "CWE-77 Command Injection",
159
+ "146": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')",
160
+ "147": "CWE-770",
161
+ "148": "CWE-78 - OS Command Injection",
162
+ "149": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')",
163
+ "150": "CWE-78 OS Command Injection",
164
+ "151": "CWE-787 - Out-of-bounds Write",
165
+ "152": "CWE-787 - out-of-bounds write",
166
+ "153": "CWE-787 Out-of-bounds Write",
167
+ "154": "CWE-789 Uncontrolled Memory Allocation",
168
+ "155": "CWE-79",
169
+ "156": "CWE-79 - Cross Site Scripting",
170
+ "157": "CWE-79 Cross Site Scripting",
171
+ "158": "CWE-79 Cross-Site Scripting (XSS)",
172
+ "159": "CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')",
173
+ "160": "CWE-798 Hard-coded Credentials",
174
+ "161": "CWE-80 Basic Cross Site Scripting",
175
+ "162": "CWE-804 - Guessable CAPTCHA",
176
+ "163": "CWE-824 - Uninitialized Pointer",
177
+ "164": "CWE-824 Access of Uninitialized Pointer",
178
+ "165": "CWE-834 Excessive Iteration",
179
+ "166": "CWE-835 Infinite Loop",
180
+ "167": "CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')",
181
+ "168": "CWE-840 - Business Logic Errors",
182
+ "169": "CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')",
183
+ "170": "CWE-862 Missing Authorization",
184
+ "171": "CWE-863 Incorrect Authorization",
185
+ "172": "CWE-89 - SQL Injection",
186
+ "173": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')",
187
+ "174": "CWE-89 SQL Injection",
188
+ "175": "CWE-90 LDAP Injection",
189
+ "176": "CWE-918 - Server-Side Request Forgery",
190
+ "177": "CWE-918 Server-Side Request Forgery",
191
+ "178": "CWE-918 Server-Side Request Forgery (SSRF)",
192
+ "179": "CWE-926 Improper Export of Android Application Components",
193
+ "180": "CWE-927 Use of Implicit Intent for Sensitive Communication",
194
+ "181": "CWE-94 - Code Injection",
195
+ "182": "CWE-94 Code Injection",
196
+ "183": "CWE-99 Improper Control of Resource Identifiers",
197
+ "184": "Privilege Escalation",
198
+ "185": "n/a"
199
  },
200
  "initializer_range": 0.02,
201
  "intermediate_size": 3072,
 
228
  "CWE-1385 Missing Origin Validation in WebSockets": 25,
229
  "CWE-1395 Dependency on Vulnerable Third-Party Component": 26,
230
  "CWE-173": 27,
231
+ "CWE-178 Improper Handling of Case Sensitivity": 28,
232
+ "CWE-184 Incomplete List of Disallowed Inputs": 29,
233
  "CWE-190 - Integer Overflow": 30,
234
  "CWE-190 Integer Overflow": 31,
235
  "CWE-190 Integer Overflow or Wraparound": 32,
236
  "CWE-190: Integer Overflow or Wraparound": 33,
237
+ "CWE-191 Integer Underflow (Wrap or Wraparound)": 34,
238
+ "CWE-191: Integer Underflow (Wrap or Wraparound)": 35,
239
  "CWE-20 Improper Input Validation": 36,
240
  "CWE-200 - Information Disclosure": 37,
241
  "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor": 38,
242
  "CWE-200 Information Disclosure": 39,
243
+ "CWE-201: Insertion of Sensitive Information Into Sent Data": 40,
244
+ "CWE-203 Information Exposure Through Discrepancy": 41,
245
+ "CWE-208 Observable Timing Discrepancy": 42,
246
+ "CWE-208: Observable Timing Discrepancy": 43,
247
+ "CWE-209 - Information Exposure Through Error Message": 44,
248
+ "CWE-209 Generation of Error Message Containing Sensitive Information": 45,
249
+ "CWE-209 Information Exposure Through Error Message": 46,
250
+ "CWE-21 Pathname Traversal": 47,
251
+ "CWE-22 - Path Traversal": 48,
252
+ "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')": 49,
253
+ "CWE-22 Path Traversal": 50,
254
+ "CWE-235 Improper Handling of Extra Parameters": 51,
255
+ "CWE-24 - Path Traversal: '../filedir'": 52,
256
+ "CWE-24 Path Traversal: '../filedir'": 53,
257
+ "CWE-241: Improper Handling of Unexpected Data Type": 54,
258
+ "CWE-259 Use of Hard-coded Password": 55,
259
  "CWE-269": 56,
260
  "CWE-269 Improper Privilege Management": 57,
261
  "CWE-276 Incorrect Default Permissions": 58,
 
