The patterns behind every CVE

A CVE is one bug. A CWE is the root-cause pattern that let it happen — learn one and you’ll recognise it the next time it shows up wearing a different CVE ID.

969
Weaknesses catalogued
CWENameAbstractionCVEs mapped
CWE-260Password in Configuration FileBase24
CWE-261Weak Encoding for PasswordBase41
CWE-262Not Using Password AgingBase6
CWE-263Password Aging with Long ExpirationBase1
CWE-266Incorrect Privilege AssignmentBase1,200
CWE-267Privilege Defined With Unsafe ActionsBase72
CWE-268Privilege ChainingBase22
CWE-269Improper Privilege ManagementClass2,188
CWE-27Path Traversal: 'dir/../../filename'Variant25
CWE-270Privilege Context Switching ErrorBase27
CWE-271Privilege Dropping / Lowering ErrorsClass12
CWE-272Least Privilege ViolationBase43
CWE-273Improper Check for Dropped PrivilegesBase27
CWE-274Improper Handling of Insufficient PrivilegesBase40
CWE-276Incorrect Default PermissionsBase615
CWE-277Insecure Inherited PermissionsVariant50
CWE-278Insecure Preserved Inherited PermissionsVariant5
CWE-279Incorrect Execution-Assigned PermissionsVariant23
CWE-28Path Traversal: '..\filedir'Variant1
CWE-280Improper Handling of Insufficient Permissions or PrivilegesBase154
Page 21 of 49 · 969 total
PreviousNext