Browse the archive
316 weakness classes · 6 severity bands · 73 vendors
By severity
By weakness class (CWE)
- Cross-site Scripting (2244)
- Missing Authorization (1772)
- SQL Injection (917)
- Use After Free (900)
- Path Traversal (859)
- CWE-639 (850)
- Incorrect Authorization (835)
- Out-of-bounds Read (761)
- CWE-284 (739)
- Exposure of Sensitive Information (674)
- Server-Side Request Forgery (653)
- CWE-122 (558)
- Out-of-bounds Write (554)
- OS Command Injection (547)
- Code Injection (547)
- Missing Authentication for Critical Function (487)
- Improper Input Validation (459)
- Uncontrolled Resource Consumption (445)
- CWE-770 (432)
- CWE-74 (422)
- Improper Authentication (416)
- Improper Restriction of Operations within Memory Buffer (402)
- Deserialization of Untrusted Data (401)
- CWE-121 (344)
- Improper Privilege Management (326)
- Integer Overflow or Wraparound (255)
- Cross-Site Request Forgery (232)
- NULL Pointer Dereference (216)
- Unrestricted Upload of Dangerous File Type (201)
- Improper Certificate Validation (182)
- CWE-59 (178)
- Command Injection (177)
- CWE-362 (170)
- CWE-285 (164)
- CWE-345 (155)
- CWE-266 (151)
- CWE-347 (142)
- CWE-73 (127)
- CWE-290 (125)
- CWE-674 (125)
- CWE-693 (123)
- Open Redirect (120)
- CWE-367 (119)
- CWE-908 (114)
- CWE-843 (111)
- CWE-346 (110)
- CWE-522 (110)
- CWE-789 (110)
- CWE-835 (110)
- CWE-407 (108)
- CWE-617 (108)
- CWE-532 (105)
- CWE-613 (103)
- CWE-248 (97)
- Incorrect Permission Assignment for Critical Resource (96)
- Use of Hard-coded Credentials (96)
- CWE-191 (94)
- CWE-1333 (88)
- CWE-201 (85)
- CWE-321 (85)
- CWE-288 (82)
- CWE-829 (79)
- CWE-88 (78)
- Classic Buffer Overflow (77)
- CWE-451 (76)
- CWE-401 (73)
- CWE-307 (71)
- CWE-441 (70)
- CWE-1284 (66)
- Prototype Pollution (66)
- CWE-116 (64)
- CWE-415 (64)
- CWE-129 (63)
- CWE-80 (63)
- CWE-409 (61)
- XML External Entity Reference (61)
- CWE-209 (60)
- CWE-98 (60)
- CWE-822 (59)
- CWE-404 (56)
- CWE-184 (55)
- CWE-1336 (54)
- CWE-319 (54)
- CWE-126 (53)
- CWE-1188 (52)
- CWE-93 (51)
- CWE-470 (50)
- CWE-444 (49)
- CWE-497 (48)
- CWE-23 (47)
- CWE-436 (46)
- CWE-915 (45)
- CWE-943 (45)
- CWE-754 (43)
- CWE-203 (41)
- CWE-312 (41)
- CWE-459 (40)
- CWE-772 (40)
- CWE-427 (39)
- CWE-95 (36)
- CWE-178 (35)
- CWE-552 (35)
- CWE-749 (35)
- CWE-755 (35)
- CWE-640 (34)
- CWE-807 (34)
- CWE-294 (33)
- CWE-348 (33)
- CWE-204 (32)
- CWE-354 (32)
- CWE-706 (32)
- CWE-384 (31)
- CWE-61 (30)
- CWE-276 (29)
- CWE-457 (29)
- CWE-131 (28)
- CWE-250 (28)
- CWE-252 (28)
- CWE-130 (27)
- CWE-1390 (27)
- CWE-494 (27)
- CWE-426 (26)
- CWE-193 (25)
- CWE-208 (25)
- CWE-197 (24)
- CWE-330 (24)
- CWE-524 (24)
- CWE-636 (24)
- CWE-1220 (22)
- CWE-1392 (22)
- CWE-668 (22)
- CWE-1021 (21)
- CWE-1287 (21)
- CWE-653 (21)
- CWE-926 (21)
- CWE-259 (20)
- CWE-405 (20)
- CWE-117 (19)
- CWE-180 (19)
- Improper Validation of Certificate with Host Mismatch (19)
- CWE-1286 (18)
- CWE-327 (18)
- CWE-338 (18)
- CWE-369 (18)
- CWE-90 (18)
- CWE-377 (17)
- CWE-681 (17)
- CWE-799 (17)
- CWE-841 (17)
- CWE-916 (17)
- CWE-942 (17)
- CWE-134 (16)
- CWE-1236 (15)
- CWE-280 (15)
- CWE-303 (15)
- CWE-425 (15)
- CWE-472 (15)
- CWE-672 (15)
- CWE-696 (15)
- CWE-913 (15)
- CWE-113 (14)
- CWE-150 (14)
- CWE-189 (14)
- CWE-682 (14)
- CWE-824 (14)
