CWE_DATABASE

Records: 842Page 1 / 43

Insecure setting of generative AI/ML model inference parametersweakness enumeration

Driving intermediate cryptographic State/Results to hardware module outputsweakness enumeration

Missing Security-Relevant feedback for unexecuted operations in hardware interfaceweakness enumeration

Reliance on HTTP instead of HTTPSweakness enumeration

Improper neutralization of input used for LLM promptingweakness enumeration

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient executionweakness enumeration

Exposure of sensitive information caused by incorrect data forwarding during transient executionweakness enumeration

Exposure of sensitive information in shared microarchitectural structures during transient executionweakness enumeration

Exposure of sensitive information during transient executionweakness enumeration

Incorrect initialization of resourceweakness enumeration

Dependency on vulnerable Third-Party componentweakness enumeration

Use of default cryptographic keyweakness enumeration

Use of default passwordweakness enumeration

Use of default credentialsweakness enumeration

Use of weak credentialsweakness enumeration

Weak authenticationweakness enumeration

Incorrect parsing of numbers with different radicesweakness enumeration

Insecure operation on windows junction / mount pointweakness enumeration

Missing origin validation in WebSocketsweakness enumeration

Improper handling of physical or environmental conditionsweakness enumeration

...