The patterns behind every CVE

A CVE is one bug. A CWE is the root-cause pattern that let it happen — learn one and you’ll recognise it the next time it shows up wearing a different CVE ID.

969
Weaknesses catalogued
CWENameAbstractionCVEs mapped
CWE-158Improper Neutralization of Null Byte or NUL CharacterVariant26
CWE-159Improper Handling of Invalid Use of Special ElementsClass13
CWE-160Improper Neutralization of Leading Special ElementsVariant0
CWE-161Improper Neutralization of Multiple Leading Special ElementsVariant0
CWE-162Improper Neutralization of Trailing Special ElementsVariant1
CWE-163Improper Neutralization of Multiple Trailing Special ElementsVariant0
CWE-164Improper Neutralization of Internal Special ElementsVariant2
CWE-165Improper Neutralization of Multiple Internal Special ElementsVariant0
CWE-166Improper Handling of Missing Special ElementBase3
CWE-167Improper Handling of Additional Special ElementBase5
CWE-168Improper Handling of Inconsistent Special ElementsBase3
CWE-170Improper Null TerminationBase49
CWE-172Encoding ErrorClass8
CWE-173Improper Handling of Alternate EncodingVariant5
CWE-174Double Decoding of the Same DataVariant1
CWE-175Improper Handling of Mixed EncodingVariant0
CWE-176Improper Handling of Unicode EncodingVariant28
CWE-177Improper Handling of URL Encoding (Hex Encoding)Variant15
CWE-178Improper Handling of Case SensitivityBase67
CWE-179Incorrect Behavior Order: Early ValidationBase5
Page 16 of 49 · 969 total
PreviousNext