Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
1477 CWEs
API response| CWE | Name | Entry type | Mapping usage | Occurrences |
|---|---|---|---|---|
| CWE-251 | Often Misused: String Management | Grouping | Prohibited | 0 |
| CWE-252 | Unchecked Return Value | Weakness | Allowed | 228 |
| CWE-253 | Incorrect Check of Function Return Value | Weakness | Allowed | 38 |
| CWE-254 | 7PK - Security Features | Grouping | Prohibited | 6 |
| CWE-255 | Credentials Management Errors | Grouping | Prohibited | 61 |
| CWE-256 | Plaintext Storage of a Password | Weakness | Allowed | 397 |
| CWE-257 | Storing Passwords in a Recoverable Format | Weakness | Allowed | 115 |
| CWE-258 | Empty Password in Configuration File | Weakness | Allowed | 16 |
| CWE-259 | Use of Hard-coded Password | Weakness | Allowed | 316 |
| CWE-260 | Password in Configuration File | Weakness | Allowed | 42 |
| CWE-261 | Weak Encoding for Password | Weakness | Allowed | 71 |
| CWE-262 | Not Using Password Aging | Weakness | Allowed | 10 |
| CWE-263 | Password Aging with Long Expiration | Weakness | Discouraged | 3 |
| CWE-264 | Permissions, Privileges, and Access Controls | Grouping | Prohibited | 285 |
| CWE-265 | Privilege Issues | Grouping | Prohibited | 10 |
| CWE-266 | Incorrect Privilege Assignment | Weakness | Allowed | 1861 |
| CWE-267 | Privilege Defined With Unsafe Actions | Weakness | Allowed | 102 |
| CWE-268 | Privilege Chaining | Weakness | Allowed | 45 |
| CWE-269 | Improper Privilege Management | Weakness | Discouraged | 5810 |
| CWE-270 | Privilege Context Switching Error | Weakness | Allowed | 45 |
| CWE-271 | Privilege Dropping / Lowering Errors | Weakness | Allowed-with-Review | 22 |
| CWE-272 | Least Privilege Violation | Weakness | Allowed | 52 |
| CWE-273 | Improper Check for Dropped Privileges | Weakness | Allowed | 52 |
| CWE-274 | Improper Handling of Insufficient Privileges | Weakness | Discouraged | 54 |
| CWE-275 | Permission Issues | Grouping | Prohibited | 49 |
| CWE-276 | Incorrect Default Permissions | Weakness | Allowed | 2056 |
| CWE-277 | Insecure Inherited Permissions | Weakness | Allowed | 116 |
| CWE-278 | Insecure Preserved Inherited Permissions | Weakness | Allowed | 10 |
| CWE-279 | Incorrect Execution-Assigned Permissions | Weakness | Allowed | 48 |
| CWE-280 | Improper Handling of Insufficient Permissions or Privileges | Weakness | Allowed | 252 |
| CWE-281 | Improper Preservation of Permissions | Weakness | Allowed | 429 |
| CWE-282 | Improper Ownership Management | Weakness | Allowed-with-Review | 49 |
| CWE-283 | Unverified Ownership | Weakness | Allowed | 38 |
| CWE-284 | Improper Access Control | Weakness | Discouraged | 7722 |
| CWE-285 | Improper Authorization | Weakness | Discouraged | 2251 |
| CWE-286 | Incorrect User Management | Weakness | Allowed-with-Review | 58 |
| CWE-287 | Improper Authentication | Weakness | Discouraged | 5893 |
| CWE-288 | Authentication Bypass Using an Alternate Path or Channel | Weakness | Allowed | 1063 |
| CWE-289 | Authentication Bypass by Alternate Name | Weakness | Allowed | 55 |
| CWE-290 | Authentication Bypass by Spoofing | Weakness | Allowed | 907 |
| CWE-291 | Reliance on IP Address for Authentication | Weakness | Allowed | 19 |
| CWE-292 | DEPRECATED: Trusting Self-reported DNS Name | Weakness | Prohibited | 0 |
| CWE-293 | Using Referer Field for Authentication | Weakness | Allowed | 2 |
| CWE-294 | Authentication Bypass by Capture-replay | Weakness | Allowed | 528 |
| CWE-295 | Improper Certificate Validation | Weakness | Allowed | 1881 |
| CWE-296 | Improper Following of a Certificate's Chain of Trust | Weakness | Allowed | 27 |
| CWE-297 | Improper Validation of Certificate with Host Mismatch | Weakness | Allowed | 99 |
| CWE-298 | Improper Validation of Certificate Expiration | Weakness | Allowed | 14 |
| CWE-299 | Improper Check for Certificate Revocation | Weakness | Allowed | 17 |
| CWE-300 | Channel Accessible by Non-Endpoint | Weakness | Discouraged | 95 |