Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
1477 CWEs
API response| CWE | Name | Entry type | Mapping usage | Occurrences |
|---|---|---|---|---|
| CWE-1051 | Initialization with Hard-Coded Network Resource Configuration Data | Weakness | Prohibited | 2 |
| CWE-1052 | Excessive Use of Hard-Coded Literals in Initialization | Weakness | Allowed | 1 |
| CWE-1053 | Missing Documentation for Design | Weakness | Prohibited | 0 |
| CWE-1054 | Invocation of a Control Element at an Unnecessarily Deep Horizontal Layer | Weakness | Prohibited | 0 |
| CWE-1055 | Multiple Inheritance from Concrete Classes | Weakness | Prohibited | 1 |
| CWE-1056 | Invokable Control Element with Variadic Parameters | Weakness | Prohibited | 1 |
| CWE-1057 | Data Access Operations Outside of Expected Data Manager Component | Weakness | Prohibited | 2 |
| CWE-1058 | Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element | Weakness | Allowed | 1 |
| CWE-1059 | Insufficient Technical Documentation | Weakness | Prohibited | 3 |
| CWE-1060 | Excessive Number of Inefficient Server-Side Data Accesses | Weakness | Prohibited | 0 |
| CWE-1061 | Insufficient Encapsulation | Weakness | Allowed-with-Review | 0 |
| CWE-1062 | Parent Class with References to Child Class | Weakness | Prohibited | 0 |
| CWE-1063 | Creation of Class Instance within a Static Code Block | Weakness | Prohibited | 0 |
| CWE-1064 | Invokable Control Element with Signature Containing an Excessive Number of Parameters | Weakness | Prohibited | 0 |
| CWE-1065 | Runtime Resource Management Control Element in a Component Built to Run on Application Servers | Weakness | Prohibited | 0 |
| CWE-1066 | Missing Serialization Control Element | Weakness | Prohibited | 2 |
| CWE-1067 | Excessive Execution of Sequential Searches of Data Resource | Weakness | Allowed | 0 |
| CWE-1068 | Inconsistency Between Implementation and Documented Design | Weakness | Prohibited | 8 |
| CWE-1069 | Empty Exception Block | Weakness | Allowed | 0 |
| CWE-1070 | Serializable Data Element Containing non-Serializable Item Elements | Weakness | Prohibited | 0 |
| CWE-1071 | Empty Code Block | Weakness | Allowed | 0 |
| CWE-1072 | Data Resource Access without Use of Connection Pooling | Weakness | Prohibited | 2 |
| CWE-1073 | Non-SQL Invokable Control Element with Excessive Number of Data Resource Accesses | Weakness | Prohibited | 0 |
| CWE-1074 | Class with Excessively Deep Inheritance | Weakness | Prohibited | 0 |
| CWE-1075 | Unconditional Control Flow Transfer outside of Switch Block | Weakness | Allowed | 0 |
| CWE-1076 | Insufficient Adherence to Expected Conventions | Weakness | Prohibited | 4 |
| CWE-1077 | Floating Point Comparison with Incorrect Operator | Weakness | Allowed | 9 |
| CWE-1078 | Inappropriate Source Code Style or Formatting | Weakness | Prohibited | 2 |
| CWE-1079 | Parent Class without Virtual Destructor Method | Weakness | Allowed | 0 |
| CWE-1080 | Source Code File with Excessive Number of Lines of Code | Weakness | Prohibited | 0 |
| CWE-1081 | Entries with Maintenance Notes | View | Prohibited | 0 |
| CWE-1082 | Class Instance Self Destruction Control Element | Weakness | Prohibited | 0 |
| CWE-1083 | Data Access from Outside Expected Data Manager Component | Weakness | Prohibited | 2 |
| CWE-1084 | Invokable Control Element with Excessive File or Data Access Operations | Weakness | Prohibited | 0 |
| CWE-1085 | Invokable Control Element with Excessive Volume of Commented-out Code | Weakness | Prohibited | 0 |
| CWE-1086 | Class with Excessive Number of Child Classes | Weakness | Prohibited | 0 |
| CWE-1087 | Class with Virtual Method without a Virtual Destructor | Weakness | Allowed | 0 |
| CWE-1088 | Synchronous Access of Remote Resource without Timeout | Weakness | Allowed | 10 |
| CWE-1089 | Large Data Table with Excessive Number of Indices | Weakness | Allowed | 0 |
| CWE-1090 | Method Containing Access of a Member Element from Another Class | Weakness | Prohibited | 0 |
| CWE-1091 | Use of Object without Invoking Destructor Method | Weakness | Allowed | 2 |
| CWE-1092 | Use of Same Invokable Control Element in Multiple Architectural Layers | Weakness | Prohibited | 0 |
| CWE-1093 | Excessively Complex Data Representation | Weakness | Allowed-with-Review | 0 |
| CWE-1094 | Excessive Index Range Scan for a Data Resource | Weakness | Prohibited | 0 |
| CWE-1095 | Loop Condition Value Update within the Loop | Weakness | Prohibited | 0 |
| CWE-1096 | Singleton Class Instance Creation without Proper Locking or Synchronization | Weakness | Allowed | 0 |
| CWE-1097 | Persistent Storable Data Element without Associated Comparison Control Element | Weakness | Prohibited | 0 |
| CWE-1098 | Data Element containing Pointer Item without Proper Copy Control Element | Weakness | Allowed | 0 |
| CWE-1099 | Inconsistent Naming Conventions for Identifiers | Weakness | Prohibited | 0 |
| CWE-1100 | Insufficient Isolation of System-Dependent Functions | Weakness | Allowed | 6 |