CyberSecBulletin

Vulnerability types, ranked by how often they occur

Every CVE is an instance of a more general mistake, catalogued as a CWE (Common Weakness Enumeration). Knowing the type tells you how an attack works and how the fix is usually made. These are the types behind the vulnerabilities we track.

Improper Neutralization of Special Elements used in an SQL Command9,760
Out-of-bounds Write5,885
Use After Free4,464
Improper Neutralization of Special Elements used in an OS Command4,145
Improper Neutralization of Input During Web Page Generation4,061
Improper Neutralization of Special Elements in Output Used by a Downstream Component4,032
Improper Access Control3,725
Improper Limitation of a Pathname to a Restricted Directory3,606
Missing Authorization2,824
Out-of-bounds Read2,559
Unrestricted Upload of File with Dangerous Type2,512
Improper Restriction of Operations within the Bounds of a Memory Buffer2,497
Improper Control of Generation of Code2,467
Stack-based Buffer Overflow2,424
Improper Input Validation2,320
Missing Authentication for Critical Functionality2,227
Improper Neutralization of Special Elements used in a Command2,127
Deserialization of Untrusted Data2,126
Buffer Copy without Checking Size of Input2,042
Cross-Site Request Forgery2,014
Improper Privilege Management1,938
Improper Authentication1,835
Incorrect Authorization1,736
Server-Side Request Forgery1,599
Heap-based Buffer Overflow1,418
Uncontrolled Resource Consumption1,380
Exposure of Sensitive Information to an Unauthorized Actor1,371
Improper Control of Filename for Include/Require Statement in PHP Program1,136
Authorization Bypass Through User-Controlled Key1,127
Allocation of Resources Without Limits or Throttling1,118
Integer Overflow or Wraparound963
Concurrent Execution using Shared Resource with Improper Synchronization837
Use of Hard-coded Credentials711
NULL Pointer Dereference682
Uncontrolled Search Path Element610
Incorrect Privilege Assignment585
Improper Authorization535
Improper Certificate Validation520
Incorrect Default Permissions517
Access of Resource Using Incompatible Type495
Improper Link Resolution Before File Access491
Authentication Bypass Using an Alternate Path or Channel464
Improper Verification of Cryptographic Signature450
Protection Mechanism Failure444
External Control of File Name or Path436
Incorrect Permission Assignment for Critical Resource420
Time-of-check Time-of-use (TOCTOU) Race Condition353
Improper Restriction of XML External Entity Reference348
Double Free347
Insufficient Verification of Data Authenticity337
Authentication Bypass by Spoofing334
Insufficiently Protected Credentials328
Improper Restriction of Excessive Authentication Attempts293
Origin Validation Error291
Improper Neutralization of Argument Delimiters in a Command287
Improper Validation of Array Index265
Inefficient Regular Expression Complexity263
Relative Path Traversal263
Improperly Controlled Modification of Object Prototype Attributes257
Loop with Unreachable Exit Condition254
Integer Underflow (Wrap or Wraparound)250
Execution with Unnecessary Privileges248
Inclusion of Functionality from Untrusted Control Sphere235
Uncontrolled Recursion233
Cleartext Transmission of Sensitive Information226
Improper Check for Unusual or Exceptional Conditions221
Use of a Broken or Risky Cryptographic Algorithm218
Improper Neutralization of Special Elements Used in a Template Engine216
Reachable Assertion216
Untrusted Search Path211
Use of Hard-coded Cryptographic Key210
Missing Release of Memory after Effective Lifetime207
Improper Validation of Specified Quantity in Input203
Improper Encoding or Escaping of Output193
Insertion of Sensitive Information into Log File193
Files or Directories Accessible to External Parties184
Uncaught Exception183
Improper Neutralization of Directives in Dynamically Evaluated Code182
Weak Password Recovery Mechanism for Forgotten Password178
Inefficient Algorithmic Complexity177
Inconsistent Interpretation of HTTP Requests174
Exposure of Resource to Wrong Sphere173
Use of Uninitialized Resource173
Improper Resource Shutdown or Release172
URL Redirection to Untrusted Site171
Initialization of a Resource with an Insecure Default169
Cleartext Storage of Sensitive Information157
Memory Allocation with Excessive Size Value157
Improper Handling of Exceptional Conditions154
Unintended Proxy or Intermediary142
Incomplete List of Disallowed Inputs141
Unquoted Search Path or Element141
Improperly Controlled Modification of Dynamically-Determined Object Attributes131
Exposed Dangerous Method or Function130
Insertion of Sensitive Information Into Sent Data128
Access of Uninitialized Pointer128
Authentication Bypass by Capture-replay125
Download of Code Without Integrity Check122
Use of Hard-coded Password112
Use of Externally-Controlled Format String111
Session Fixation110
Improper Neutralization of CRLF Sequences109
Improper Neutralization of Formula Elements in a CSV File107
Incorrect Calculation of Buffer Size106
Use of Insufficiently Random Values104
Use of Externally-Controlled Input to Select Classes or Code102
Use of Uninitialized Variable101
Observable Discrepancy100
Use of Default Credentials99
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)99
Improper Handling of Highly Compressed Data (Data Amplification)98
Improper Preservation of Permissions97
Improper Neutralization97
Externally Controlled Reference to a Resource in Another Sphere90
Generation of Error Message Containing Sensitive Information89
Authentication Bypass by Primary Weakness89
Inadequate Encryption Strength89
Path Traversal: '.../...//'89
Improper Locking89
Interpretation Conflict88