265
  "CWE-285 Improper Authorization": 62,
266
  "CWE-287 Improper Authentication": 63,
267
  "CWE-295 Improper Certificate Validation": 64,
268
+ "CWE-297": 65,
269
+ "CWE-306 Missing Authentication for Critical Function": 66,
270
+ "CWE-307 Improper Restriction of Excessive Authentication Attempts": 67,
271
  "CWE-321 - Use of Hard-coded Cryptographic Key": 68,
272
  "CWE-330 Insufficiently Random Values": 69,
273
  "CWE-330 Use of Insufficiently Random Values": 70,
274
  "CWE-337 Predictable Seed in Pseudo-Random Number Generator (PRNG)": 71,
275
+ "CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)": 72,
276
+ "CWE-340 Generation of Predictable Numbers or Identifiers": 73,
277
+ "CWE-345 Insufficient Verification of Data Authenticity": 74,
278
+ "CWE-352 - Cross-Site Request Forgery": 75,
279
+ "CWE-352 Cross-Site Request Forgery": 76,
280
+ "CWE-352 Cross-Site Request Forgery (CSRF)": 77,
281
+ "CWE-354 Improper Validation of Integrity Check Value": 78,
282
+ "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')": 79,
283
+ "CWE-362 Race Condition": 80,
284
+ "CWE-366 Race Condition within a Thread": 81,
285
+ "CWE-377 Insecure Temporary File": 82,
286
+ "CWE-384 - Session Fixiation": 83,
287
  "CWE-384 Session Fixiation": 84,
288
  "CWE-385 Covert Timing Channel": 85,
289
  "CWE-392 Missing Report of Error Condition": 86,
 
