The patterns behind every CVE

A CVE is one bug. A CWE is the root-cause pattern that let it happen — learn one and you’ll recognise it the next time it shows up wearing a different CVE ID.

969
Weaknesses catalogued
CWENameAbstractionCVEs mapped
CWE-30Path Traversal: '\dir\..\filename'Variant2
CWE-300Channel Accessible by Non-EndpointClass52
CWE-301Reflection Attack in an Authentication ProtocolBase1
CWE-302Authentication Bypass by Assumed-Immutable DataBase45
CWE-303Incorrect Implementation of Authentication AlgorithmBase108
CWE-304Missing Critical Step in AuthenticationBase48
CWE-305Authentication Bypass by Primary WeaknessBase166
CWE-306Missing Authentication for Critical FunctionBase2,650
CWE-307Improper Restriction of Excessive Authentication AttemptsBase472
CWE-308Use of Single-factor AuthenticationBase18
CWE-309Use of Password System for Primary AuthenticationBase2
CWE-31Path Traversal: 'dir\..\..\filename'Variant1
CWE-311Missing Encryption of Sensitive DataClass290
CWE-312Cleartext Storage of Sensitive InformationBase377
CWE-313Cleartext Storage in a File or on DiskVariant33
CWE-314Cleartext Storage in the RegistryVariant1
CWE-315Cleartext Storage of Sensitive Information in a CookieVariant6
CWE-316Cleartext Storage of Sensitive Information in MemoryVariant35
CWE-317Cleartext Storage of Sensitive Information in GUIVariant7
CWE-318Cleartext Storage of Sensitive Information in ExecutableVariant1
Page 23 of 49 · 969 total
PreviousNext