CWE (Common Weakness Enumeration)
Aug 30, 2022
A community developed list of software and hardware weaknesses maintained by MITRE Corporation. Each unique weakness is assigned by a specific CWE number (for example :- CWE-42). CWE entries are formed as a tree of different abstraction layers. The top and first layer is called Class and the second and middle layer is called Base and the last and final layer is called Variant; where Class is a parent layer, Base is a child layer and Variant is a grand child layer.
Most dangerous CWE of 2021
- CWE-787 : Out-of-bounds write
- CWE-79 : Cross-site scripting
- CWE-125 : Out-of-bounds read
- CWE-20 : Improper input validation
- CWE-78 : OS command injection
- CWE-89 : SQL injection
- CWE-352 : Client Side Request Forgery (CSRF)
