Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
1477 CWEs
API response| CWE | Name | Entry type | Mapping usage | Occurrences |
|---|---|---|---|---|
| CWE-651 | Exposure of WSDL File Containing Sensitive Information | Weakness | Allowed | 0 |
| CWE-652 | Improper Neutralization of Data within XQuery Expressions | Weakness | Allowed | 2 |
| CWE-653 | Improper Isolation or Compartmentalization | Weakness | Allowed | 100 |
| CWE-654 | Reliance on a Single Factor in a Security Decision | Weakness | Allowed | 1 |
| CWE-655 | Insufficient Psychological Acceptability | Weakness | Allowed-with-Review | 4 |
| CWE-656 | Reliance on Security Through Obscurity | Weakness | Allowed-with-Review | 17 |
| CWE-657 | Violation of Secure Design Principles | Weakness | Discouraged | 35 |
| CWE-658 | Weaknesses in Software Written in C | View | Prohibited | 0 |
| CWE-659 | Weaknesses in Software Written in C++ | View | Prohibited | 0 |
| CWE-660 | Weaknesses in Software Written in Java | View | Prohibited | 0 |
| CWE-661 | Weaknesses in Software Written in PHP | View | Prohibited | 0 |
| CWE-662 | Improper Synchronization | Weakness | Discouraged | 71 |
| CWE-663 | Use of a Non-reentrant Function in a Concurrent Context | Weakness | Allowed | 2 |
| CWE-664 | Improper Control of a Resource Through its Lifetime | Weakness | Discouraged | 63 |
| CWE-665 | Improper Initialization | Weakness | Discouraged | 425 |
| CWE-666 | Operation on Resource in Wrong Phase of Lifetime | Weakness | Discouraged | 1 |
| CWE-667 | Improper Locking | Weakness | Allowed-with-Review | 687 |
| CWE-668 | Exposure of Resource to Wrong Sphere | Weakness | Discouraged | 1245 |
| CWE-669 | Incorrect Resource Transfer Between Spheres | Weakness | Allowed-with-Review | 144 |
| CWE-670 | Always-Incorrect Control Flow Implementation | Weakness | Allowed-with-Review | 205 |
| CWE-671 | Lack of Administrator Control over Security | Weakness | Allowed-with-Review | 6 |
| CWE-672 | Operation on a Resource after Expiration or Release | Weakness | Allowed-with-Review | 115 |
| CWE-673 | External Influence of Sphere Definition | Weakness | Allowed-with-Review | 4 |
| CWE-674 | Uncontrolled Recursion | Weakness | Allowed-with-Review | 668 |
| CWE-675 | Multiple Operations on Resource in Single-Operation Context | Weakness | Allowed-with-Review | 4 |
| CWE-676 | Use of Potentially Dangerous Function | Weakness | Allowed | 13 |
| CWE-677 | Weakness Base Elements | View | Prohibited | 0 |
| CWE-678 | Composites | View | Prohibited | 0 |
| CWE-679 | DEPRECATED: Chain Elements | View | Prohibited | 0 |
| CWE-680 | Integer Overflow to Buffer Overflow | Weakness | Discouraged | 145 |
| CWE-681 | Incorrect Conversion between Numeric Types | Weakness | Allowed | 123 |
| CWE-682 | Incorrect Calculation | Weakness | Discouraged | 159 |
| CWE-683 | Function Call With Incorrect Order of Arguments | Weakness | Allowed | 9 |
| CWE-684 | Incorrect Provision of Specified Functionality | Weakness | Allowed-with-Review | 53 |
| CWE-685 | Function Call With Incorrect Number of Arguments | Weakness | Allowed | 0 |
| CWE-686 | Function Call With Incorrect Argument Type | Weakness | Allowed | 6 |
| CWE-687 | Function Call With Incorrectly Specified Argument Value | Weakness | Allowed | 6 |
| CWE-688 | Function Call With Incorrect Variable or Reference as Argument | Weakness | Allowed | 4 |
| CWE-689 | Permission Race Condition During Resource Copy | Weakness | Allowed | 3 |
| CWE-690 | Unchecked Return Value to NULL Pointer Dereference | Weakness | Discouraged | 53 |
| CWE-691 | Insufficient Control Flow Management | Weakness | Discouraged | 54 |
| CWE-692 | Incomplete Denylist to Cross-Site Scripting | Weakness | Discouraged | 9 |
| CWE-693 | Protection Mechanism Failure | Weakness | Discouraged | 949 |
| CWE-694 | Use of Multiple Resources with Duplicate Identifier | Weakness | Allowed | 16 |
| CWE-695 | Use of Low-Level Functionality | Weakness | Allowed | 2 |
| CWE-696 | Incorrect Behavior Order | Weakness | Allowed-with-Review | 70 |
| CWE-697 | Incorrect Comparison | Weakness | Discouraged | 212 |
| CWE-698 | Execution After Redirect (EAR) | Weakness | Allowed | 31 |
| CWE-699 | Software Development | View | Prohibited | 0 |
| CWE-700 | Seven Pernicious Kingdoms | View | Prohibited | 0 |