The patterns behind every CVE

A CVE is one bug. A CWE is the root-cause pattern that let it happen — learn one and you’ll recognise it the next time it shows up wearing a different CVE ID.

969
Weaknesses catalogued
CWENameAbstractionCVEs mapped
CWE-220Storage of File With Sensitive Data Under FTP RootVariant0
CWE-221Information Loss or OmissionClass3
CWE-222Truncation of Security-relevant InformationBase1
CWE-223Omission of Security-relevant InformationBase12
CWE-224Obscured Security-relevant Information by Alternate NameBase1
CWE-225DEPRECATED: General Information Management ProblemsBase0
CWE-226Sensitive Information in Resource Not Removed Before ReuseBase39
CWE-228Improper Handling of Syntactically Invalid StructureClass19
CWE-229Improper Handling of ValuesBase16
CWE-23Relative Path TraversalBase527
CWE-230Improper Handling of Missing ValuesVariant11
CWE-231Improper Handling of Extra ValuesVariant4
CWE-232Improper Handling of Undefined ValuesVariant12
CWE-233Improper Handling of ParametersBase24
CWE-234Failure to Handle Missing ParameterVariant1
CWE-235Improper Handling of Extra ParametersVariant4
CWE-236Improper Handling of Undefined ParametersVariant2
CWE-237Improper Handling of Structural ElementsBase4
CWE-238Improper Handling of Incomplete Structural ElementsVariant0
CWE-239Failure to Handle Incomplete ElementVariant3
Page 19 of 49 · 969 total
PreviousNext