Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
1477 CWEs
API response| CWE | Name | Entry type | Mapping usage | Occurrences |
|---|---|---|---|---|
| CWE-701 | Weaknesses Introduced During Design | View | Prohibited | 11 |
| CWE-702 | Weaknesses Introduced During Implementation | View | Prohibited | 1 |
| CWE-703 | Improper Check or Handling of Exceptional Conditions | Weakness | Discouraged | 210 |
| CWE-704 | Incorrect Type Conversion or Cast | Weakness | Allowed-with-Review | 330 |
| CWE-705 | Incorrect Control Flow Scoping | Weakness | Allowed-with-Review | 9 |
| CWE-706 | Use of Incorrectly-Resolved Name or Reference | Weakness | Allowed-with-Review | 142 |
| CWE-707 | Improper Neutralization | Weakness | Discouraged | 320 |
| CWE-708 | Incorrect Ownership Assignment | Weakness | Allowed | 36 |
| CWE-709 | Named Chains | View | Prohibited | 0 |
| CWE-710 | Improper Adherence to Coding Standards | Weakness | Discouraged | 9 |
| CWE-711 | Weaknesses in OWASP Top Ten (2004) | View | Prohibited | 0 |
| CWE-712 | OWASP Top Ten 2007 Category A1 - Cross Site Scripting (XSS) | Grouping | Prohibited | 0 |
| CWE-713 | OWASP Top Ten 2007 Category A2 - Injection Flaws | Grouping | Prohibited | 0 |
| CWE-714 | OWASP Top Ten 2007 Category A3 - Malicious File Execution | Grouping | Prohibited | 1 |
| CWE-715 | OWASP Top Ten 2007 Category A4 - Insecure Direct Object Reference | Grouping | Prohibited | 0 |
| CWE-716 | OWASP Top Ten 2007 Category A5 - Cross Site Request Forgery (CSRF) | Grouping | Prohibited | 0 |
| CWE-717 | OWASP Top Ten 2007 Category A6 - Information Leakage and Improper Error Handling | Grouping | Prohibited | 0 |
| CWE-718 | OWASP Top Ten 2007 Category A7 - Broken Authentication and Session Management | Grouping | Prohibited | 0 |
| CWE-719 | OWASP Top Ten 2007 Category A8 - Insecure Cryptographic Storage | Grouping | Prohibited | 0 |
| CWE-720 | OWASP Top Ten 2007 Category A9 - Insecure Communications | Grouping | Prohibited | 0 |
| CWE-721 | OWASP Top Ten 2007 Category A10 - Failure to Restrict URL Access | Grouping | Prohibited | 0 |
| CWE-722 | OWASP Top Ten 2004 Category A1 - Unvalidated Input | Grouping | Prohibited | 0 |
| CWE-723 | OWASP Top Ten 2004 Category A2 - Broken Access Control | Grouping | Prohibited | 0 |
| CWE-724 | OWASP Top Ten 2004 Category A3 - Broken Authentication and Session Management | Grouping | Prohibited | 0 |
| CWE-725 | OWASP Top Ten 2004 Category A4 - Cross-Site Scripting (XSS) Flaws | Grouping | Prohibited | 0 |
| CWE-726 | OWASP Top Ten 2004 Category A5 - Buffer Overflows | Grouping | Prohibited | 0 |
| CWE-727 | OWASP Top Ten 2004 Category A6 - Injection Flaws | Grouping | Prohibited | 0 |
| CWE-728 | OWASP Top Ten 2004 Category A7 - Improper Error Handling | Grouping | Prohibited | 0 |
| CWE-729 | OWASP Top Ten 2004 Category A8 - Insecure Storage | Grouping | Prohibited | 0 |
| CWE-730 | OWASP Top Ten 2004 Category A9 - Denial of Service | Grouping | Prohibited | 2 |
| CWE-731 | OWASP Top Ten 2004 Category A10 - Insecure Configuration Management | Grouping | Prohibited | 0 |
| CWE-732 | Incorrect Permission Assignment for Critical Resource | Weakness | Allowed-with-Review | 2092 |
| CWE-733 | Compiler Optimization Removal or Modification of Security-critical Code | Weakness | Allowed | 13 |
| CWE-734 | Weaknesses Addressed by the CERT C Secure Coding Standard (2008) | View | Prohibited | 0 |
| CWE-735 | CERT C Secure Coding Standard (2008) Chapter 2 - Preprocessor (PRE) | Grouping | Prohibited | 0 |
| CWE-736 | CERT C Secure Coding Standard (2008) Chapter 3 - Declarations and Initialization (DCL) | Grouping | Prohibited | 0 |
| CWE-737 | CERT C Secure Coding Standard (2008) Chapter 4 - Expressions (EXP) | Grouping | Prohibited | 0 |
| CWE-738 | CERT C Secure Coding Standard (2008) Chapter 5 - Integers (INT) | Grouping | Prohibited | 0 |
| CWE-739 | CERT C Secure Coding Standard (2008) Chapter 6 - Floating Point (FLP) | Grouping | Prohibited | 0 |
| CWE-740 | CERT C Secure Coding Standard (2008) Chapter 7 - Arrays (ARR) | Grouping | Prohibited | 0 |
| CWE-741 | CERT C Secure Coding Standard (2008) Chapter 8 - Characters and Strings (STR) | Grouping | Prohibited | 0 |
| CWE-742 | CERT C Secure Coding Standard (2008) Chapter 9 - Memory Management (MEM) | Grouping | Prohibited | 0 |
| CWE-743 | CERT C Secure Coding Standard (2008) Chapter 10 - Input Output (FIO) | Grouping | Prohibited | 0 |
| CWE-744 | CERT C Secure Coding Standard (2008) Chapter 11 - Environment (ENV) | Grouping | Prohibited | 0 |
| CWE-745 | CERT C Secure Coding Standard (2008) Chapter 12 - Signals (SIG) | Grouping | Prohibited | 0 |
| CWE-746 | CERT C Secure Coding Standard (2008) Chapter 13 - Error Handling (ERR) | Grouping | Prohibited | 0 |
| CWE-747 | CERT C Secure Coding Standard (2008) Chapter 14 - Miscellaneous (MSC) | Grouping | Prohibited | 0 |
| CWE-748 | CERT C Secure Coding Standard (2008) Appendix - POSIX (POS) | Grouping | Prohibited | 0 |
| CWE-749 | Exposed Dangerous Method or Function | Weakness | Allowed | 301 |
| CWE-750 | Weaknesses in the 2009 CWE/SANS Top 25 Most Dangerous Programming Errors | View | Prohibited | 0 |