Common Weakness Enumeration

Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.

Reset

774 CWEs

API response
CWE Name Mapping usage Occurrences
CWE-1278 Missing Protection Against Hardware Reverse Engineering Using Integrated Circuit (IC) Imaging Techniques Allowed 1
CWE-1272 Sensitive Information Uncleared Before Debug/Power State Transition Allowed 1
CWE-1264 Hardware Logic with Insecure De-Synchronization between Control and Data Channels Allowed 1
CWE-1255 Comparison Logic is Vulnerable to Power Side-Channel Attacks Allowed 1
CWE-1253 Incorrect Selection of Fuse Values Allowed 1
CWE-1224 Improper Restriction of Write-Once Bit Fields Allowed 1
CWE-1222 Insufficient Granularity of Address Regions Protected by Register Locks Allowed 1
CWE-12 ASP.NET Misconfiguration: Missing Custom Error Page Allowed 1
CWE-1190 DMA Device Enabled Too Early in Boot Phase Allowed 1
CWE-1164 Irrelevant Code Allowed-with-Review 1
CWE-1118 Insufficient Documentation of Error Handling Techniques Prohibited 1
CWE-1116 Inaccurate Source Code Comments Allowed 1
CWE-1113 Inappropriate Comment Style Prohibited 1
CWE-1102 Reliance on Machine-Dependent Data Representation Allowed 1
CWE-1083 Data Access from Outside Expected Data Manager Component Prohibited 1
CWE-1078 Inappropriate Source Code Style or Formatting Prohibited 1
CWE-1072 Data Resource Access without Use of Connection Pooling Prohibited 1
CWE-1066 Missing Serialization Control Element Prohibited 1
CWE-1057 Data Access Operations Outside of Expected Data Manager Component Prohibited 1
CWE-1051 Initialization with Hard-Coded Network Resource Configuration Data Prohibited 1
CWE-1046 Creation of Immutable Text Using String Concatenation Allowed 1
CWE-1024 Comparison of Incompatible Types Allowed 1