Browse by weakness (CWE)
Every CVE maps to a weakness class. Pick one to see all the findings of that kind and what the field said about them.
- CWE-79Cross-site Scripting1099
- CWE-416Use After Free534
- CWE-22Path Traversal443
- CWE-89SQL Injection387
- CWE-862Missing Authorization353
- CWE-20Improper Input Validation349
- CWE-787Out-of-bounds Write324
- CWE-78OS Command Injection301
- CWE-125Out-of-bounds Read283
- CWE-94Code Injection265
- CWE-284257
- CWE-918Server-Side Request Forgery (SSRF)238
- CWE-122236
- CWE-476NULL Pointer Dereference208
- CWE-502Deserialization of Untrusted Data206
- CWE-200Exposure of Sensitive Information186
- CWE-74183
- CWE-863Incorrect Authorization180
- CWE-400Uncontrolled Resource Consumption170
- CWE-306Missing Authentication for Critical Function159
- CWE-77154
- CWE-287Improper Authentication154
- CWE-639150
- CWE-434Unrestricted Upload of Dangerous File Type146
- CWE-190Integer Overflow136
- CWE-119Improper Restriction of Memory Buffer136
- CWE-121134
- CWE-120Buffer Overflow128
- CWE-770118
- CWE-362Race Condition111
- CWE-352Cross-Site Request Forgery (CSRF)111
- CWE-40198
- CWE-269Improper Privilege Management78
- CWE-45170
- CWE-295Improper Certificate Validation68
- CWE-69366
- CWE-26664
- CWE-5964
- CWE-28563
- CWE-84353
- CWE-34649
- CWE-90849
- CWE-7348
- CWE-28844
- CWE-798Use of Hard-coded Credentials43
- CWE-60143
- CWE-34742
- CWE-29042
- CWE-83542
- CWE-522Insufficiently Protected Credentials37
- CWE-9837
- CWE-67436
- CWE-45735
- CWE-34534
- CWE-2333
- CWE-367Time-of-check Time-of-use (TOCTOU)33
- CWE-19132
- CWE-61332
- CWE-12932
- CWE-732Incorrect Permission Assignment31
- CWE-415Double Free31
- CWE-44430
- CWE-12629
- CWE-40428
- CWE-61728
- CWE-611XML External Entity (XXE)28
- CWE-53227
- CWE-42727
- CWE-276Incorrect Default Permissions26
- CWE-66726
- CWE-66826
- CWE-30725
- CWE-20125
- CWE-31225
- CWE-91524
- CWE-132124
- CWE-75424
- CWE-8824
- CWE-19323
- CWE-42823
- CWE-60223
- CWE-40723
- CWE-133323
- CWE-20922
- CWE-29421
- CWE-32721
- CWE-49720
- CWE-40920
- CWE-11620
- CWE-24819
- CWE-128419
- CWE-78919
- CWE-552Files Accessible to External Parties18
- CWE-31918
- CWE-64017
- CWE-18416
- CWE-20316
- CWE-17815
- CWE-38414
- CWE-47214
- CWE-6113
- CWE-42613
- CWE-82213
- CWE-25012
- CWE-82912
- CWE-1188Insecure Default Initialization12
- CWE-47011
- CWE-9511
- CWE-20811
- CWE-26411
- CWE-74911
- CWE-28011
- CWE-9311
- CWE-3610
- CWE-33010
- CWE-91710
- CWE-31110
- CWE-49410
- CWE-94210
- CWE-28110
- CWE-36910
- CWE-8010
- CWE-122010
- CWE-32110
- CWE-30510
- CWE-12879
- CWE-3039
- CWE-7069
- CWE-4369
- CWE-3489
- CWE-12369
- CWE-3388
- CWE-13008
- CWE-7728
- CWE-9438
- CWE-3598
- CWE-1898
- CWE-918
- CWE-10217
- CWE-1317
- CWE-3267
- CWE-1837
- CWE-4257
- CWE-8257