300
  "CWE-415 Double Free": 97,
301
  "CWE-416 - Use After Free": 98,
302
  "CWE-416 Use After Free": 99,
303
+ "CWE-428 Unquoted Search Path or Element": 100,
304
+ "CWE-434 - Unrestricted Upload": 101,
305
+ "CWE-434 Unrestricted Upload": 102,
306
+ "CWE-434 Unrestricted Upload of File with Dangerous Type": 103,
307
+ "CWE-440 Expected Behavior Violation": 104,
308
+ "CWE-444 HTTP Request Smuggling": 105,
309
+ "CWE-472 External Control of Assumed-Immutable Web Parameter": 106,
310
+ "CWE-476 - NULL Pointer Dereference": 107,
311
+ "CWE-476 NULL Pointer Dereference": 108,
312
+ "CWE-497": 109,
313
+ "CWE-502 - Deserialization": 110,
314
+ "CWE-502 Deserialization": 111,
315
+ "CWE-502 Deserialization of Untrusted Data": 112,
316
+ "CWE-502: Deserialization of Untrusted Data": 113,
317
+ "CWE-521 - Weak Password Requirements": 114,
318
  "CWE-522 Insufficiently Protected Credentials": 115,
319
  "CWE-532": 116,
320
+ "CWE-532 Insertion of Sensitive Information into Log File": 117,
321
+ "CWE-548 Exposure of Information Through Directory Listing": 118,
322
+ "CWE-59 Improper Link Resolution Before File Access ('Link Following')": 119,
323
+ "CWE-597 Use of Wrong Operator in String Comparison": 120,
324
+ "CWE-601 - Open Redirect": 121,
325
+ "CWE-601 Open Redirect": 122,
326
+ "CWE-606 Unchecked Input for Loop Condition": 123,
327
+ "CWE-61 Symlink Following": 124,
328
+ "CWE-611 XML External Entity Reference": 125,
329
+ "CWE-613 Insufficient Session Expiration": 126,
330
+ "CWE-614 Sensitive Cookie Without Secure Attribute": 127,
331
+ "CWE-617 - Reachable Assertion": 128,
332
+ "CWE-639 - Authorization Bypass": 129,
333
+ "CWE-640 Weak Password Recovery": 130,
334
+ "CWE-667 Improper Locking": 131,
335
+ "CWE-674 Uncontrolled Recursion": 132,
336
+ "CWE-690 Unchecked Return Value to NULL Pointer Dereference": 133,
337
+ "CWE-693 Protection Mechanism Failure": 134,
338
+ "CWE-697 Incorrect Comparison": 135,
339
+ "CWE-704 Incorrect Type Conversion": 136,
340
+ "CWE-73": 137,
341
+ "CWE-73 File Inclusion": 138,
342
+ "CWE-732 Incorrect Permission Assignment for Critical Resource": 139,
343
+ "CWE-74 - Injection": 140,
344
+ "CWE-74 Injection": 141,
345
+ "CWE-755 Improper Handling of Exceptional Conditions": 142,
346
+ "CWE-769 - Uncontrolled File Descriptor Consumption": 143,
347
+ "CWE-77 - Command Injection": 144,
348
+ "CWE-77 Command Injection": 145,
349
+ "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')": 146,
350
+ "CWE-770": 147,
351
+ "CWE-78 - OS Command Injection": 148,
352
+ "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')": 149,
353
+ "CWE-78 OS Command Injection": 150,
354
+ "CWE-787 - Out-of-bounds Write": 151,
355
+ "CWE-787 - out-of-bounds write": 152,
356
+ "CWE-787 Out-of-bounds Write": 153,
357
+ "CWE-789 Uncontrolled Memory Allocation": 154,
358
+ "CWE-79": 155,
359
+ "CWE-79 - Cross Site Scripting": 156,
360
+ "CWE-79 Cross Site Scripting": 157,
361
+ "CWE-79 Cross-Site Scripting (XSS)": 158,
362
+ "CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')": 159,
363
+ "CWE-798 Hard-coded Credentials": 160,
364
+ "CWE-80 Basic Cross Site Scripting": 161,
365
+ "CWE-804 - Guessable CAPTCHA": 162,
366
+ "CWE-824 - Uninitialized Pointer": 163,
367
+ "CWE-824 Access of Uninitialized Pointer": 164,
368
+ "CWE-834 Excessive Iteration": 165,
369
+ "CWE-835 Infinite Loop": 166,
370
+ "CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')": 167,
371
+ "CWE-840 - Business Logic Errors": 168,
372
+ "CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')": 169,
373
+ "CWE-862 Missing Authorization": 170,
374
+ "CWE-863 Incorrect Authorization": 171,
375
+ "CWE-89 - SQL Injection": 172,
376
+ "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')": 173,
377
+ "CWE-89 SQL Injection": 174,
378
+ "CWE-90 LDAP Injection": 175,
379
+ "CWE-918 - Server-Side Request Forgery": 176,
380
+ "CWE-918 Server-Side Request Forgery": 177,
381
+ "CWE-918 Server-Side Request Forgery (SSRF)": 178,
382
+ "CWE-926 Improper Export of Android Application Components": 179,
383
+ "CWE-927 Use of Implicit Intent for Sensitive Communication": 180,
384
+ "CWE-94 - Code Injection": 181,
385
+ "CWE-94 Code Injection": 182,
386
+ "CWE-99 Improper Control of Resource Identifiers": 183,
387
+ "Privilege Escalation": 184,
388
+ "n/a": 185
389
  },
390
  "layer_norm_eps": 1e-05,
391
  "max_position_embeddings": 514,
 
396
  "pad_token_id": 1,
397
  "position_embedding_type": "absolute",
398
  "torch_dtype": "float32",
399
+ "transformers_version": "4.55.0",
400
  "type_vocab_size": 1,
401
  "use_cache": true,
402
  "vocab_size": 50265
model.safetensors CHANGED
@@ -1,3 +1,3 @@
1
  version https://git-lfs.github.com/spec/v1
2
- oid sha256:166c5e774a6ffe34d64a875fa16c23ff95060c9cc775af0aab6bc506bb92ddd0
3
- size 499166504
 
1
  version https://git-lfs.github.com/spec/v1
2
+ oid sha256:ecac27599613e9969dc005f2f791ecf3b750bca01e801e7c2b66c378445395f9
3
+ size 499178808
training_args.bin CHANGED
@@ -1,3 +1,3 @@
1
  version https://git-lfs.github.com/spec/v1
2
- oid sha256:394269fba3dcc38e87f911c348ef0a55fa5129b20d4a6df77675252ca8ea2cc4
3
  size 5777
 
1
  version https://git-lfs.github.com/spec/v1
2
+ oid sha256:d7694abf0166f9b43898f7e61bc9abd620db91b4e23560125dcd16847de2444e
3
  size 5777