Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
1477 CWEs
API response| CWE | Name | Entry type | Mapping usage | Occurrences |
|---|---|---|---|---|
| CWE-751 | 2009 Top 25 - Insecure Interaction Between Components | Grouping | Prohibited | 0 |
| CWE-752 | 2009 Top 25 - Risky Resource Management | Grouping | Prohibited | 0 |
| CWE-753 | 2009 Top 25 - Porous Defenses | Grouping | Prohibited | 0 |
| CWE-754 | Improper Check for Unusual or Exceptional Conditions | Weakness | Allowed-with-Review | 891 |
| CWE-755 | Improper Handling of Exceptional Conditions | Weakness | Discouraged | 682 |
| CWE-756 | Missing Custom Error Page | Weakness | Allowed | 5 |
| CWE-757 | Selection of Less-Secure Algorithm During Negotiation | Weakness | Allowed | 45 |
| CWE-758 | Reliance on Undefined, Unspecified, or Implementation-Defined Behavior | Weakness | Allowed-with-Review | 33 |
| CWE-759 | Use of a One-Way Hash without a Salt | Weakness | Allowed | 24 |
| CWE-760 | Use of a One-Way Hash with a Predictable Salt | Weakness | Allowed | 15 |
| CWE-761 | Free of Pointer not at Start of Buffer | Weakness | Allowed | 3 |
| CWE-762 | Mismatched Memory Management Routines | Weakness | Allowed | 19 |
| CWE-763 | Release of Invalid Pointer or Reference | Weakness | Allowed | 106 |
| CWE-764 | Multiple Locks of a Critical Resource | Weakness | Allowed | 2 |
| CWE-765 | Multiple Unlocks of a Critical Resource | Weakness | Allowed | 2 |
| CWE-766 | Critical Data Element Declared Public | Weakness | Allowed | 0 |
| CWE-767 | Access to Critical Private Variable via Public Method | Weakness | Allowed | 6 |
| CWE-768 | Incorrect Short Circuit Evaluation | Weakness | Allowed | 2 |
| CWE-769 | DEPRECATED: Uncontrolled File Descriptor Consumption | Weakness | Prohibited | 2 |
| CWE-770 | Allocation of Resources Without Limits or Throttling | Weakness | Allowed | 3206 |
| CWE-771 | Missing Reference to Active Allocated Resource | Weakness | Allowed | 11 |
| CWE-772 | Missing Release of Resource after Effective Lifetime | Weakness | Allowed | 558 |
| CWE-773 | Missing Reference to Active File Descriptor or Handle | Weakness | Allowed | 0 |
| CWE-774 | Allocation of File Descriptors or Handles Without Limits or Throttling | Weakness | Allowed | 6 |
| CWE-775 | Missing Release of File Descriptor or Handle after Effective Lifetime | Weakness | Allowed | 11 |
| CWE-776 | Improper Restriction of Recursive Entity References in DTDs | Weakness | Allowed | 140 |
| CWE-777 | Regular Expression without Anchors | Weakness | Allowed | 5 |
| CWE-778 | Insufficient Logging | Weakness | Allowed | 44 |
| CWE-779 | Logging of Excessive Data | Weakness | Allowed | 29 |
| CWE-780 | Use of RSA Algorithm without OAEP | Weakness | Allowed | 6 |
| CWE-781 | Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code | Weakness | Allowed | 0 |
| CWE-782 | Exposed IOCTL with Insufficient Access Control | Weakness | Allowed | 46 |
| CWE-783 | Operator Precedence Logic Error | Weakness | Allowed | 26 |
| CWE-784 | Reliance on Cookies without Validation and Integrity Checking in a Security Decision | Weakness | Allowed | 9 |
| CWE-785 | Use of Path Manipulation Function without Maximum-sized Buffer | Weakness | Allowed | 0 |
| CWE-786 | Access of Memory Location Before Start of Buffer | Weakness | Discouraged | 12 |
| CWE-787 | Out-of-bounds Write | Weakness | Allowed-with-Review | 14999 |
| CWE-788 | Access of Memory Location After End of Buffer | Weakness | Discouraged | 283 |
| CWE-789 | Memory Allocation with Excessive Size Value | Weakness | Allowed | 306 |
| CWE-790 | Improper Filtering of Special Elements | Weakness | Allowed-with-Review | 23 |
| CWE-791 | Incomplete Filtering of Special Elements | Weakness | Allowed | 63 |
| CWE-792 | Incomplete Filtering of One or More Instances of Special Elements | Weakness | Allowed | 9 |
| CWE-793 | Only Filtering One Instance of a Special Element | Weakness | Allowed | 0 |
| CWE-794 | Incomplete Filtering of Multiple Instances of Special Elements | Weakness | Allowed | 5 |
| CWE-795 | Only Filtering Special Elements at a Specified Location | Weakness | Allowed | 0 |
| CWE-796 | Only Filtering Special Elements Relative to a Marker | Weakness | Allowed | 0 |
| CWE-797 | Only Filtering Special Elements at an Absolute Position | Weakness | Allowed | 0 |
| CWE-798 | Use of Hard-coded Credentials | Weakness | Allowed-with-Review | 2865 |
| CWE-799 | Improper Control of Interaction Frequency | Weakness | Allowed-with-Review | 108 |
| CWE-800 | Weaknesses in the 2010 CWE/SANS Top 25 Most Dangerous Programming Errors | View | Prohibited | 0 |