The patterns behind every CVE

A CVE is one bug. A CWE is the root-cause pattern that let it happen — learn one and you’ll recognise it the next time it shows up wearing a different CVE ID.

969
Weaknesses catalogued
CWENameAbstractionCVEs mapped
CWE-220Storage of File With Sensitive Data Under FTP RootVariant0
CWE-221Information Loss or OmissionClass1
CWE-222Truncation of Security-relevant InformationBase0
CWE-223Omission of Security-relevant InformationBase10
CWE-224Obscured Security-relevant Information by Alternate NameBase1
CWE-225DEPRECATED: General Information Management ProblemsBase0
CWE-226Sensitive Information in Resource Not Removed Before ReuseBase34
CWE-228Improper Handling of Syntactically Invalid StructureClass17
CWE-229Improper Handling of ValuesBase15
CWE-23Relative Path TraversalBase472
CWE-230Improper Handling of Missing ValuesVariant11
CWE-231Improper Handling of Extra ValuesVariant4
CWE-232Improper Handling of Undefined ValuesVariant11
CWE-233Improper Handling of ParametersBase23
CWE-234Failure to Handle Missing ParameterVariant1
CWE-235Improper Handling of Extra ParametersVariant4
CWE-236Improper Handling of Undefined ParametersVariant2
CWE-237Improper Handling of Structural ElementsBase4
CWE-238Improper Handling of Incomplete Structural ElementsVariant0
CWE-239Failure to Handle Incomplete ElementVariant3
Page 19 of 49 · 969 total
PreviousNext