- CWE-13367
- CWE-506Embedded Malicious Code7
- CWE-5247
- CWE-1977
- CWE-2567
- CWE-907
- CWE-1347
- CWE-6206
- CWE-3286
- CWE-2976
- CWE-7556
- CWE-6366
- CWE-8246
- CWE-1306
- CWE-3236
- CWE-13926
- CWE-356
- CWE-2046
- CWE-6695
- CWE-6065
- CWE-9165
- CWE-3855
- CWE-1705
- CWE-13935
- CWE-7765
- CWE-1135
- CWE-1585
- CWE-7045
- CWE-3545
- CWE-6105
- CWE-6705
- CWE-6975
- CWE-9234
- CWE-3254
- CWE-6534
- CWE-2894
- CWE-4204
- CWE-1390Weak Authentication4
- CWE-4894
- CWE-6474
- CWE-4244
- CWE-9224
- CWE-4594
- CWE-6444
- CWE-5214
- CWE-3314
- CWE-4414
- CWE-7073
- CWE-6813
- CWE-8413
- CWE-1233
- CWE-153
- CWE-5383
- CWE-4803
- CWE-13843
- CWE-8053
- CWE-1763
- CWE-3773
- CWE-10233
- CWE-2983
- CWE-2523
- CWE-7033
- CWE-7823
- CWE-4053
- CWE-1873
- CWE-7573
- CWE-9123
- CWE-3043
- CWE-6653
- CWE-6143
- CWE-3223
- CWE-12883
- CWE-6483
- CWE-3133
- CWE-13413
- CWE-9243
- CWE-12893
- CWE-7633
- CWE-7792
- CWE-7772
- CWE-9262
- CWE-6822
- CWE-1792
- CWE-5482
- CWE-2122
- CWE-8232
- CWE-3932
- CWE-9402
- CWE-6412
- CWE-8202
- CWE-9112
- CWE-4732
- CWE-3902
- CWE-4402
- CWE-3662
- CWE-13292
- CWE-6642
- CWE-242
- CWE-2332
- CWE-1152
- CWE-13852
- CWE-3352
- CWE-2772
- CWE-8402
- CWE-992
- CWE-7912
- CWE-3292
- CWE-3102
- CWE-13352
- CWE-5232
- CWE-5512
- CWE-1772
- CWE-1802
- CWE-3402
- CWE-3582
- CWE-6622
- CWE-12862
- CWE-2592
- CWE-762
- CWE-1272
- CWE-1852
- CWE-6962
- CWE-6722
- CWE-10502
- CWE-292
- CWE-1502
- CWE-7671
- CWE-3161
- CWE-6801
- CWE-8391
- CWE-4481
- CWE-8261
- CWE-1241
- CWE-3791
- CWE-12751
- CWE-9131
- CWE-10251
- CWE-3201
- CWE-8361
- CWE-7601
- CWE-2671
- CWE-1181
- CWE-2151
- CWE-4131
- CWE-191
- CWE-271
- CWE-8341
- CWE-7781
- CWE-12441
- CWE-12411
- CWE-3711
- CWE-5981
- CWE-251
- CWE-12631
- CWE-2551
- CWE-4101
- CWE-1961
- CWE-2711
- CWE-11241
- CWE-12301
- CWE-2421
- CWE-3021
- CWE-4771
- CWE-2791
- CWE-3491
- CWE-6711
- CWE-5641
- CWE-2721
- CWE-8071
- CWE-1721
- CWE-8211
- CWE-6861
- CWE-1381
- CWE-2731
- CWE-4661
- CWE-13131
- CWE-7581
- CWE-1441
- CWE-3951
- CWE-7711
- CWE-2411
- CWE-1591
- CWE-9091
- CWE-9411
- CWE-6031
- CWE-2351
- CWE-4671
- CWE-1471
- CWE-5731
- CWE-10461
- CWE-2141
- CWE-12991
- CWE-7751
- CWE-1171
- CWE-12951
- CWE-3861
- CWE-4881
- CWE-1451
- CWE-13941
- CWE-6451
- CWE-3531
- CWE-2821
- CWE-4031
- CWE-6501
- CWE-6921
- CWE-421
- CWE-3501
- CWE-5901
- CWE-461
- CWE-2361
- CWE-12401
- CWE-2261
- CWE-7921
- CWE-11741
- CWE-2861
- CWE-9101
- CWE-6941
- CWE-3371
- CWE-411
- CWE-4141
- CWE-2571
- CWE-5011
- CWE-3411
- CWE-2531
- CWE-2131
- CWE-10591
- CWE-12851
- CWE-4751
- CWE-11041
- CWE-10581
- CWE-441
- CWE-4741
- CWE-11891
- CWE-9391
- CWE-751
- CWE-3241
- CWE-13911
- CWE-8331
- CWE-3571
- CWE-7621
- CWE-3921
- CWE-3991
- CWE-6281
- CWE-5651
- CWE-7011
- CWE-1281
- CWE-2751