Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
1477 CWEs
API response| CWE | Name | Entry type | Mapping usage | Occurrences |
|---|---|---|---|---|
| CWE-351 | Insufficient Type Distinction | Weakness | Allowed | 25 |
| CWE-352 | Cross-Site Request Forgery | Weakness | Allowed | 15134 |
| CWE-353 | Missing Support for Integrity Check | Weakness | Allowed | 714 |
| CWE-354 | Improper Validation of Integrity Check Value | Weakness | Allowed | 226 |
| CWE-355 | User Interface Security Issues | Grouping | Prohibited | 1 |
| CWE-356 | Missing User Interaction for Potentially Unsafe Action | Weakness | Allowed | 48 |
| CWE-357 | Insufficient UI Warning of Dangerous Operations | Weakness | Allowed | 38 |
| CWE-358 | Improperly Implemented Security Check for Standard | Weakness | Allowed | 195 |
| CWE-359 | Exposure of Private Personal Information to an Unauthorized Actor | Weakness | Allowed | 323 |
| CWE-360 | Trust of System Event Data | Weakness | Allowed | 3 |
| CWE-361 | 7PK - Time and State | Grouping | Prohibited | 0 |
| CWE-362 | Concurrent Execution using Shared Resource with Improper Synchronization | Weakness | Allowed-with-Review | 2777 |
| CWE-363 | Race Condition Enabling Link Following | Weakness | Allowed | 18 |
| CWE-364 | Signal Handler Race Condition | Weakness | Allowed | 30 |
| CWE-365 | DEPRECATED: Race Condition in Switch | Weakness | Prohibited | 1 |
| CWE-366 | Race Condition within a Thread | Weakness | Allowed | 34 |
| CWE-367 | Time-of-check Time-of-use (TOCTOU) Race Condition | Weakness | Allowed | 1039 |
| CWE-368 | Context Switching Race Condition | Weakness | Allowed | 8 |
| CWE-369 | Divide By Zero | Weakness | Allowed | 577 |
| CWE-370 | Missing Check for Certificate Revocation after Initial Check | Weakness | Allowed | 0 |
| CWE-371 | State Issues | Grouping | Prohibited | 8 |
| CWE-372 | Incomplete Internal State Distinction | Weakness | Discouraged | 13 |
| CWE-373 | DEPRECATED: State Synchronization Error | Weakness | Prohibited | 0 |
| CWE-374 | Passing Mutable Objects to an Untrusted Method | Weakness | Allowed | 1 |
| CWE-375 | Returning a Mutable Object to an Untrusted Caller | Weakness | Allowed | 0 |
| CWE-376 | DEPRECATED: Temporary File Issues | Grouping | Prohibited | 0 |
| CWE-377 | DEPRECATED: Insecure Temporary File | Weakness | Prohibited | 169 |
| CWE-378 | Creation of Temporary File With Insecure Permissions | Weakness | Allowed | 84 |
| CWE-379 | Creation of Temporary File in Directory with Insecure Permissions | Weakness | Allowed | 117 |
| CWE-380 | DEPRECATED: Technology-Specific Time and State Issues | Grouping | Prohibited | 0 |
| CWE-381 | DEPRECATED: J2EE Time and State Issues | Grouping | Prohibited | 0 |
| CWE-382 | J2EE Bad Practices: Use of System.exit() | Weakness | Allowed | 0 |
| CWE-383 | J2EE Bad Practices: Direct Use of Threads | Weakness | Allowed | 0 |
| CWE-384 | Session Fixation | Weakness | Allowed | 956 |
| CWE-385 | Covert Timing Channel | Weakness | Allowed | 76 |
| CWE-386 | Symbolic Name not Mapping to Correct Object | Weakness | Allowed | 2 |
| CWE-387 | Signal Errors | Grouping | Prohibited | 0 |
| CWE-388 | 7PK - Errors | Grouping | Prohibited | 8 |
| CWE-389 | Error Conditions, Return Values, Status Codes | Grouping | Prohibited | 0 |
| CWE-390 | Detection of Error Condition Without Action | Weakness | Allowed | 31 |
| CWE-391 | DEPRECATED: Unchecked Error Condition | Weakness | Prohibited | 47 |
| CWE-392 | Missing Report of Error Condition | Weakness | Allowed | 25 |
| CWE-393 | Return of Wrong Status Code | Weakness | Allowed | 17 |
| CWE-394 | Unexpected Status Code or Return Value | Weakness | Allowed | 26 |
| CWE-395 | Use of NullPointerException Catch to Detect NULL Pointer Dereference | Weakness | Allowed | 30 |
| CWE-396 | Declaration of Catch for Generic Exception | Weakness | Allowed | 4 |
| CWE-397 | Declaration of Throws for Generic Exception | Weakness | Allowed | 0 |
| CWE-398 | 7PK - Code Quality | Grouping | Prohibited | 0 |
| CWE-399 | Resource Management Errors | Grouping | Prohibited | 159 |
| CWE-400 | Uncontrolled Resource Consumption | Weakness | Discouraged | 5465 |