Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
1477 CWEs
API response| CWE | Name | Entry type | Mapping usage | Occurrences |
|---|---|---|---|---|
| CWE-1301 | Insufficient or Incomplete Data Removal within Hardware Component | Weakness | Allowed | 4 |
| CWE-1302 | Missing Source Identifier in Entity Transactions on a System-On-Chip (SOC) | Weakness | Allowed | 0 |
| CWE-1303 | Non-Transparent Sharing of Microarchitectural Resources | Weakness | Allowed | 5 |
| CWE-1304 | Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation | Weakness | Allowed | 4 |
| CWE-1305 | CISQ Quality Measures (2020) | View | Prohibited | 0 |
| CWE-1306 | CISQ Quality Measures - Reliability | Grouping | Prohibited | 0 |
| CWE-1307 | CISQ Quality Measures - Maintainability | Grouping | Prohibited | 0 |
| CWE-1308 | CISQ Quality Measures - Security | Grouping | Prohibited | 0 |
| CWE-1309 | CISQ Quality Measures - Efficiency | Grouping | Prohibited | 0 |
| CWE-1310 | Missing Ability to Patch ROM Code | Weakness | Allowed | 3 |
| CWE-1311 | Improper Translation of Security Attributes by Fabric Bridge | Weakness | Allowed | 0 |
| CWE-1312 | Missing Protection for Mirrored Regions in On-Chip Fabric Firewall | Weakness | Allowed | 2 |
| CWE-1313 | Hardware Allows Activation of Test or Debug Logic at Runtime | Weakness | Allowed | 1 |
| CWE-1314 | Missing Write Protection for Parametric Data Values | Weakness | Allowed | 3 |
| CWE-1315 | Improper Setting of Bus Controlling Capability in Fabric End-point | Weakness | Allowed | 0 |
| CWE-1316 | Fabric-Address Map Allows Programming of Unwarranted Overlaps of Protected and Unprotected Ranges | Weakness | Allowed | 2 |
| CWE-1317 | Improper Access Control in Fabric Bridge | Weakness | Allowed | 0 |
| CWE-1318 | Missing Support for Security Features in On-chip Fabrics or Buses | Weakness | Allowed | 0 |
| CWE-1319 | Improper Protection against Electromagnetic Fault Injection (EM-FI) | Weakness | Allowed | 7 |
| CWE-1320 | Improper Protection for Outbound Error Messages and Alert Signals | Weakness | Allowed | 13 |
| CWE-1321 | Improperly Controlled Modification of Object Prototype Attributes | Weakness | Allowed | 894 |
| CWE-1322 | Use of Blocking Code in Single-threaded, Non-blocking Context | Weakness | Allowed | 2 |
| CWE-1323 | Improper Management of Sensitive Trace Data | Weakness | Allowed | 4 |
| CWE-1324 | DEPRECATED: Sensitive Information Accessible by Physical Probing of JTAG Interface | Weakness | Prohibited | 0 |
| CWE-1325 | Improperly Controlled Sequential Memory Allocation | Weakness | Allowed | 31 |
| CWE-1326 | Missing Immutable Root of Trust in Hardware | Weakness | Allowed | 17 |
| CWE-1327 | Binding to an Unrestricted IP Address | Weakness | Allowed | 36 |
| CWE-1328 | Security Version Number Mutable to Older Versions | Weakness | Allowed | 9 |
| CWE-1329 | Reliance on Component That is Not Updateable | Weakness | Allowed | 12 |
| CWE-1330 | Remanent Data Readable after Memory Erase | Weakness | Allowed | 0 |
| CWE-1331 | Improper Isolation of Shared Resources in Network On Chip (NoC) | Weakness | Allowed | 0 |
| CWE-1332 | Improper Handling of Faults that Lead to Instruction Skips | Weakness | Allowed | 5 |
| CWE-1333 | Inefficient Regular Expression Complexity | Weakness | Allowed | 701 |
| CWE-1334 | Unauthorized Error Injection Can Degrade Hardware Redundancy | Weakness | Allowed | 4 |
| CWE-1335 | Incorrect Bitwise Shift of Integer | Weakness | Allowed | 8 |
| CWE-1336 | Improper Neutralization of Special Elements Used in a Template Engine | Weakness | Allowed | 557 |
| CWE-1337 | Weaknesses in the 2021 CWE Top 25 Most Dangerous Software Weaknesses | View | Prohibited | 0 |
| CWE-1338 | Improper Protections Against Hardware Overheating | Weakness | Allowed | 0 |
| CWE-1339 | Insufficient Precision or Accuracy of a Real Number | Weakness | Allowed | 0 |
| CWE-1340 | CISQ Data Protection Measures | View | Prohibited | 0 |
| CWE-1341 | Multiple Releases of Same Resource or Handle | Weakness | Allowed | 11 |
| CWE-1342 | Information Exposure through Microarchitectural State after Transient Execution | Weakness | Allowed | 3 |
| CWE-1343 | Weaknesses in the 2021 CWE Most Important Hardware Weaknesses List | View | Prohibited | 0 |
| CWE-1344 | Weaknesses in OWASP Top Ten (2021) | View | Prohibited | 0 |
| CWE-1345 | OWASP Top Ten 2021 Category A01:2021 - Broken Access Control | Grouping | Prohibited | 0 |
| CWE-1346 | OWASP Top Ten 2021 Category A02:2021 - Cryptographic Failures | Grouping | Prohibited | 0 |
| CWE-1347 | OWASP Top Ten 2021 Category A03:2021 - Injection | Grouping | Prohibited | 0 |
| CWE-1348 | OWASP Top Ten 2021 Category A04:2021 - Insecure Design | Grouping | Prohibited | 0 |
| CWE-1349 | OWASP Top Ten 2021 Category A05:2021 - Security Misconfiguration | Grouping | Prohibited | 0 |
| CWE-1350 | Weaknesses in the 2020 CWE Top 25 Most Dangerous Software Weaknesses | View | Prohibited | 0 |