Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
1477 CWEs
API response| CWE | Name | Entry type | Mapping usage | Occurrences |
|---|---|---|---|---|
| CWE-1401 | Comprehensive Categorization: Concurrency | Grouping | Prohibited | 0 |
| CWE-1402 | Comprehensive Categorization: Encryption | Grouping | Prohibited | 0 |
| CWE-1403 | Comprehensive Categorization: Exposed Resource | Grouping | Prohibited | 0 |
| CWE-1404 | Comprehensive Categorization: File Handling | Grouping | Prohibited | 0 |
| CWE-1405 | Comprehensive Categorization: Improper Check or Handling of Exceptional Conditions | Grouping | Prohibited | 0 |
| CWE-1406 | Comprehensive Categorization: Improper Input Validation | Grouping | Prohibited | 0 |
| CWE-1407 | Comprehensive Categorization: Improper Neutralization | Grouping | Prohibited | 0 |
| CWE-1408 | Comprehensive Categorization: Incorrect Calculation | Grouping | Prohibited | 0 |
| CWE-1409 | Comprehensive Categorization: Injection | Grouping | Prohibited | 0 |
| CWE-1410 | Comprehensive Categorization: Insufficient Control Flow Management | Grouping | Prohibited | 0 |
| CWE-1411 | Comprehensive Categorization: Insufficient Verification of Data Authenticity | Grouping | Prohibited | 0 |
| CWE-1412 | Comprehensive Categorization: Poor Coding Practices | Grouping | Prohibited | 0 |
| CWE-1413 | Comprehensive Categorization: Protection Mechanism Failure | Grouping | Prohibited | 0 |
| CWE-1414 | Comprehensive Categorization: Randomness | Grouping | Prohibited | 0 |
| CWE-1415 | Comprehensive Categorization: Resource Control | Grouping | Prohibited | 0 |
| CWE-1416 | Comprehensive Categorization: Resource Lifecycle Management | Grouping | Prohibited | 0 |
| CWE-1417 | Comprehensive Categorization: Sensitive Information Exposure | Grouping | Prohibited | 0 |
| CWE-1418 | Comprehensive Categorization: Violation of Secure Design Principles | Grouping | Prohibited | 0 |
| CWE-1419 | Incorrect Initialization of Resource | Weakness | Allowed-with-Review | 8 |
| CWE-1420 | Exposure of Sensitive Information during Transient Execution | Weakness | Allowed-with-Review | 4 |
| CWE-1421 | Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution | Weakness | Allowed | 4 |
| CWE-1422 | Exposure of Sensitive Information caused by Incorrect Data Forwarding during Transient Execution | Weakness | Allowed | 1 |
| CWE-1423 | Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution | Weakness | Allowed | 6 |
| CWE-1424 | Weaknesses Addressed by ISA/IEC 62443 Requirements | View | Prohibited | 0 |
| CWE-1425 | Weaknesses in the 2023 CWE Top 25 Most Dangerous Software Weaknesses | View | Prohibited | 0 |
| CWE-1426 | Improper Validation of Generative AI Output | Weakness | Discouraged | 3 |
| CWE-1427 | Improper Neutralization of Input Used for LLM Prompting | Weakness | Allowed | 11 |
| CWE-1428 | Reliance on HTTP instead of HTTPS | Weakness | Allowed | 2 |
| CWE-1429 | Missing Security-Relevant Feedback for Unexecuted Operations in Hardware Interface | Weakness | Allowed | 0 |
| CWE-1430 | Weaknesses in the 2024 CWE Top 25 Most Dangerous Software Weaknesses | View | Prohibited | 0 |
| CWE-1431 | Driving Intermediate Cryptographic State/Results to Hardware Module Outputs | Weakness | Allowed | 0 |
| CWE-1432 | Weaknesses in the 2025 CWE Most Important Hardware Weaknesses List | View | Prohibited | 0 |
| CWE-1433 | 2025 MIHW Supplement: Expert Insights | Grouping | Prohibited | 0 |
| CWE-1434 | Insecure Setting of Generative AI/ML Model Inference Parameters | Weakness | Allowed | 0 |
| CWE-1435 | Weaknesses in the 2025 CWE Top 25 Most Dangerous Software Weaknesses | View | Prohibited | 0 |
| CWE-1436 | OWASP Top Ten 2025 Category A01:2025 - Broken Access Control | Grouping | Prohibited | 0 |
| CWE-1437 | OWASP Top Ten 2025 Category A02:2025 - Security Misconfiguration | Grouping | Prohibited | 0 |
| CWE-1438 | OWASP Top Ten 2025 Category A03:2025 - Software Supply Chain Failures | Grouping | Prohibited | 0 |
| CWE-1439 | OWASP Top Ten 2025 Category A04:2025 - Cryptographic Failures | Grouping | Prohibited | 0 |
| CWE-1440 | OWASP Top Ten 2025 Category A05:2025 - Injection | Grouping | Prohibited | 0 |
| CWE-1441 | OWASP Top Ten 2025 Category A06:2025 - Insecure Design | Grouping | Prohibited | 0 |
| CWE-1442 | OWASP Top Ten 2025 Category A07:2025 - Authentication Failures | Grouping | Prohibited | 0 |
| CWE-1443 | OWASP Top Ten 2025 Category A08:2025 - Software or Data Integrity Failures | Grouping | Prohibited | 0 |
| CWE-1444 | OWASP Top Ten 2025 Category A09:2025 - Logging & Alerting Failures | Grouping | Prohibited | 0 |
| CWE-1445 | OWASP Top Ten 2025 Category A10:2025 - Mishandling of Exceptional Conditions | Grouping | Prohibited | 0 |
| CWE-1446 | Weaknesses That are Specific to AI/ML Technology | Grouping | Prohibited | 0 |
| CWE-1447 | General Software Weaknesses that Appear in Products that Use or Support AI/ML Technology | Grouping | Prohibited | 0 |
| CWE-1448 | Weaknesses Related to AI/ML Products | View | Prohibited | 0 |
| CWE-1449 | Weaknesses Addressed by the OpenSSF Secure Coding Guide for Python (2026) | View | Prohibited | 0 |
| CWE-1450 | Weaknesses in OWASP Top Ten RC1 (2025) | View | Prohibited | 0 |