Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
1477 CWEs
API response| CWE | Name | Entry type | Mapping usage | Occurrences |
|---|---|---|---|---|
| CWE-1201 | Core and Compute Issues | Grouping | Prohibited | 0 |
| CWE-1202 | Memory and Storage Issues | Grouping | Prohibited | 0 |
| CWE-1203 | Peripherals, On-chip Fabric, and Interface/IO Problems | Grouping | Prohibited | 0 |
| CWE-1204 | Generation of Weak Initialization Vector (IV) | Weakness | Allowed | 8 |
| CWE-1205 | Security Primitives and Cryptography Issues | Grouping | Prohibited | 0 |
| CWE-1206 | Power, Clock, Thermal, and Reset Concerns | Grouping | Prohibited | 0 |
| CWE-1207 | Debug and Test Problems | Grouping | Prohibited | 0 |
| CWE-1208 | Cross-Cutting Problems | Grouping | Prohibited | 0 |
| CWE-1209 | Failure to Disable Reserved Bits | Weakness | Allowed | 0 |
| CWE-1210 | Audit / Logging Errors | Grouping | Prohibited | 0 |
| CWE-1211 | Authentication Errors | Grouping | Prohibited | 0 |
| CWE-1212 | Authorization Errors | Grouping | Prohibited | 0 |
| CWE-1213 | Random Number Issues | Grouping | Prohibited | 0 |
| CWE-1214 | Data Integrity Issues | Grouping | Prohibited | 0 |
| CWE-1215 | Data Validation Issues | Grouping | Prohibited | 0 |
| CWE-1216 | Lockout Mechanism Errors | Grouping | Prohibited | 0 |
| CWE-1217 | User Session Errors | Grouping | Prohibited | 0 |
| CWE-1218 | Memory Buffer Errors | Grouping | Prohibited | 1 |
| CWE-1219 | File Handling Issues | Grouping | Prohibited | 0 |
| CWE-1220 | Insufficient Granularity of Access Control | Weakness | Allowed | 165 |
| CWE-1221 | Incorrect Register Defaults or Module Parameters | Weakness | Allowed | 2 |
| CWE-1222 | Insufficient Granularity of Address Regions Protected by Register Locks | Weakness | Allowed | 3 |
| CWE-1223 | Race Condition for Write-Once Attributes | Weakness | Allowed | 2 |
| CWE-1224 | Improper Restriction of Write-Once Bit Fields | Weakness | Allowed | 1 |
| CWE-1225 | Documentation Issues | Grouping | Prohibited | 0 |
| CWE-1226 | Complexity Issues | Grouping | Prohibited | 0 |
| CWE-1227 | Encapsulation Issues | Grouping | Prohibited | 0 |
| CWE-1228 | API / Function Errors | Grouping | Prohibited | 0 |
| CWE-1229 | Creation of Emergent Resource | Weakness | Allowed-with-Review | 0 |
| CWE-1230 | Exposure of Sensitive Information Through Metadata | Weakness | Allowed | 46 |
| CWE-1231 | Improper Prevention of Lock Bit Modification | Weakness | Allowed | 5 |
| CWE-1232 | Improper Lock Behavior After Power State Transition | Weakness | Allowed | 0 |
| CWE-1233 | Security-Sensitive Hardware Controls with Missing Lock Bit Protection | Weakness | Allowed | 6 |
| CWE-1234 | Hardware Internal or Debug Modes Allow Override of Locks | Weakness | Allowed | 8 |
| CWE-1235 | Incorrect Use of Autoboxing and Unboxing for Performance Critical Operations | Weakness | Allowed | 0 |
| CWE-1236 | Improper Neutralization of Formula Elements in a CSV File | Weakness | Allowed | 394 |
| CWE-1237 | SFP Primary Cluster: Faulty Resource Release | Grouping | Prohibited | 0 |
| CWE-1238 | SFP Primary Cluster: Failure to Release Memory | Grouping | Prohibited | 0 |
| CWE-1239 | Improper Zeroization of Hardware Register | Weakness | Allowed | 0 |
| CWE-1240 | Use of a Cryptographic Primitive with a Risky Implementation | Weakness | Allowed | 40 |
| CWE-1241 | Use of Predictable Algorithm in Random Number Generator | Weakness | Allowed | 15 |
| CWE-1242 | Inclusion of Undocumented Features or Chicken Bits | Weakness | Allowed | 27 |
| CWE-1243 | Sensitive Non-Volatile Information Not Protected During Debug | Weakness | Allowed | 0 |
| CWE-1244 | Internal Asset Exposed to Unsafe Debug Access Level or State | Weakness | Allowed | 22 |
| CWE-1245 | Improper Finite State Machines (FSMs) in Hardware Logic | Weakness | Allowed | 10 |
| CWE-1246 | Improper Write Handling in Limited-write Non-Volatile Memories | Weakness | Allowed | 2 |
| CWE-1247 | Improper Protection Against Voltage and Clock Glitches | Weakness | Allowed | 5 |
| CWE-1248 | Semiconductor Defects in Hardware Logic with Security-Sensitive Implications | Weakness | Allowed | 0 |
| CWE-1249 | Application-Level Admin Tool with Inconsistent View of Underlying Operating System | Weakness | Allowed | 0 |
| CWE-1250 | Improper Preservation of Consistency Between Independent Representations of Shared State | Weakness | Allowed | 11 |