All CWE Vulnerabilities

Browse our comprehensive database of Common Weakness Enumeration (CWE) vulnerabilities

CWE-941: Incorrectly Specified Destination in a Communication Channel
Learn about CWE-941 (Incorrectly Specified Destination in a Communication Channel), its security impact, exploitation methods, and prevention guidelines.

Likelihood: Not specified

CWE-942: Permissive Cross-domain Policy with Untrusted Domains
Learn about CWE-942 (Permissive Cross-domain Policy with Untrusted Domains), its security impact, exploitation methods, and prevention guidelines.

Likelihood: Not specified

CWE-943: Improper Neutralization of Special Elements in Data Query Logic
Learn about CWE-943 (Improper Neutralization of Special Elements in Data Query Logic), its security impact, exploitation methods, and prevention guidelines.

Likelihood: Not specified

CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
Learn about CWE-95 (Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')), its security impact, exploitation methods, and prevention guidelines.

Likelihood: Not specified

CWE-96: Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
Learn about CWE-96 (Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')), its security impact, exploitation methods, and prevention guidelines.

Likelihood: Not specified

CWE-97: Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
Learn about CWE-97 (Improper Neutralization of Server-Side Includes (SSI) Within a Web Page), its security impact, exploitation methods, and prevention guidelines.

Likelihood: Not specified

CWE-98: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
Learn about CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')), its security impact, exploitation methods, and prevention guidelines.

Likelihood: Not specified

CWE-99: Improper Control of Resource Identifiers ('Resource Injection')
Learn about CWE-99 (Improper Control of Resource Identifiers ('Resource Injection')), its security impact, exploitation methods, and prevention guidelines.

Likelihood: Not specified