Browse by weakness (CWE)
Every CVE maps to a weakness class. Pick one to see all the findings of that kind and what the field said about them.
- CWE-787Out-of-bounds Write171
- CWE-78OS Command Injection163
- CWE-22Path Traversal131
- CWE-20Improper Input Validation130
- CWE-502Deserialization of Untrusted Data124
- CWE-416Use After Free124
- CWE-94Code Injection111
- CWE-119Improper Restriction of Memory Buffer107
- CWE-79Cross-site Scripting79
- CWE-7772
- CWE-287Improper Authentication61
- CWE-434Unrestricted Upload of Dangerous File Type60
- CWE-89SQL Injection59
- CWE-28454
- CWE-306Missing Authentication for Critical Function52
- CWE-400Uncontrolled Resource Consumption49
- CWE-125Out-of-bounds Read48
- CWE-200Exposure of Sensitive Information47
- CWE-269Improper Privilege Management47
- CWE-84345
- CWE-918Server-Side Request Forgery (SSRF)45
- CWE-12242
- CWE-7441
- CWE-190Integer Overflow36
- CWE-5934
- CWE-12128
- CWE-120Buffer Overflow27
- CWE-476NULL Pointer Dereference27
- CWE-862Missing Authorization27
- CWE-863Incorrect Authorization25
- CWE-26422
- CWE-28822
- CWE-362Race Condition17
- CWE-77017
- CWE-40117
- CWE-69317
- CWE-44416
- CWE-34715
- CWE-295Improper Certificate Validation14
- CWE-798Use of Hard-coded Credentials14
- CWE-39912
- CWE-367Time-of-check Time-of-use (TOCTOU)12
- CWE-611XML External Entity (XXE)12
- CWE-415Double Free11
- CWE-2311
- CWE-29010
- CWE-7310
- CWE-522Insufficiently Protected Credentials10
- CWE-506Embedded Malicious Code10
- CWE-8359
- CWE-6749
- CWE-7549
- CWE-1788
- CWE-1168
- CWE-2098
- CWE-888
- CWE-352Cross-Site Request Forgery (CSRF)8
- CWE-552Files Accessible to External Parties7
- CWE-9177
- CWE-957
- CWE-1188Insecure Default Initialization7
- CWE-7557
- CWE-3276
- CWE-13366
- CWE-3456
- CWE-6016
- CWE-4046
- CWE-3056
- CWE-4076
- CWE-8226
- CWE-2856
- CWE-1915
- CWE-4975
- CWE-365
- CWE-6395
- CWE-6695
- CWE-5325
- CWE-3265
- CWE-1844
- CWE-3854
- CWE-4094
- CWE-7494
- CWE-1304
- CWE-6404
- CWE-4204
- CWE-4264
- CWE-9124
- CWE-6174
- CWE-732Incorrect Permission Assignment4
- CWE-6684
- CWE-3464
- CWE-12844
- CWE-276Incorrect Default Permissions4
- CWE-3214
- CWE-3304
- CWE-3544
- CWE-6654
- CWE-2664
- CWE-4944
- CWE-1134
- CWE-4274
- CWE-9084
- CWE-2034
- CWE-673
- CWE-13213
- CWE-1343
- CWE-6673
- CWE-6643
- CWE-13333
- CWE-3033
- CWE-1263
- CWE-4573
- CWE-1893
- CWE-12203
- CWE-243
- CWE-983
- CWE-1583
- CWE-6483
- CWE-3643
- CWE-1293
- CWE-8293
- CWE-7072
- CWE-7062
- CWE-3842
- CWE-2552
- CWE-4602
- CWE-5912
- CWE-11732
- CWE-2442
- CWE-6532
- CWE-1312
- CWE-6802
- CWE-3192
- CWE-8072
- CWE-7892
- CWE-4512
- CWE-2972
- CWE-4252
- CWE-2502
- CWE-4412
- CWE-8242
- CWE-1972
- CWE-2522
- CWE-6062
- CWE-3532
- CWE-6102
- CWE-7822
- CWE-9152
- CWE-4732
- CWE-7762
- CWE-5652
- CWE-1932
- CWE-9132
- CWE-902
- CWE-912
- CWE-4702
- CWE-3122
- CWE-932
- CWE-4881
- CWE-1501
- CWE-4721
- CWE-2571
- CWE-12361
- CWE-3311
- CWE-7631
- CWE-611
- CWE-1701
- CWE-3401
- CWE-9431
- CWE-2081
- CWE-6901
- CWE-6441
- CWE-10231
- CWE-441
- CWE-8231
- CWE-1761
- CWE-1831
- CWE-8401
- CWE-2811
- CWE-6701
- CWE-6131
- CWE-3251
- CWE-4061
- CWE-3071
- CWE-4281
- CWE-4241
- CWE-3921
- CWE-1771
- CWE-2941
- CWE-191
- CWE-3201
- CWE-3351
- CWE-12871
- CWE-3221
- CWE-8411
- CWE-2481
- CWE-3081
- CWE-7781
- CWE-251
- CWE-1390Weak Authentication1
- CWE-1231
- CWE-3481
- CWE-3591
- CWE-4751
- CWE-3771
- CWE-3111
- CWE-13931
- CWE-961
- CWE-2821
- CWE-1271
- CWE-801
- CWE-1471
- CWE-8251
- CWE-6451
- CWE-6201
- CWE-7721
- CWE-1491
- CWE-2591
- CWE-5281
- CWE-2331
- CWE-841
- CWE-2671
- CWE-351
- CWE-9401
- CWE-2701
- CWE-3281
- CWE-3101
- CWE-4031
- CWE-13131
- CWE-3901
- CWE-7031
- CWE-4361
- CWE-4051
- CWE-5211
- CWE-5671
- CWE-13251
- CWE-6471
- CWE-6971
- CWE-3881
- CWE-1141