The patterns behind every CVE

A CVE is one bug. A CWE is the root-cause pattern that let it happen — learn one and you’ll recognise it the next time it shows up wearing a different CVE ID.

969
Weaknesses catalogued
CWENameAbstractionCVEs mapped
CWE-506Embedded Malicious CodeClass99
CWE-507Trojan HorseBase1
CWE-508Non-Replicating Malicious CodeBase0
CWE-509Replicating Malicious Code (Virus or Worm)Base1
CWE-51Path Equivalence: '/multiple//internal/slash'Variant0
CWE-510TrapdoorBase0
CWE-511Logic/Time BombBase0
CWE-512SpywareBase0
CWE-514Covert ChannelClass1
CWE-515Covert Storage ChannelBase1
CWE-516DEPRECATED: Covert Timing ChannelBase0
CWE-52Path Equivalence: '/multiple/trailing/slash//'Variant0
CWE-520.NET Misconfiguration: Use of ImpersonationVariant4
CWE-521Weak Password RequirementsBase122
CWE-522Insufficiently Protected CredentialsClass527
CWE-523Unprotected Transport of CredentialsBase23
CWE-524Use of Cache Containing Sensitive InformationBase58
CWE-525Use of Web Browser Cache Containing Sensitive InformationVariant30
CWE-526Cleartext Storage of Sensitive Information in an Environment VariableVariant19
CWE-527Exposure of Version-Control Repository to an Unauthorized Control SphereVariant3
Page 33 of 49 · 969 total
PreviousNext