The patterns behind every CVE

A CVE is one bug. A CWE is the root-cause pattern that let it happen — learn one and you’ll recognise it the next time it shows up wearing a different CVE ID.

969
Weaknesses catalogued
CWENameAbstractionCVEs mapped
CWE-67Improper Handling of Windows Device NamesVariant5
CWE-670Always-Incorrect Control Flow ImplementationClass92
CWE-671Lack of Administrator Control over SecurityClass5
CWE-672Operation on a Resource after Expiration or ReleaseClass53
CWE-673External Influence of Sphere DefinitionClass1
CWE-674Uncontrolled RecursionClass296
CWE-675Multiple Operations on Resource in Single-Operation ContextClass2
CWE-676Use of Potentially Dangerous FunctionBase9
CWE-680Integer Overflow to Buffer OverflowCompound103
CWE-681Incorrect Conversion between Numeric TypesBase64
CWE-682Incorrect CalculationPillar66
CWE-683Function Call With Incorrect Order of ArgumentsVariant4
CWE-684Incorrect Provision of Specified FunctionalityClass29
CWE-685Function Call With Incorrect Number of ArgumentsVariant0
CWE-686Function Call With Incorrect Argument TypeVariant4
CWE-687Function Call With Incorrectly Specified Argument ValueVariant3
CWE-688Function Call With Incorrect Variable or Reference as ArgumentVariant3
CWE-689Permission Race Condition During Resource CopyCompound2
CWE-69Improper Handling of Windows ::DATA Alternate Data StreamVariant2
CWE-690Unchecked Return Value to NULL Pointer DereferenceCompound32
Page 41 of 49 · 969 total
PreviousNext