The patterns behind every CVE

A CVE is one bug. A CWE is the root-cause pattern that let it happen — learn one and you’ll recognise it the next time it shows up wearing a different CVE ID.

969
Weaknesses catalogued
CWENameAbstractionCVEs mapped
CWE-260Password in Configuration FileBase23
CWE-261Weak Encoding for PasswordBase39
CWE-262Not Using Password AgingBase6
CWE-263Password Aging with Long ExpirationBase1
CWE-266Incorrect Privilege AssignmentBase1,056
CWE-267Privilege Defined With Unsafe ActionsBase53
CWE-268Privilege ChainingBase22
CWE-269Improper Privilege ManagementClass1,612
CWE-27Path Traversal: 'dir/../../filename'Variant24
CWE-270Privilege Context Switching ErrorBase26
CWE-271Privilege Dropping / Lowering ErrorsClass12
CWE-272Least Privilege ViolationBase37
CWE-273Improper Check for Dropped PrivilegesBase22
CWE-274Improper Handling of Insufficient PrivilegesBase40
CWE-276Incorrect Default PermissionsBase577
CWE-277Insecure Inherited PermissionsVariant50
CWE-278Insecure Preserved Inherited PermissionsVariant5
CWE-279Incorrect Execution-Assigned PermissionsVariant23
CWE-28Path Traversal: '..\filedir'Variant1
CWE-280Improper Handling of Insufficient Permissions or PrivilegesBase138
Page 21 of 49 · 969 total
PreviousNext