...
APSC_DV.000460.AUSD - Inspect uses of System.DateTime for security holes
APSC_DV.001250.AUMS - Inspect uses of Millisecond on System.DateTime for security problems
APSC_DV.001250.AUSD - Inspect uses of System.DateTime for security holes
APSC_DV.001270.AUMS - Inspect uses of Millisecond on System.DateTime for security problems
APSC_DV.001270.AUSD - Inspect uses of System.DateTime for security holes
APSC_DV.001460.DMSC - Inspect modifications to security settings
APSC_DV.001460.NCNRE - Do not catch 'NullReferenceException''
APSC_DV.001460.SMIII - Seal methods which implement internal interfaces
APSC_DV.001460.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
APSC_DV.001660.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
APSC_DV.001810.AUSD - Inspect uses of System.DateTime for security holes
APSC_DV.001820.AUSD - Inspect uses of System.DateTime for security holes
APSC_DV.001850.AUSD - Inspect uses of System.DateTime for security holes
APSC_DV.001860.AUSD - Inspect uses of System.DateTime for security holes
APSC_DV.001860.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
APSC_DV.001940.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
APSC_DV.001950.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
APSC_DV.001995.INVOKE - Prefer asynchronous calls to synchronized calls.
APSC_DV.001995.LOCKSETGET - Lock both when either set or get is locked for a property.
APSC_DV.002010.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
APSC_DV.002020.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
APSC_DV.002030.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
APSC_DV.002040.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
APSC_DV.002050.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
APSC_DV.002290.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
APSC_DV.002310.DMSC - Inspect modifications to security settings
APSC_DV.002340.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
APSC_DV.002350.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
APSC_DV.002360.DMSC - Inspect modifications to security settings
APSC_DV.002440.AUSD - Inspect uses of System.DateTime for security holes
APSC_DV.002440.ENFL - Ensure all sensitive function invocations are logged
APSC_DV.002450.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
APSC_DV.002460.AUSD - Inspect uses of System.DateTime for security holes
APSC_DV.002460.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
APSC_DV.002470.AUSD - Inspect uses of System.DateTime for security holes
APSC_DV.002470.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
APSC_DV.002480.AUSD - Inspect uses of System.DateTime for security holes
APSC_DV.002520.APTIF - Avoid protected instance fields that could be accessed by untrusted classes
APSC_DV.002520.AUIC - Avoid using public inner classes to prevent access from untrusted classes
APSC_DV.002530.APTIF - Avoid protected instance fields that could be accessed by untrusted classes
APSC_DV.002530.AUIC - Avoid using public inner classes to prevent access from untrusted classes
APSC_DV.002570.APTIF - Avoid protected instance fields that could be accessed by untrusted classes
APSC_DV.002570.AUIC - Avoid using public inner classes to prevent access from untrusted classes
APSC_DV.002590.AUPS - Inspect calls to Process.Start()
APSC_DV.002960.AUPS - Inspect calls to Process.Start()
APSC_DV.003100.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
APSC_DV.003140.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
ARRU.DNUNGIF - Do not use non-generic collection for making custom collection class
ARRU.NGLVD - Do not declare local variables of non-generic collections types
BRM.BOOLNEGNAME - Use positive instead of negative terms for naming properies/methods that return a 'boolean'.
BRM.COLLPLURALNAME - Use plural name for a property of type collection/array and avoid collection/array in the name.
BRM.ISPREFIX - Use 'Is...' only for naming methods that return a "boolean"
BRM.LONGNAMES - Avoid class, struct, or interface names which are more than 14 characters long
CLS.ACAC - Provide the same accessibility for the property and its accessors
CLS.CONV - Provide alternate methods for conversion if you provide conversion operators
CLS.ENTY - Make the underlying type of enum an inegral type
CLS.NOOO - Do not use operator overloading if you want to be CLS compliant
CLS.NOPT - Do not use pointer types if you want to be CLS-compliant
CLS.PRMT - Use only CLS-compliant primitive types
CLS.TYPR - Avoid using typed references
CMUG.MU.VALRETURN - Do not use value types for returning values from methods or properties.
CMUG.PRU.DPAV - Declare properties in classes that derive from classes using nHibernate as virtual.
CS.IFD.DNPTHIS - Do not pass a reference to 'this' from inside a destructor or dispose method.
CS.OOM.CAST2CONCRETE - Avoid casts to concrete Collection types
CS.PB.INVOKE - Prefer asynchronous calls to synchronized calls.
CS.SMC - Avoid "switch" statements with many "case" statements
CS.TRS.LOCKSETGET - Lock both when either set or get is locked for a property.
CWE.330.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
CWE.362.LOCKSETGET - Lock both when either set or get is locked for a property.
