The patterns behind every CVE

A CVE is one bug. A CWE is the root-cause pattern that let it happen — learn one and you’ll recognise it the next time it shows up wearing a different CVE ID.

969
Weaknesses catalogued
CWENameAbstractionCVEs mapped
CWE-1188Initialization of a Resource with an Insecure DefaultBase227
CWE-1189Improper Isolation of Shared Resources on System-on-a-Chip (SoC)Base6
CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferClass3,334
CWE-1190DMA Device Enabled Too Early in Boot PhaseBase2
CWE-1191On-Chip Debug and Test Interface With Improper Access ControlBase24
CWE-1192Improper Identifier for IP Block used in System-On-Chip (SOC)Base0
CWE-1193Power-On of Untrusted Execution Core Before Enabling Fabric Access ControlBase0
CWE-12ASP.NET Misconfiguration: Missing Custom Error PageVariant1
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Base2,226
CWE-1204Generation of Weak Initialization Vector (IV)Base6
CWE-1209Failure to Disable Reserved BitsBase0
CWE-121Stack-based Buffer OverflowVariant3,359
CWE-122Heap-based Buffer OverflowVariant3,470
CWE-1220Insufficient Granularity of Access ControlBase119
CWE-1221Incorrect Register Defaults or Module ParametersBase2
CWE-1222Insufficient Granularity of Address Regions Protected by Register LocksVariant1
CWE-1223Race Condition for Write-Once AttributesBase1
CWE-1224Improper Restriction of Write-Once Bit FieldsBase1
CWE-1229Creation of Emergent ResourceClass0
CWE-123Write-what-where ConditionBase50
Page 7 of 49 · 969 total
PreviousNext