The patterns behind every CVE

A CVE is one bug. A CWE is the root-cause pattern that let it happen — learn one and you’ll recognise it the next time it shows up wearing a different CVE ID.

969
Weaknesses catalogued
CWENameAbstractionCVEs mapped
CWE-1269Product Released in Non-Release ConfigurationBase3
CWE-127Buffer Under-readVariant10
CWE-1270Generation of Incorrect Security TokensBase9
CWE-1271Uninitialized Value on Reset for Registers Holding Security SettingsBase0
CWE-1272Sensitive Information Uncleared Before Debug/Power State TransitionBase1
CWE-1273Device Unlock Credential SharingBase0
CWE-1274Improper Access Control for Volatile Memory Containing Boot CodeBase7
CWE-1275Sensitive Cookie with Improper SameSite AttributeVariant32
CWE-1276Hardware Child Block Incorrectly Connected to Parent SystemBase1
CWE-1277Firmware Not UpdateableBase1
CWE-1278Missing Protection Against Hardware Reverse Engineering Using Integrated Circuit (IC) Imaging TechniquesBase1
CWE-1279Cryptographic Operations are run Before Supporting Units are ReadyBase3
CWE-128Wrap-around ErrorBase5
CWE-1280Access Control Check Implemented After Asset is AccessedBase3
CWE-1281Sequence of Processor Instructions Leads to Unexpected BehaviorBase6
CWE-1282Assumed-Immutable Data is Stored in Writable MemoryBase8
CWE-1283Mutable Attestation or Measurement Reporting DataBase3
CWE-1284Improper Validation of Specified Quantity in InputBase313
CWE-1285Improper Validation of Specified Index, Position, or Offset in InputBase61
CWE-1286Improper Validation of Syntactic Correctness of InputBase100
Page 10 of 49 · 969 total
PreviousNext