Browse by weakness (CWE)
Every CVE maps to a weakness class. Pick one to see all the findings of that kind and what the field said about them.
- CWE-787Out-of-bounds Write157
- CWE-78OS Command Injection126
- CWE-416Use After Free115
- CWE-20Improper Input Validation113
- CWE-22Path Traversal107
- CWE-119Improper Restriction of Memory Buffer91
- CWE-94Code Injection89
- CWE-502Deserialization of Untrusted Data87
- CWE-79Cross-site Scripting64
- CWE-287Improper Authentication53
- CWE-28447
- CWE-89SQL Injection47
- CWE-7747
- CWE-306Missing Authentication for Critical Function45
- CWE-269Improper Privilege Management45
- CWE-125Out-of-bounds Read43
- CWE-84341
- CWE-400Uncontrolled Resource Consumption40
- CWE-434Unrestricted Upload of Dangerous File Type37
- CWE-918Server-Side Request Forgery (SSRF)35
- CWE-12235
- CWE-200Exposure of Sensitive Information34
- CWE-190Integer Overflow31
- CWE-5931
- CWE-120Buffer Overflow25
- CWE-476NULL Pointer Dereference24
- CWE-12124
- CWE-862Missing Authorization24
- CWE-7422
- CWE-863Incorrect Authorization21
- CWE-28821
- CWE-26419
- CWE-40116
- CWE-69315
- CWE-362Race Condition15
- CWE-77014
- CWE-34713
- CWE-798Use of Hard-coded Credentials13
- CWE-295Improper Certificate Validation13
- CWE-44412
- CWE-39912
- CWE-611XML External Entity (XXE)10
- CWE-506Embedded Malicious Code10
- CWE-6749
- CWE-415Double Free9
- CWE-367Time-of-check Time-of-use (TOCTOU)8
- CWE-2908
- CWE-7548
- CWE-352Cross-Site Request Forgery (CSRF)8
- CWE-522Insufficiently Protected Credentials8
- CWE-238
- CWE-1167
- CWE-737
- CWE-1787
- CWE-9177
- CWE-4047
- CWE-2097
- CWE-6016
- CWE-3456
- CWE-8356
- CWE-4076
- CWE-7556
- CWE-8226
- CWE-886
- CWE-956
- CWE-552Files Accessible to External Parties5
- CWE-1915
- CWE-6395
- CWE-3265
- CWE-7495
- CWE-1188Insecure Default Initialization5
- CWE-13365
- CWE-2855
- CWE-365
- CWE-6654
- CWE-4094
- CWE-4264
- CWE-9124
- CWE-6404
- CWE-4974
- CWE-12844
- CWE-3214
- CWE-4944
- CWE-6174
- CWE-3274
- CWE-9084
- CWE-3854
- CWE-732Incorrect Permission Assignment4
- CWE-1134
- CWE-3544
- CWE-12204
- CWE-1343
- CWE-2033
- CWE-3053
- CWE-6693
- CWE-3463
- CWE-3033
- CWE-5323
- CWE-1893
- CWE-4273
- CWE-673
- CWE-4203
- CWE-4573
- CWE-1263
- CWE-3303
- CWE-13333
- CWE-1293
- CWE-1843
- CWE-1583
- CWE-6643
- CWE-276Incorrect Default Permissions3
- CWE-5912
- CWE-8072
- CWE-3192
- CWE-11732
- CWE-4602
- CWE-7892
- CWE-6132
- CWE-4512
- CWE-932
- CWE-2502
- CWE-2972
- CWE-6682
- CWE-6672
- CWE-902
- CWE-13212
- CWE-7062
- CWE-1390Weak Authentication2
- CWE-8292
- CWE-8242
- CWE-912
- CWE-6062
- CWE-1932
- CWE-3532
- CWE-2662
- CWE-4252
- CWE-1302
- CWE-7072
- CWE-1312
- CWE-982
- CWE-6482
- CWE-1972
- CWE-5652
- CWE-7762
- CWE-9132
- CWE-6802
- CWE-4732
- CWE-7822
- CWE-6102
- CWE-8401
- CWE-8251
- CWE-13131
- CWE-1761
- CWE-8231
- CWE-10231
- CWE-3281
- CWE-13411
- CWE-6441
- CWE-3881
- CWE-2081
- CWE-3311
- CWE-2571
- CWE-3901
- CWE-351
- CWE-7031
- CWE-4721
- CWE-2941
- CWE-6971
- CWE-2521
- CWE-3121
- CWE-3101
- CWE-4031
- CWE-1831
- CWE-3571
- CWE-3481
- CWE-6701
- CWE-251
- CWE-3591
- CWE-1231
- CWE-4751
- CWE-3641
- CWE-7631
- CWE-3771
- CWE-13931
- CWE-2821
- CWE-1271
- CWE-3921
- CWE-4241
- CWE-5211
- CWE-1471
- CWE-6451
- CWE-6531
- CWE-441
- CWE-2741
- CWE-12871
- CWE-1141
- CWE-2441
- CWE-4281
- CWE-2481
- CWE-3071
- CWE-4061
- CWE-9431
- CWE-1701
- CWE-241
- CWE-3251
- CWE-611
- CWE-2811
- CWE-7721
- CWE-2591
- CWE-5281
- CWE-9151
- CWE-2671
- CWE-6471
- CWE-3111
- CWE-9401
- CWE-4411
- CWE-2551
- CWE-2701
- CWE-801
- CWE-4361