Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
1477 CWEs
API response| CWE | Name | Entry type | Mapping usage | Occurrences |
|---|---|---|---|---|
| CWE-401 | Missing Release of Memory after Effective Lifetime | Weakness | Allowed | 1953 |
| CWE-402 | Transmission of Private Resources into a New Sphere | Weakness | Allowed-with-Review | 44 |
| CWE-403 | Exposure of File Descriptor to Unintended Control Sphere | Weakness | Allowed | 14 |
| CWE-404 | Improper Resource Shutdown or Release | Weakness | Allowed-with-Review | 1210 |
| CWE-405 | Asymmetric Resource Consumption (Amplification) | Weakness | Allowed-with-Review | 85 |
| CWE-406 | Insufficient Control of Network Message Volume (Network Amplification) | Weakness | Allowed-with-Review | 29 |
| CWE-407 | Inefficient Algorithmic Complexity | Weakness | Allowed-with-Review | 181 |
| CWE-408 | Incorrect Behavior Order: Early Amplification | Weakness | Allowed | 11 |
| CWE-409 | Improper Handling of Highly Compressed Data (Data Amplification) | Weakness | Allowed | 130 |
| CWE-410 | Insufficient Resource Pool | Weakness | Allowed | 33 |
| CWE-411 | Resource Locking Problems | Grouping | Prohibited | 0 |
| CWE-412 | Unrestricted Externally Accessible Lock | Weakness | Allowed | 8 |
| CWE-413 | Improper Resource Locking | Weakness | Allowed | 27 |
| CWE-414 | Missing Lock Check | Weakness | Allowed | 9 |
| CWE-415 | Double Free | Weakness | Allowed | 948 |
| CWE-416 | Use After Free | Weakness | Allowed | 9477 |
| CWE-417 | Communication Channel Errors | Grouping | Prohibited | 0 |
| CWE-418 | DEPRECATED: Channel Errors | Grouping | Prohibited | 0 |
| CWE-419 | Unprotected Primary Channel | Weakness | Allowed | 16 |
| CWE-420 | Unprotected Alternate Channel | Weakness | Allowed | 71 |
| CWE-421 | Race Condition During Access to Alternate Channel | Weakness | Allowed | 15 |
| CWE-422 | Unprotected Windows Messaging Channel | Weakness | Allowed | 4 |
| CWE-423 | DEPRECATED: Proxied Trusted Channel | Weakness | Prohibited | 0 |
| CWE-424 | Improper Protection of Alternate Path | Weakness | Allowed-with-Review | 59 |
| CWE-425 | Direct Request | Weakness | Allowed | 269 |
| CWE-426 | Untrusted Search Path | Weakness | Allowed-with-Review | 886 |
| CWE-427 | Uncontrolled Search Path Element | Weakness | Allowed-with-Review | 1768 |
| CWE-428 | Unquoted Search Path or Element | Weakness | Allowed | 759 |
| CWE-429 | Handler Errors | Grouping | Prohibited | 0 |
| CWE-430 | Deployment of Wrong Handler | Weakness | Allowed | 2 |
| CWE-431 | Missing Handler | Weakness | Allowed | 2 |
| CWE-432 | Dangerous Signal Handler not Disabled During Sensitive Operations | Weakness | Allowed | 0 |
| CWE-433 | Unparsed Raw Web Content Delivery | Weakness | Allowed | 5 |
| CWE-434 | Unrestricted Upload of File with Dangerous Type | Weakness | Allowed | 6038 |
| CWE-435 | Improper Interaction Between Multiple Correctly-Behaving Entities | Weakness | Discouraged | 7 |
| CWE-436 | Interpretation Conflict | Weakness | Allowed-with-Review | 193 |
| CWE-437 | Incomplete Model of Endpoint Features | Weakness | Allowed | 6 |
| CWE-438 | Behavioral Problems | Grouping | Prohibited | 0 |
| CWE-439 | Behavioral Change in New Version or Environment | Weakness | Allowed | 0 |
| CWE-440 | Expected Behavior Violation | Weakness | Allowed | 78 |
| CWE-441 | Unintended Proxy or Intermediary | Weakness | Allowed-with-Review | 145 |
| CWE-442 | DEPRECATED: Web Problems | Grouping | Prohibited | 0 |
| CWE-443 | DEPRECATED: HTTP response splitting | Weakness | Prohibited | 1 |
| CWE-444 | Inconsistent Interpretation of HTTP Requests | Weakness | Allowed | 544 |
| CWE-445 | DEPRECATED: User Interface Errors | Grouping | Prohibited | 0 |
| CWE-446 | UI Discrepancy for Security Feature | Weakness | Allowed-with-Review | 6 |
| CWE-447 | Unimplemented or Unsupported Feature in UI | Weakness | Allowed | 6 |
| CWE-448 | Obsolete Feature in UI | Weakness | Allowed | 4 |
| CWE-449 | The UI Performs the Wrong Action | Weakness | Allowed | 26 |
| CWE-450 | Multiple Interpretations of UI Input | Weakness | Allowed | 3 |