- CWE-923 (14)
- CWE-99 (14)
- CWE-1289 (13)
- CWE-15 (13)
- CWE-212 (13)
- CWE-326 (13)
- CWE-488 (13)
- CWE-489 (13)
- CWE-538 (13)
- CWE-602 (13)
- CWE-940 (13)
- CWE-195 (12)
- CWE-305 (12)
- CWE-349 (12)
- CWE-667 (12)
- CWE-669 (12)
- CWE-670 (12)
- CWE-697 (12)
- CWE-763 (12)
- CWE-840 (12)
- CWE-202 (11)
- CWE-256 (11)
- CWE-304 (11)
- CWE-310 (11)
- CWE-834 (11)
- CWE-922 (11)
- CWE-176 (10)
- CWE-214 (10)
- CWE-264 (10)
- CWE-267 (10)
- CWE-311 (10)
- CWE-35 (10)
- Absolute Path Traversal (10)
- CWE-41 (10)
- CWE-424 (10)
- CWE-620 (10)
- CWE-664 (10)
- CWE-776 (10)
- CWE-91 (10)
- CWE-1385 (9)
- CWE-1391 (9)
- CWE-1394 (9)
- CWE-158 (9)
- CWE-183 (9)
- CWE-24 (9)
- CWE-281 (9)
- CWE-704 (9)
- CWE-825 (9)
- CWE-1023 (8)
- CWE-340 (8)
- CWE-358 (8)
- CWE-359 (8)
- CWE-390 (8)
- CWE-525 (8)
- CWE-606 (8)
- CWE-707 (8)
- CWE-833 (8)
- CWE-912 (8)
- CWE-939 (8)
- CWE-1285 (7)
- CWE-170 (7)
- CWE-308 (7)
- CWE-322 (7)
- CWE-325 (7)
- CWE-565 (7)
- CWE-598 (7)
- CWE-625 (7)
- CWE-757 (7)
- CWE-917 (7)
- CWE-1025 (6)
- CWE-1191 (6)
- CWE-123 (6)
- CWE-124 (6)
- CWE-1327 (6)
- CWE-172 (6)
- CWE-174 (6)
- CWE-187 (6)
- CWE-289 (6)
- CWE-299 (6)
- CWE-350 (6)
- CWE-353 (6)
- CWE-413 (6)
- CWE-428 (6)
- CWE-460 (6)
- CWE-471 (6)
- CWE-540 (6)
- CWE-665 (6)
- CWE-694 (6)
- CWE-778 (6)
- CWE-805 (6)
- CWE-823 (6)
- CWE-83 (6)
- CWE-127 (5)
- CWE-1288 (5)
- CWE-1325 (5)
- CWE-215 (5)
- CWE-226 (5)
- CWE-283 (5)
- CWE-31 (5)
- CWE-320 (5)
- CWE-328 (5)
- CWE-337 (5)
- CWE-379 (5)
- CWE-393 (5)
- CWE-590 (5)
- CWE-791 (5)
- CWE-1050 (4)
- CWE-115 (4)
- CWE-1275 (4)
- CWE-1393 (4)
- CWE-140 (4)
- CWE-177 (4)
- CWE-261 (4)
- CWE-272 (4)
- CWE-273 (4)
- CWE-323 (4)
- CWE-440 (4)
- CWE-506 (4)
- CWE-526 (4)
- CWE-610 (4)
- CWE-614 (4)
- CWE-628 (4)
- CWE-643 (4)
- CWE-647 (4)
- CWE-703 (4)
- CWE-782 (4)
- CWE-1004 (3)
- CWE-1035 (3)
- CWE-1265 (3)
- CWE-1386 (3)
- CWE-185 (3)
- CWE-213 (3)
- CWE-221 (3)
- CWE-265 (3)
- CWE-275 (3)
- CWE-300 (3)
- CWE-302 (3)
- CWE-316 (3)
- CWE-331 (3)
- CWE-363 (3)
- CWE-372 (3)
- CWE-378 (3)
- CWE-391 (3)
- CWE-394 (3)
- CWE-453 (3)
- CWE-680 (3)
- CWE-684 (3)
- CWE-690 (3)
- CWE-698 (3)
- CWE-775 (3)
- CWE-838 (3)
By vendor
- google (1108)
- microsoft (667)
- ibm (158)
- adobe (124)
- apple (118)
- apache (104)
- langflow (57)
- dell (54)
- linux (54)
- gitlab (43)
- jetbrains (43)
- freerdp (42)
- oracle (41)
- qualcomm (29)
- mozilla (27)
- vllm (27)
- elastic (22)
- jenkins (21)
- nvidia (18)
- excelize (15)
- pgadmin (15)
- eclipse (13)
- mcp-atlassian (13)
- python (13)
- moodle (12)
- progress (12)
- broadcom (11)
- mediatek (11)
- pfsense (11)
- sqlite (11)
- tox-dev (11)
- traefik (11)
- arubanetworks (10)
- freebsd (10)
- nodejs (10)
- pydantic (10)
- rclone (10)
- wolfssl (10)
- citrix (9)
- concretecms (9)
- docling (9)
- ffmpeg (9)
- pexip (9)
- qnap (9)
- radare (9)
- linuxfoundation (8)
- mariadb (8)
- moquette (8)
- pypdf project (8)
- hcltech (7)
- phpmyadmin (7)
- project-monai (7)
- py-pdf (7)
- semantic-mediawiki (7)
- snipeitapp (7)
- tanium (7)
- tuxera (7)
- vercel (7)
- digitalbazaar (6)
- redhat (6)
- blender (5)
- borewit (5)
- gohugo (5)
- hdfgroup (5)
- plex (5)
- roocode (5)
- splunk (5)
- synacor (5)
- exim (4)
- cisco (3)
- paloaltonetworks (3)
- tnef project (3)
- vmware (3)