The patterns behind every CVE

A CVE is one bug. A CWE is the root-cause pattern that let it happen — learn one and you’ll recognise it the next time it shows up wearing a different CVE ID.

969
Weaknesses catalogued
CWENameAbstractionCVEs mapped
CWE-1120Excessive Code ComplexityClass0
CWE-1121Excessive McCabe Cyclomatic ComplexityBase0
CWE-1122Excessive Halstead ComplexityBase0
CWE-1123Excessive Use of Self-Modifying CodeBase0
CWE-1124Excessively Deep NestingBase3
CWE-1125Excessive Attack SurfaceBase5
CWE-1126Declaration of Variable with Unnecessarily Wide ScopeBase0
CWE-1127Compilation with Insufficient Warnings or ErrorsBase0
CWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')Variant92
CWE-114Process ControlClass22
CWE-115Misinterpretation of InputBase29
CWE-116Improper Encoding or Escaping of OutputClass291
CWE-1164Irrelevant CodeClass1
CWE-117Improper Output Neutralization for LogsBase108
CWE-1173Improper Use of Validation FrameworkBase7
CWE-1174ASP.NET Misconfiguration: Improper Model ValidationVariant0
CWE-1176Inefficient CPU ComputationClass2
CWE-1177Use of Prohibited CodeClass0
CWE-118Incorrect Access of Indexable Resource ('Range Error')Class12
CWE-1187DEPRECATED: Use of Uninitialized ResourceBase0
Page 6 of 49 · 969 total
PreviousNext