The patterns behind every CVE

A CVE is one bug. A CWE is the root-cause pattern that let it happen — learn one and you’ll recognise it the next time it shows up wearing a different CVE ID.

969
Weaknesses catalogued
CWENameAbstractionCVEs mapped
CWE-357Insufficient UI Warning of Dangerous OperationsBase20
CWE-358Improperly Implemented Security Check for StandardBase91
CWE-359Exposure of Private Personal Information to an Unauthorized ActorBase160
CWE-36Absolute Path TraversalBase133
CWE-360Trust of System Event DataBase2
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Class849
CWE-363Race Condition Enabling Link FollowingBase11
CWE-364Signal Handler Race ConditionBase12
CWE-365DEPRECATED: Race Condition in SwitchBase0
CWE-366Race Condition within a ThreadBase14
CWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionBase534
CWE-368Context Switching Race ConditionBase4
CWE-369Divide By ZeroBase169
CWE-37Path Traversal: '/absolute/pathname/here'Variant6
CWE-370Missing Check for Certificate Revocation after Initial CheckVariant0
CWE-372Incomplete Internal State DistinctionBase8
CWE-373DEPRECATED: State Synchronization ErrorBase0
CWE-374Passing Mutable Objects to an Untrusted MethodBase0
CWE-375Returning a Mutable Object to an Untrusted CallerBase0
CWE-377Insecure Temporary FileClass92
Page 26 of 49 · 969 total
PreviousNext