Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
1477 CWEs
API response| CWE | Name | Entry type | Mapping usage | Occurrences |
|---|---|---|---|---|
| CWE-151 | Improper Neutralization of Comment Delimiters | Weakness | Allowed | 0 |
| CWE-152 | Improper Neutralization of Macro Symbols | Weakness | Allowed | 0 |
| CWE-153 | Improper Neutralization of Substitution Characters | Weakness | Allowed | 6 |
| CWE-154 | Improper Neutralization of Variable Name Delimiters | Weakness | Allowed | 2 |
| CWE-155 | Improper Neutralization of Wildcards or Matching Symbols | Weakness | Allowed | 31 |
| CWE-156 | Improper Neutralization of Whitespace | Weakness | Allowed | 9 |
| CWE-157 | Failure to Sanitize Paired Delimiters | Weakness | Allowed | 3 |
| CWE-158 | Improper Neutralization of Null Byte or NUL Character | Weakness | Allowed | 44 |
| CWE-159 | Improper Handling of Invalid Use of Special Elements | Weakness | Allowed-with-Review | 18 |
| CWE-160 | Improper Neutralization of Leading Special Elements | Weakness | Allowed | 1 |
| CWE-161 | Improper Neutralization of Multiple Leading Special Elements | Weakness | Allowed | 0 |
| CWE-162 | Improper Neutralization of Trailing Special Elements | Weakness | Allowed | 2 |
| CWE-163 | Improper Neutralization of Multiple Trailing Special Elements | Weakness | Allowed | 0 |
| CWE-164 | Improper Neutralization of Internal Special Elements | Weakness | Allowed | 4 |
| CWE-165 | Improper Neutralization of Multiple Internal Special Elements | Weakness | Allowed | 0 |
| CWE-166 | Improper Handling of Missing Special Element | Weakness | Allowed | 5 |
| CWE-167 | Improper Handling of Additional Special Element | Weakness | Allowed | 10 |
| CWE-168 | Improper Handling of Inconsistent Special Elements | Weakness | Allowed | 6 |
| CWE-169 | DEPRECATED: Technology-Specific Special Elements | Grouping | Prohibited | 0 |
| CWE-170 | Improper Null Termination | Weakness | Allowed | 77 |
| CWE-171 | DEPRECATED: Cleansing, Canonicalization, and Comparison Errors | Grouping | Prohibited | 0 |
| CWE-172 | Improper Encoding or Decoding of Data | Weakness | Allowed-with-Review | 26 |
| CWE-173 | Improper Handling of Alternate Encoding | Weakness | Allowed | 7 |
| CWE-174 | Double Decoding of the Same Data | Weakness | Allowed | 0 |
| CWE-175 | Improper Handling of Mixed Encoding | Weakness | Allowed | 0 |
| CWE-176 | Improper Handling of Unicode Encoding | Weakness | Allowed | 52 |
| CWE-177 | Improper Handling of URL Encoding (Hex Encoding) | Weakness | Allowed | 24 |
| CWE-178 | Improper Handling of Case Sensitivity | Weakness | Allowed | 134 |
| CWE-179 | Incorrect Behavior Order: Early Validation | Weakness | Allowed | 9 |
| CWE-180 | Incorrect Behavior Order: Validate Before Canonicalize | Weakness | Allowed | 32 |
| CWE-181 | Incorrect Behavior Order: Validate Before Filter | Weakness | Allowed | 0 |
| CWE-182 | Collapse of Data into Unsafe Value | Weakness | Allowed | 5 |
| CWE-183 | Permissive List of Allowed Inputs | Weakness | Allowed | 76 |
| CWE-184 | Incomplete List of Disallowed Inputs | Weakness | Allowed | 294 |
| CWE-185 | Incorrect Regular Expression | Weakness | Allowed-with-Review | 69 |
| CWE-186 | Overly Restrictive Regular Expression | Weakness | Allowed | 3 |
| CWE-187 | Partial String Comparison | Weakness | Allowed | 22 |
| CWE-188 | Reliance on Data/Memory Layout | Weakness | Allowed | 5 |
| CWE-189 | Numeric Errors | Grouping | Prohibited | 31 |
| CWE-190 | Integer Overflow or Wraparound | Weakness | Allowed | 3812 |
| CWE-191 | Integer Underflow (Wrap or Wraparound) | Weakness | Allowed | 620 |
| CWE-192 | Integer Coercion Error | Weakness | Allowed | 10 |
| CWE-193 | Off-by-one Error | Weakness | Allowed | 251 |
| CWE-194 | Unexpected Sign Extension | Weakness | Allowed | 8 |
| CWE-195 | Signed to Unsigned Conversion Error | Weakness | Allowed | 29 |
| CWE-196 | Unsigned to Signed Conversion Error | Weakness | Allowed | 7 |
| CWE-197 | Numeric Truncation Error | Weakness | Allowed | 85 |
| CWE-198 | Use of Incorrect Byte Ordering | Weakness | Allowed | 3 |
| CWE-199 | Information Management Errors | Grouping | Prohibited | 2 |
| CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor | Weakness | Discouraged | 14719 |