CWE.395.NCNRE - Do not catch 'NullReferenceException''
CWE.829.DMSC - Inspect modifications to security settings
EXCEPT.NCNRE - Do not catch 'NullReferenceException''
GC.DCGC - Do not explicitly call 'System.GC.Collect()' or 'System.GC.Collect(int)'
GC.RCCB - Reuse calls to 'ClipBounds'
INTER.TOLOWERTOUPPER - Do not use directly ToLower(), ToUpper() string methods.
OOM.LNDM - Avoid a large number of data members per class
OOM.LNMM - Avoid a large number of methods per class
OOM.LNPBD - Avoid a large number of public data members per class
OOM.LNPBM - Avoid a large number of public methods per class
OOM.LNPM - Avoid a large number of parameters per method
OOM.LNPTD - Avoid a large number of protected data members per class
OOM.LNPTM - Avoid a large number of protected methods per class
OOM.LNPVD - Avoid a large number of private data members per class
OOM.LNPVM - Avoid a large number of private methods per class
OOM.MLCI - Avoid too many levels of class inheritance
OPU.NOREFEQUAL - Do not override ReferenceEquals() method
OPU.NOSTATICEQUAL - Do not override static Object.Equals() method
OWASP2017.A6.DMSC - Inspect modifications to security settings
OWASP2017.A6.NCNRE - Do not catch 'NullReferenceException''
OWASP2017.A6.SMIII - Seal methods which implement internal interfaces
OWASP2019.API1.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
OWASP2019.API10.ENFL - Ensure all sensitive function invocations are logged
OWASP2019.API7.DMSC - Inspect modifications to security settings
OWASP2019.API7.NCNRE - Do not catch 'NullReferenceException''
OWASP2019.API7.SMIII - Seal methods which implement internal interfaces
OWASP2019.API8.AUPS - Inspect calls to Process.Start()
OWASP2021.A2.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
OWASP2021.A5.NCNRE - Do not catch 'NullReferenceException''
OWASP2021.A5.SMIII - Seal methods which implement internal interfaces
OWASP2021.A8.DMSC - Inspect modifications to security settings
OWASP2023.API1.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
OWASP2023.API3.DMSC - Inspect modifications to security settings
OWASP2023.API3.NCNRE - Do not catch 'NullReferenceException''
OWASP2023.API3.SMIII - Seal methods which implement internal interfaces
OWASP2023.API6.ENFL - Ensure all sensitive function invocations are logged
OWASP2023.API8.DMSC - Inspect modifications to security settings
OWASP2023.API8.NCNRE - Do not catch 'NullReferenceException''
OWASP2023.API8.SMIII - Seal methods which implement internal interfaces
OWASP_ASVS_403.V12_3_6.DMSC - Inspect modifications to security settings
OWASP_ASVS_403.V1_11_2.LOCKSETGET - Lock both when either set or get is locked for a property.
PB.CONSOLEWRITE - Avoid System.Console 'Write()' or 'WriteLine()' statements
PCIDSS32.655.NCNRE - Do not catch 'NullReferenceException''
PCIDSS40.6244.NCNRE - Do not catch 'NullReferenceException''
SEC.AASV - Inspect calls to access environment variables
SEC.AFNRO - Inspect array fields that are declared as readonly
SEC.ALBM - Inspect calls to late-binding methods
SEC.APTIF - Avoid protected instance fields that could be accessed by untrusted classes
SEC.ASNRF - Inspect static fields that are not readonly and consider making them readonly
SEC.AUIC - Avoid using public inner classes to prevent access from untrusted classes
SEC.AUMS - Inspect uses of Millisecond on System.DateTime for security problems
SEC.AUPS - Inspect calls to Process.Start()
SEC.AUSD - Inspect uses of System.DateTime for security holes
SEC.DMSC - Inspect modifications to security settings
SEC.HPTR - Make pointer type fields private
SEC.MCMF - For security, avoid making your 'Clone()' method " virtual "
SEC.SMIII - Seal methods which implement internal interfaces
SEC.USSCR - Use System.Security.Cryptography.RandomNumberGenerator instead of System.Random
SERIAL.GETOBJ - Call WriteObjectdata while implementing ISerializable.GetObjectData.
SPR.ENFL - Ensure all sensitive function invocations are logged
VVSG.2_4_A.APTIF - Avoid protected instance fields that could be accessed by untrusted classes
VVSG.2_4_A.AUIC - Avoid using public inner classes to prevent access from untrusted classes
VVSG.2_4_A.HPTR - Make pointer type fields private
VVSG.2_4_A.SMIII - Seal methods which implement internal interfaces
VVSG.2_5_4_I.HPTR - Make pointer type fields private
VVSG.2_5_4_I.NOPT - Do not use pointer types if you want to be CLS-compliant
VVSG.2_5_B.INVOKE - Prefer asynchronous calls to synchronized calls.
VVSG.5_2_B.TOLOWERTOUPPER - Do not use directly ToLower(), ToUpper() string methods.
...