Cwe

106 tracked

Browse 100 cwe entities tracked by ThreatCluster.

Total Entities

106

Active This Week

New This Week

Avg Threat Score

65.3

Trending (7 Days)

CWE-200 - Exposure of Sensitive InformationCWE-416 - Use After FreeCWE-287 - Improper AuthenticationCWE-89 - SQL InjectionCWE-94 - Code Injection

Threat Score Distribution

Critical (80+)

High (60-79)

Medium (40-59)

Low (<40)

Source Diversity

CWE-200 - Exposure of Sensitive Information

1383

CWE-287 - Improper Authentication

657

CWE-269 - Improper Privilege Management

309

CWE-78 - OS Command Injection

246

CWE-862 - Missing Authorization

245

CWE-94 - Code Injection

235

CWE-89 - SQL Injection

228

CWE-798 - Use of Hard-coded Credentials

221

New vs Returning

New this week (2)

Returning active (55)

Quiet (49)

Sort:

HOT

Cwe

CWE-200 - Exposure of Sensitive Information

CWE-287 - Improper Authentication

CWE-269 - Improper Privilege Management

CWE-122 - Heap-based Buffer Overflow

CWE-416 - Use After Free

CWE-78 - OS Command Injection

CWE-22 - Path Traversal

CWE-89 - SQL Injection

CWE-125 - Out-of-bounds Read

CWE-94 - Code Injection

CWE-862 - Missing Authorization

CWE-79 - Cross-site Scripting (xss)

CWE-120 - Classic Buffer Overflow

CWE-798 - Use of Hard-coded Credentials

CWE-502 - Deserialization Of Untrusted Data

CWE-787 - Out-of-bounds Write

CWE-190 - Integer Overflow Or Wraparound

CWE-362 - Race Condition

CWE-918 - Server-Side Request Forgery (ssrf)

CWE-400 - Uncontrolled Resource Consumption

CWE-20 - Improper Input Validation

CWE-119 - Improper Restriction Of Operations Within Memory Buffer

CWE-843 - Type Confusion

CWE-476 - NULL Pointer Dereference

CWE-434 - Unrestricted Upload Of File With Dangerous Type

CWE-352 - Cross-Site Request Forgery (csrf)

CWE-306 - Missing Authentication For Critical Function

CWE-611 - Improper Restriction Of XML External Entity Reference (xxe)

CWE-415 - Double Free

CWE-601 - Open Redirect

CWE-295 - Improper Certificate Validation

CWE-77 - Command Injection

CWE-191 - Integer Underflow

CWE-863 - Incorrect Authorization

CWE-327 - Use Of A Broken Or Risky Cryptographic Algorithm

CWE-59 - Improper Link Resolution Before File Access

CWE-639 - Authorization Bypass Through User-Controlled Key (IDOR)

CWE-347 - Improper Verification of Cryptographic Signature

CWE-74 - Injection

CWE-193 - Off-by-one Error

CWE-367 - TOCTOU Race Condition

CWE-522 - Insufficiently Protected Credentials

CWE-426 - Untrusted Search Path

CWE-770 - Allocation of Resources Without Limits or Throttling

CWE-319 - Cleartext Transmission Of Sensitive Information

CWE-331 - Insufficient Entropy

CWE-401 - Missing Release of Memory after Effective Lifetime

CWE-134 - Use Of Externally-Controlled Format String

CWE-290 - Authentication Bypass by Spoofing

CWE-311 - Missing Encryption of Sensitive Data

CWE-427 - Uncontrolled Search Path Element

CWE-444 - HTTP Request Smuggling

CWE-682 - Incorrect Calculation

CWE-754 - Improper Check for Unusual or Exceptional Conditions

CWE-88 - Argument Injection

CWE-116 - Improper Encoding or Escaping of Output

CWE-1284 - Improper Validation of Specified Quantity in Input

CWE-307 - Improper Restriction of Excessive Authentication Attempts

CWE-330 - Use of Insufficiently Random Values

CWE-732 - Incorrect Permission Assignment for Critical Resource

CWE-824 - Access of Uninitialized Pointer

CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

CWE-908 - Use of Uninitialized Resource

CWE-129 - Improper Validation of Array Index

CWE-131 - Incorrect Calculation Of Buffer Size

CWE-326 - Inadequate Encryption Strength

CWE-345 - Insufficient Verification of Data Authenticity

CWE-521 - Weak Password Requirements

CWE-613 - Insufficient Session Expiration

CWE-772 - Missing Release of Resource after Effective Lifetime

CWE-1188 - Insecure Default Initialization of Resource

CWE-209 - Error Message Information Exposure

CWE-252 - Unchecked Return Value

CWE-276 - Incorrect Default Permissions

CWE-294 - Authentication Bypass by Capture-replay

CWE-312 - Cleartext Storage of Sensitive Information

CWE-470 - Unsafe Reflection

CWE-755 - Improper Handling of Exceptional Conditions

CWE-1236 - Improper Neutralization of Formula Elements in a CSV File