Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
777 CWEs
API response| CWE | Name | Mapping usage | Occurrences |
|---|---|---|---|
| CWE-315 | Cleartext Storage of Sensitive Information in a Cookie | Allowed | 6 |
| CWE-262 | Not Using Password Aging | Allowed | 6 |
| CWE-249 | DEPRECATED: Often Misused: Path Manipulation | Prohibited | 6 |
| CWE-235 | Improper Handling of Extra Parameters | Allowed | 6 |
| CWE-1423 | Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution | Allowed | 6 |
| CWE-1421 | Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution | Allowed | 6 |
| CWE-1335 | Incorrect Bitwise Shift of Integer | Allowed | 6 |
| CWE-1320 | Improper Protection for Outbound Error Messages and Alert Signals | Allowed | 6 |
| CWE-1281 | Sequence of Processor Instructions Leads to Unexpected Behavior | Allowed | 6 |
| CWE-128 | Wrap-around Error | Allowed | 6 |
| CWE-1274 | Improper Access Control for Volatile Memory Containing Boot Code | Allowed | 6 |
| CWE-1176 | Inefficient CPU Computation | Allowed-with-Review | 6 |
| CWE-1077 | Floating Point Comparison with Incorrect Operator | Allowed | 6 |
| CWE-1059 | Insufficient Technical Documentation | Prohibited | 6 |
| CWE-1038 | Insecure Automated Optimizations | Allowed-with-Review | 6 |
| CWE-97 | Improper Neutralization of Server-Side Includes (SSI) Within a Web Page | Allowed | 5 |
| CWE-839 | Numeric Range Comparison Without Minimum Check | Allowed | 5 |
| CWE-827 | Improper Control of Document Type Definition | Allowed | 5 |
| CWE-794 | Incomplete Filtering of Multiple Instances of Special Elements | Allowed | 5 |
| CWE-774 | Allocation of File Descriptors or Handles Without Limits or Throttling | Allowed | 5 |
| CWE-688 | Function Call With Incorrect Variable or Reference as Argument | Allowed | 5 |
| CWE-686 | Function Call With Incorrect Argument Type | Allowed | 5 |
| CWE-67 | Improper Handling of Windows Device Names | Allowed | 5 |
| CWE-666 | Operation on Resource in Wrong Phase of Lifetime | Discouraged | 5 |
| CWE-649 | Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking | Allowed | 5 |
| CWE-627 | Dynamic Variable Evaluation | Allowed | 5 |
| CWE-615 | Inclusion of Sensitive Information in Source Code Comments | Allowed | 5 |
| CWE-544 | Missing Standardized Error Handling Mechanism | Allowed | 5 |
| CWE-520 | .NET Misconfiguration: Use of Impersonation | Allowed | 5 |
| CWE-454 | External Initialization of Trusted Variables or Data Stores | Allowed | 5 |
| CWE-448 | Obsolete Feature in UI | Allowed | 5 |
| CWE-343 | Predictable Value Range from Previous Values | Allowed | 5 |
| CWE-332 | Insufficient Entropy in PRNG | Allowed | 5 |
| CWE-278 | Insecure Preserved Inherited Permissions | Allowed | 5 |
| CWE-210 | Self-generated Error Message Containing Sensitive Information | Allowed | 5 |
| CWE-167 | Improper Handling of Additional Special Element | Allowed | 5 |
| CWE-153 | Improper Neutralization of Substitution Characters | Allowed | 5 |
| CWE-149 | Improper Neutralization of Quoting Syntax | Allowed | 5 |
| CWE-147 | Improper Neutralization of Input Terminators | Allowed | 5 |
| CWE-1342 | Information Exposure through Microarchitectural State after Transient Execution | Allowed | 5 |
| CWE-1280 | Access Control Check Implemented After Asset is Accessed | Allowed | 5 |
| CWE-1254 | Incorrect Comparison Logic Granularity | Allowed | 5 |
| CWE-1247 | Improper Protection Against Voltage and Clock Glitches | Allowed | 5 |
| CWE-1245 | Improper Finite State Machines (FSMs) in Hardware Logic | Allowed | 5 |
| CWE-1204 | Generation of Weak Initialization Vector (IV) | Allowed | 5 |
| CWE-1124 | Excessively Deep Nesting | Prohibited | 5 |
| CWE-1007 | Insufficient Visual Distinction of Homoglyphs Presented to User | Allowed | 5 |
| CWE-792 | Incomplete Filtering of One or More Instances of Special Elements | Allowed | 4 |