Cwe

93 tracked

Browse 93 cwe entities tracked by ThreatCluster.

Total Entities

Active This Week

New This Week

Avg Threat Score

66.7

Trending (7 Days)

Cwe-122 - Heap-based Buffer OverflowCWE-269 - Improper Privilege ManagementCWE-200 - Exposure of Sensitive InformationCwe-416 - Use After FreeCwe-125 - Out-of-bounds Read

Cwe

CWE-200 - Exposure of Sensitive Information

CWE-287 - Improper Authentication

CWE-269 - Improper Privilege Management

Cwe-122 - Heap-based Buffer Overflow

Cwe-416 - Use After Free

Cwe-125 - Out-of-bounds Read

CWE-78 - OS Command Injection

CWE-862 - Missing Authorization

Cwe-89 - SQL Injection

CWE-94 - Code Injection

CWE-22 - Path Traversal

CWE-120 - Classic Buffer Overflow

Cwe-79 - Cross-site Scripting (xss)

CWE-798 - Use of Hard-coded Credentials

Cwe-362 - Race Condition

Cwe-190 - Integer Overflow Or Wraparound

Cwe-502 - Deserialization Of Untrusted Data

Cwe-787 - Out-of-bounds Write

Cwe-918 - Server-Side Request Forgery (ssrf)

Cwe-400 - Uncontrolled Resource Consumption

CWE-20 - Improper Input Validation

Cwe-843 - Type Confusion

Cwe-476 - NULL Pointer Dereference

Cwe-434 - Unrestricted Upload Of File With Dangerous Type

Cwe-352 - Cross-Site Request Forgery (csrf)

Cwe-119 - Improper Restriction Of Operations Within Memory Buffer

Cwe-415 - Double Free

Cwe-601 - Open Redirect

Cwe-191 - Integer Underflow

Cwe-611 - Improper Restriction Of XML External Entity Reference (xxe)

Cwe-306 - Missing Authentication For Critical Function

Cwe-295 - Improper Certificate Validation

CWE-77 - Command Injection

Cwe-327 - Use Of A Broken Or Risky Cryptographic Algorithm

Cwe-59 - Improper Link Resolution Before File Access

CWE-401 - Missing Release of Memory after Effective Lifetime

Cwe-426 - Untrusted Search Path

Cwe-193 - Off-by-one Error

CWE-347 - Improper Verification of Cryptographic Signature

Cwe-134 - Use Of Externally-Controlled Format String

CWE-639 - Authorization Bypass Through User-Controlled Key (IDOR)

Cwe-319 - Cleartext Transmission Of Sensitive Information

CWE-367 - TOCTOU Race Condition

Cwe-427 - Uncontrolled Search Path Element

CWE-863 - Incorrect Authorization

CWE-908 - Use of Uninitialized Resource

Cwe-131 - Incorrect Calculation Of Buffer Size

Cwe-326 - Inadequate Encryption Strength

CWE-74 - Injection

CWE-116 - Improper Encoding or Escaping of Output

CWE-129 - Improper Validation of Array Index

CWE-276 - Incorrect Default Permissions

CWE-307 - Improper Restriction of Excessive Authentication Attempts

CWE-311 - Missing Encryption of Sensitive Data

CWE-312 - Cleartext Storage of Sensitive Information

CWE-331 - Insufficient Entropy

CWE-522 - Insufficiently Protected Credentials

CWE-682 - Incorrect Calculation

CWE-770 - Allocation of Resources Without Limits or Throttling

CWE-772 - Missing Release of Resource after Effective Lifetime

CWE-88 - Argument Injection

CWE-1188 - Insecure Default Initialization of Resource

CWE-209 - Error Message Information Exposure

Cwe-252 - Unchecked Return Value

CWE-330 - Use of Insufficiently Random Values

CWE-369 - Divide By Zero

Cwe-521 - Weak Password Requirements

CWE-613 - Insufficient Session Expiration

CWE-681 - Incorrect Conversion between Numeric Types

CWE-706 - Use of Incorrectly-Resolved Name or Reference

CWE-1236 - Improper Neutralization of Formula Elements in a CSV File

CWE-1284 - Improper Validation of Specified Quantity in Input

CWE-1321 - Prototype Pollution

CWE-178 - Improper Handling of Case Sensitivity

CWE-290 - Authentication Bypass by Spoofing

CWE-294 - Authentication Bypass by Capture-replay

CWE-338 - Use of Cryptographically Weak PRNG

CWE-345 - Insufficient Verification of Data Authenticity

CWE-346 - Origin Validation Error