Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
1477 CWEs
API response| CWE | Name | Entry type | Mapping usage | Occurrences |
|---|---|---|---|---|
| CWE-1001 | SFP Secondary Cluster: Use of an Improper API | Grouping | Prohibited | 0 |
| CWE-1002 | SFP Secondary Cluster: Unexpected Entry Points | Grouping | Prohibited | 0 |
| CWE-1003 | Weaknesses for Simplified Mapping of Published Vulnerabilities | View | Prohibited | 0 |
| CWE-1004 | Sensitive Cookie Without 'HttpOnly' Flag | Weakness | Allowed | 70 |
| CWE-1005 | 7PK - Input Validation and Representation | Grouping | Prohibited | 0 |
| CWE-1006 | Bad Coding Practices | Grouping | Prohibited | 0 |
| CWE-1007 | Insufficient Visual Distinction of Homoglyphs Presented to User | Weakness | Allowed | 7 |
| CWE-1008 | Architectural Concepts | View | Prohibited | 0 |
| CWE-1009 | Audit | Grouping | Prohibited | 0 |
| CWE-1010 | Authenticate Actors | Grouping | Prohibited | 0 |
| CWE-1011 | Authorize Actors | Grouping | Prohibited | 0 |
| CWE-1012 | Cross Cutting | Grouping | Prohibited | 0 |
| CWE-1013 | Encrypt Data | Grouping | Prohibited | 0 |
| CWE-1014 | Identify Actors | Grouping | Prohibited | 0 |
| CWE-1015 | Limit Access | Grouping | Prohibited | 0 |
| CWE-1016 | Limit Exposure | Grouping | Prohibited | 0 |
| CWE-1017 | Lock Computer | Grouping | Prohibited | 0 |
| CWE-1018 | Manage User Sessions | Grouping | Prohibited | 2 |
| CWE-1019 | Validate Inputs | Grouping | Prohibited | 0 |
| CWE-1020 | Verify Message Integrity | Grouping | Prohibited | 0 |
| CWE-1021 | Improper Restriction of Rendered UI Layers or Frames | Weakness | Allowed | 447 |
| CWE-1022 | Use of Web Link to Untrusted Target with window.opener Access | Weakness | Allowed | 26 |
| CWE-1023 | Incomplete Comparison with Missing Factors | Weakness | Allowed-with-Review | 20 |
| CWE-1024 | Comparison of Incompatible Types | Weakness | Allowed | 2 |
| CWE-1025 | Comparison Using Wrong Factors | Weakness | Allowed | 19 |
| CWE-1026 | Weaknesses in OWASP Top Ten (2017) | View | Prohibited | 1 |
| CWE-1027 | OWASP Top Ten 2017 Category A1 - Injection | Grouping | Prohibited | 2 |
| CWE-1028 | OWASP Top Ten 2017 Category A2 - Broken Authentication | Grouping | Prohibited | 0 |
| CWE-1029 | OWASP Top Ten 2017 Category A3 - Sensitive Data Exposure | Grouping | Prohibited | 0 |
| CWE-1030 | OWASP Top Ten 2017 Category A4 - XML External Entities (XXE) | Grouping | Prohibited | 0 |
| CWE-1031 | OWASP Top Ten 2017 Category A5 - Broken Access Control | Grouping | Prohibited | 0 |
| CWE-1032 | OWASP Top Ten 2017 Category A6 - Security Misconfiguration | Grouping | Prohibited | 4 |
| CWE-1033 | OWASP Top Ten 2017 Category A7 - Cross-Site Scripting (XSS) | Grouping | Prohibited | 0 |
| CWE-1034 | OWASP Top Ten 2017 Category A8 - Insecure Deserialization | Grouping | Prohibited | 0 |
| CWE-1035 | OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities | Grouping | Prohibited | 0 |
| CWE-1036 | OWASP Top Ten 2017 Category A10 - Insufficient Logging & Monitoring | Grouping | Prohibited | 0 |
| CWE-1037 | Processor Optimization Removal or Modification of Security-critical Code | Weakness | Allowed | 9 |
| CWE-1038 | Insecure Automated Optimizations | Weakness | Allowed-with-Review | 10 |
| CWE-1039 | Inadequate Detection or Handling of Adversarial Input Perturbations in Automated Recognition Mechanism | Weakness | Allowed-with-Review | 6 |
| CWE-1040 | Quality Weaknesses with Indirect Security Impacts | View | Prohibited | 0 |
| CWE-1041 | Use of Redundant Code | Weakness | Prohibited | 0 |
| CWE-1042 | Static Member Data Element outside of a Singleton Class Element | Weakness | Prohibited | 0 |
| CWE-1043 | Data Element Aggregating an Excessively Large Number of Non-Primitive Elements | Weakness | Prohibited | 0 |
| CWE-1044 | Architecture with Number of Horizontal Layers Outside of Expected Range | Weakness | Prohibited | 0 |
| CWE-1045 | Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor | Weakness | Allowed | 0 |
| CWE-1046 | Creation of Immutable Text Using String Concatenation | Weakness | Allowed | 2 |
| CWE-1047 | Modules with Circular Dependencies | Weakness | Prohibited | 1 |
| CWE-1048 | Invokable Control Element with Large Number of Outward Calls | Weakness | Prohibited | 0 |
| CWE-1049 | Excessive Data Query Operations in a Large Data Table | Weakness | Allowed | 6 |
| CWE-1050 | Excessive Platform Resource Consumption within a Loop | Weakness | Allowed | 23 |