The patterns behind every CVE

A CVE is one bug. A CWE is the root-cause pattern that let it happen — learn one and you’ll recognise it the next time it shows up wearing a different CVE ID.

969
Weaknesses catalogued
CWENameAbstractionCVEs mapped
CWE-1004Sensitive Cookie Without 'HttpOnly' FlagVariant41
CWE-1007Insufficient Visual Distinction of Homoglyphs Presented to UserBase4
CWE-102Struts: Duplicate Validation FormsVariant0
CWE-1021Improper Restriction of Rendered UI Layers or FramesBase134
CWE-1022Use of Web Link to Untrusted Target with window.opener AccessVariant13
CWE-1023Incomplete Comparison with Missing FactorsClass15
CWE-1024Comparison of Incompatible TypesBase1
CWE-1025Comparison Using Wrong FactorsBase14
CWE-103Struts: Incomplete validate() Method DefinitionVariant0
CWE-1037Processor Optimization Removal or Modification of Security-critical CodeBase4
CWE-1038Insecure Automated OptimizationsClass6
CWE-1039Inadequate Detection or Handling of Adversarial Input Perturbations in Automated Recognition MechanismClass3
CWE-104Struts: Form Bean Does Not Extend Validation ClassVariant0
CWE-1041Use of Redundant CodeBase0
CWE-1042Static Member Data Element outside of a Singleton Class ElementVariant0
CWE-1043Data Element Aggregating an Excessively Large Number of Non-Primitive ElementsBase0
CWE-1044Architecture with Number of Horizontal Layers Outside of Expected RangeBase0
CWE-1045Parent Class with a Virtual Destructor and a Child Class without a Virtual DestructorBase0
CWE-1046Creation of Immutable Text Using String ConcatenationBase2
CWE-1047Modules with Circular DependenciesBase0
Page 1 of 49 · 969 total
Next