The patterns behind every CVE

A CVE is one bug. A CWE is the root-cause pattern that let it happen — learn one and you’ll recognise it the next time it shows up wearing a different CVE ID.

969
Weaknesses catalogued
CWENameAbstractionCVEs mapped
CWE-201Insertion of Sensitive Information Into Sent DataBase461
CWE-202Exposure of Sensitive Information Through Data QueriesBase41
CWE-203Observable DiscrepancyBase261
CWE-204Observable Response DiscrepancyBase195
CWE-205Observable Behavioral DiscrepancyBase3
CWE-206Observable Internal Behavioral DiscrepancyVariant1
CWE-207Observable Behavioral Discrepancy With Equivalent ProductsVariant1
CWE-208Observable Timing DiscrepancyBase194
CWE-209Generation of Error Message Containing Sensitive InformationBase428
CWE-210Self-generated Error Message Containing Sensitive InformationBase4
CWE-211Externally-Generated Error Message Containing Sensitive InformationBase0
CWE-212Improper Removal of Sensitive Information Before Storage or TransferBase82
CWE-213Exposure of Sensitive Information Due to Incompatible PoliciesBase34
CWE-214Invocation of Process Using Visible Sensitive InformationBase39
CWE-215Insertion of Sensitive Information Into Debugging CodeBase25
CWE-216DEPRECATED: Containment Errors (Container Errors)Class4
CWE-217DEPRECATED: Failure to Protect Stored Data from ModificationBase0
CWE-218DEPRECATED: Failure to provide confidentiality for stored dataBase0
CWE-219Storage of File with Sensitive Data Under Web RootVariant6
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Base5,579
Page 18 of 49 · 969 total
PreviousNext