Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
1477 CWEs
API response| CWE | Name | Entry type | Mapping usage | Occurrences |
|---|---|---|---|---|
| CWE-101 | DEPRECATED: Struts Validation Problems | Grouping | Prohibited | 0 |
| CWE-102 | Struts: Duplicate Validation Forms | Weakness | Allowed | 1 |
| CWE-103 | Struts: Incomplete validate() Method Definition | Weakness | Allowed | 0 |
| CWE-104 | Struts: Form Bean Does Not Extend Validation Class | Weakness | Allowed | 0 |
| CWE-105 | Struts: Form Field Without Validator | Weakness | Allowed | 0 |
| CWE-106 | Struts: Plug-in Framework not in Use | Weakness | Allowed | 0 |
| CWE-107 | Struts: Unused Validation Form | Weakness | Allowed | 0 |
| CWE-108 | Struts: Unvalidated Action Form | Weakness | Allowed | 1 |
| CWE-109 | Struts: Validator Turned Off | Weakness | Allowed | 0 |
| CWE-110 | Struts: Validator Without Form Field | Weakness | Allowed | 0 |
| CWE-111 | Direct Use of Unsafe JNI | Weakness | Allowed | 3 |
| CWE-112 | Missing XML Validation | Weakness | Allowed | 18 |
| CWE-113 | Improper Neutralization of CRLF Sequences in HTTP Headers | Weakness | Allowed | 171 |
| CWE-114 | Process Control | Weakness | Discouraged | 37 |
| CWE-115 | Misinterpretation of Input | Weakness | Allowed | 48 |
| CWE-116 | Improper Encoding or Escaping of Output | Weakness | Allowed-with-Review | 1046 |
| CWE-117 | Improper Output Neutralization for Logs | Weakness | Allowed | 190 |
| CWE-118 | Incorrect Access of Indexable Resource | Weakness | Discouraged | 33 |
| CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer | Weakness | Discouraged | 17453 |
| CWE-120 | Buffer Copy without Checking Size of Input | Weakness | Allowed-with-Review | 5423 |
| CWE-121 | Stack-based Buffer Overflow | Weakness | Allowed | 5124 |
| CWE-122 | Heap-based Buffer Overflow | Weakness | Allowed | 3848 |
| CWE-123 | Write-what-where Condition | Weakness | Allowed | 80 |
| CWE-124 | Buffer Underwrite | Weakness | Allowed | 67 |
| CWE-125 | Out-of-bounds Read | Weakness | Allowed | 11076 |
| CWE-126 | Buffer Over-read | Weakness | Allowed | 825 |
| CWE-127 | Buffer Under-read | Weakness | Allowed | 13 |
| CWE-128 | Wrap-around Error | Weakness | Allowed | 6 |
| CWE-129 | Improper Validation of Array Index | Weakness | Allowed | 735 |
| CWE-130 | Improper Handling of Length Parameter Inconsistency | Weakness | Allowed | 160 |
| CWE-131 | Incorrect Calculation of Buffer Size | Weakness | Allowed | 267 |
| CWE-132 | DEPRECATED: Miscalculated Null Termination | Weakness | Prohibited | 0 |
| CWE-133 | String Errors | Grouping | Prohibited | 0 |
| CWE-134 | Use of Externally-Controlled Format String | Weakness | Allowed | 500 |
| CWE-135 | Incorrect Calculation of Multi-Byte String Length | Weakness | Allowed | 3 |
| CWE-136 | Type Errors | Grouping | Prohibited | 0 |
| CWE-137 | Data Neutralization Issues | Grouping | Prohibited | 0 |
| CWE-138 | Improper Neutralization of Special Elements | Weakness | Discouraged | 24 |
| CWE-139 | DEPRECATED: General Special Element Problems | Grouping | Prohibited | 0 |
| CWE-140 | Improper Neutralization of Delimiters | Weakness | Allowed | 34 |
| CWE-141 | Improper Neutralization of Parameter/Argument Delimiters | Weakness | Allowed | 14 |
| CWE-142 | Improper Neutralization of Value Delimiters | Weakness | Allowed | 4 |
| CWE-143 | Improper Neutralization of Record Delimiters | Weakness | Allowed | 1 |
| CWE-144 | Improper Neutralization of Line Delimiters | Weakness | Allowed | 4 |
| CWE-145 | Improper Neutralization of Section Delimiters | Weakness | Allowed | 0 |
| CWE-146 | Improper Neutralization of Expression/Command Delimiters | Weakness | Allowed | 17 |
| CWE-147 | Improper Neutralization of Input Terminators | Weakness | Allowed | 7 |
| CWE-148 | Improper Neutralization of Input Leaders | Weakness | Allowed | 4 |
| CWE-149 | Improper Neutralization of Quoting Syntax | Weakness | Allowed | 10 |
| CWE-150 | Improper Neutralization of Escape, Meta, or Control Sequences | Weakness | Allowed | 113 |