Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
793 CWEs
API response| CWE | Name | Mapping usage | Occurrences |
|---|---|---|---|
| CWE-774 | Allocation of File Descriptors or Handles Without Limits or Throttling | Allowed | 5 |
| CWE-627 | Dynamic Variable Evaluation | Allowed | 5 |
| CWE-615 | Inclusion of Sensitive Information in Source Code Comments | Allowed | 5 |
| CWE-557 | Concurrency Issues | Prohibited | 5 |
| CWE-455 | Non-exit on Failed Initialization | Allowed | 5 |
| CWE-454 | External Initialization of Trusted Variables or Data Stores | Allowed | 5 |
| CWE-448 | Obsolete Feature in UI | Allowed | 5 |
| CWE-386 | Symbolic Name not Mapping to Correct Object | Allowed | 5 |
| CWE-343 | Predictable Value Range from Previous Values | Allowed | 5 |
| CWE-332 | Insufficient Entropy in PRNG | Allowed | 5 |
| CWE-278 | Insecure Preserved Inherited Permissions | Allowed | 5 |
| CWE-231 | Improper Handling of Extra Values | Allowed | 5 |
| CWE-210 | Self-generated Error Message Containing Sensitive Information | Allowed | 5 |
| CWE-194 | Unexpected Sign Extension | Allowed | 5 |
| CWE-182 | Collapse of Data into Unsafe Value | Allowed | 5 |
| CWE-167 | Improper Handling of Additional Special Element | Allowed | 5 |
| CWE-164 | Improper Neutralization of Internal Special Elements | Allowed | 5 |
| CWE-153 | Improper Neutralization of Substitution Characters | Allowed | 5 |
| CWE-148 | Improper Neutralization of Input Leaders | Allowed | 5 |
| CWE-1420 | Exposure of Sensitive Information during Transient Execution | Allowed-with-Review | 5 |
| CWE-1280 | Access Control Check Implemented After Asset is Accessed | Allowed | 5 |
| CWE-1269 | Product Released in Non-Release Configuration | Allowed | 5 |
| CWE-1245 | Improper Finite State Machines (FSMs) in Hardware Logic | Allowed | 5 |
| CWE-1124 | Excessively Deep Nesting | Prohibited | 5 |
| CWE-1007 | Insufficient Visual Distinction of Homoglyphs Presented to User | Allowed | 5 |
| CWE-792 | Incomplete Filtering of One or More Instances of Special Elements | Allowed | 4 |
| CWE-767 | Access to Critical Private Variable via Public Method | Allowed | 4 |
| CWE-733 | Compiler Optimization Removal or Modification of Security-critical Code | Allowed | 4 |
| CWE-685 | Function Call With Incorrect Number of Arguments | Allowed | 4 |
| CWE-683 | Function Call With Incorrect Order of Arguments | Allowed | 4 |
| CWE-675 | Multiple Operations on Resource in Single-Operation Context | Allowed-with-Review | 4 |
| CWE-473 | PHP External Variable Modification | Allowed | 4 |
| CWE-467 | Use of sizeof() on a Pointer Type | Allowed | 4 |
| CWE-414 | Missing Lock Check | Allowed | 4 |
| CWE-368 | Context Switching Race Condition | Allowed | 4 |
| CWE-336 | Same Seed in Pseudo-Random Number Generator (PRNG) | Allowed | 4 |
| CWE-240 | Improper Handling of Inconsistent Structural Elements | Allowed | 4 |
| CWE-237 | Improper Handling of Structural Elements | Allowed | 4 |
| CWE-227 | 7PK - API Abuse | Prohibited | 4 |
| CWE-216 | DEPRECATED: Containment Errors (Container Errors) | Prohibited | 4 |
| CWE-205 | Observable Behavioral Discrepancy | Allowed | 4 |
| CWE-188 | Reliance on Data/Memory Layout | Allowed | 4 |
| CWE-186 | Overly Restrictive Regular Expression | Allowed | 4 |
| CWE-156 | Improper Neutralization of Whitespace | Allowed | 4 |
| CWE-142 | Improper Neutralization of Value Delimiters | Allowed | 4 |
| CWE-1319 | Improper Protection against Electromagnetic Fault Injection (EM-FI) | Allowed | 4 |
| CWE-1300 | Improper Protection of Physical Side Channels | Allowed | 4 |
| CWE-1234 | Hardware Internal or Debug Modes Allow Override of Locks | Allowed | 4 |
| CWE-1233 | Security-Sensitive Hardware Controls with Missing Lock Bit Protection | Allowed | 4 |
| CWE-1125 | Excessive Attack Surface | Prohibited | 4 |