The patterns behind every CVE

A CVE is one bug. A CWE is the root-cause pattern that let it happen — learn one and you’ll recognise it the next time it shows up wearing a different CVE ID.

969
Weaknesses catalogued
CWENameAbstractionCVEs mapped
CWE-1327Binding to an Unrestricted IP AddressBase25
CWE-1328Security Version Number Mutable to Older VersionsBase5
CWE-1329Reliance on Component That is Not UpdateableBase6
CWE-1330Remanent Data Readable after Memory EraseVariant1
CWE-1331Improper Isolation of Shared Resources in Network On Chip (NoC)Base0
CWE-1332Improper Handling of Faults that Lead to Instruction SkipsBase2
CWE-1333Inefficient Regular Expression ComplexityBase350
CWE-1334Unauthorized Error Injection Can Degrade Hardware RedundancyBase2
CWE-1335Incorrect Bitwise Shift of IntegerBase4
CWE-1336Improper Neutralization of Special Elements Used in a Template EngineBase224
CWE-1338Improper Protections Against Hardware OverheatingBase0
CWE-1339Insufficient Precision or Accuracy of a Real NumberBase0
CWE-134Use of Externally-Controlled Format StringBase142
CWE-1341Multiple Releases of Same Resource or HandleBase3
CWE-1342Information Exposure through Microarchitectural State after Transient ExecutionBase2
CWE-135Incorrect Calculation of Multi-Byte String LengthBase2
CWE-1351Improper Handling of Hardware Behavior in Exceptionally Cold EnvironmentsBase0
CWE-1357Reliance on Insufficiently Trustworthy ComponentClass8
CWE-138Improper Neutralization of Special ElementsClass13
CWE-1384Improper Handling of Physical or Environmental ConditionsClass3
Page 13 of 49 · 969 total
PreviousNext