Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
793 CWEs
API response| CWE | Name | Mapping usage | Occurrences |
|---|---|---|---|
| CWE-85 | Doubled Character XSS Manipulations | Allowed | 2 |
| CWE-815 | OWASP Top Ten 2010 Category A6 - Security Misconfiguration | Prohibited | 2 |
| CWE-797 | Only Filtering Special Elements at an Absolute Position | Allowed | 2 |
| CWE-769 | DEPRECATED: Uncontrolled File Descriptor Consumption | Prohibited | 2 |
| CWE-730 | OWASP Top Ten 2004 Category A9 - Denial of Service | Prohibited | 2 |
| CWE-689 | Permission Race Condition During Resource Copy | Allowed | 2 |
| CWE-655 | Insufficient Psychological Acceptability | Allowed-with-Review | 2 |
| CWE-637 | Unnecessary Complexity in Protection Mechanism (Not Using 'Economy of Mechanism') | Allowed-with-Review | 2 |
| CWE-622 | Improper Validation of Function Hook Arguments | Allowed | 2 |
| CWE-563 | Assignment to Variable without Use | Allowed | 2 |
| CWE-535 | Exposure of Information Through Shell Error Message | Allowed | 2 |
| CWE-531 | Inclusion of Sensitive Information in Test Code | Allowed | 2 |
| CWE-528 | Exposure of Core Dump File to an Unauthorized Control Sphere | Allowed | 2 |
| CWE-499 | Serializable Class Containing Sensitive Data | Allowed | 2 |
| CWE-483 | Incorrect Block Delimitation | Allowed | 2 |
| CWE-479 | Signal Handler Use of a Non-reentrant Function | Allowed | 2 |
| CWE-465 | Pointer Issues | Prohibited | 2 |
| CWE-46 | Path Equivalence: 'filename ' (Trailing Space) | Allowed | 2 |
| CWE-450 | Multiple Interpretations of UI Input | Allowed | 2 |
| CWE-422 | Unprotected Windows Messaging Channel | Allowed | 2 |
| CWE-396 | Declaration of Catch for Generic Exception | Allowed | 2 |
| CWE-360 | Trust of System Event Data | Allowed | 2 |
| CWE-339 | Small Seed Space in PRNG | Allowed | 2 |
| CWE-32 | Path Traversal: '...' (Triple Dot) | Allowed | 2 |
| CWE-224 | Obscured Security-relevant Information by Alternate Name | Allowed | 2 |
| CWE-221 | Information Loss or Omission | Allowed-with-Review | 2 |
| CWE-199 | Information Management Errors | Prohibited | 2 |
| CWE-175 | Improper Handling of Mixed Encoding | Allowed | 2 |
| CWE-157 | Failure to Sanitize Paired Delimiters | Allowed | 2 |
| CWE-1463 | Insufficient Session Timeout Value | Allowed | 2 |
| CWE-145 | Improper Neutralization of Section Delimiters | Allowed | 2 |
| CWE-1334 | Unauthorized Error Injection Can Degrade Hardware Redundancy | Allowed | 2 |
| CWE-1332 | Improper Handling of Faults that Lead to Instruction Skips | Allowed | 2 |
| CWE-1330 | Remanent Data Readable after Memory Erase | Allowed | 2 |
| CWE-1323 | Improper Management of Sensitive Trace Data | Allowed | 2 |
| CWE-1316 | Fabric-Address Map Allows Programming of Unwarranted Overlaps of Protected and Unprotected Ranges | Allowed | 2 |
| CWE-1304 | Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation | Allowed | 2 |
| CWE-1301 | Insufficient or Incomplete Data Removal within Hardware Component | Allowed | 2 |
| CWE-1294 | Insecure Security Identifier Mechanism | Allowed-with-Review | 2 |
| CWE-1291 | Public Key Re-Use for Signing both Debug and Production Code | Allowed | 2 |
| CWE-1290 | Incorrect Decoding of Security Identifiers | Allowed | 2 |
| CWE-1277 | Firmware Not Updateable | Allowed | 2 |
| CWE-1276 | Hardware Child Block Incorrectly Connected to Parent System | Allowed | 2 |
| CWE-1251 | Mirrored Regions with Different Values | Allowed | 2 |
| CWE-1249 | Application-Level Admin Tool with Inconsistent View of Underlying Operating System | Allowed | 2 |
| CWE-1221 | Incorrect Register Defaults or Module Parameters | Allowed | 2 |
| CWE-1149 | SEI CERT Oracle Secure Coding Standard for Java - Guidelines 15. Platform Security (SEC) | Prohibited | 2 |
| CWE-1112 | Incomplete Documentation of Program Execution | Prohibited | 2 |
| CWE-111 | Direct Use of Unsafe JNI | Allowed | 2 |
| CWE-1107 | Insufficient Isolation of Symbolic Constant Definitions | Prohibited | 2 |