CWE Program – Medium

CWE Program

CWE Program

Major Usability Improvements to Viewing CWE Content Underway

The Common Weakness Enumeration (CWE™) Program is currently in the process of making changes to the presentation of CWE entries and have…

Jun 10

Before image of the current webpage for https://cwe.mitre.org/data/definitions/89.html on the left in comparison to proposed usability improvements of the same webpage on the right with an easier-to-understand presentation of the basic content included in the entry along with a visual representation of the weakness.

Jun 10

CWE Program

Out-of-Bounds Read Podcast — “Red Hat’s CWE Journey”

“Out-Of-Bounds Read” is the Common Weakness Enumeration (CWE™) Program’s free podcast about common weaknesses in software and hardware…

Jan 23

Listen to the CWE Podcast — “Red Hat’s CWE Journey” — on our YouTube Channel

Jan 23

CWE Program

“2023 CWE Top 25 Most Dangerous Software Weaknesses” List Now Available

The “2023 Common Weakness Enumeration (CWE) Top 25 Most Dangerous Software Weaknesses” (CWE Top 25) list was released on June 21, 2023, on…

Jul 7, 2023

Jul 7, 2023

CWE Program

Community Actively Working to Enhance CWE’s ICS/OT Coverage

Work related to describing and classifying security weaknesses in information technology (IT) through efforts such as Common Weakness…

Nov 30, 2022

Community Actively Working to Enhance CWE’s ICS/OT Coverage

Nov 30, 2022

CWE Program

How to Effectively Utilize Hardware CWEs Across your Organization

How to Effectively Utilize Hardware CWEs Across your Organization

May 13, 2022

How to Effectively Utilize Hardware CWEs Across your Organization

May 13, 2022

CWE Program

The Missing Piece in Vulnerability Management

The CWE/CAPEC Program partners with organizations around the world to further the program’s mission and objectives. The views and opinions…

May 4, 2022

The Missing piece by Stiller Beobachter

May 4, 2022

CWE Program

New CWE Entry, CWE-FFFF: Use of a Potentially Dangerous Electronic Programmable Machine to…

On the CWE team, we know that identifying the root cause weakness of a vulnerability is not always a straight-forward and easy task. We…

Apr 1, 2022

New CWE Entry, CWE-FFFF: Use of a Potentially Dangerous Electronic Programmable Machine to…

Apr 1, 2022

CWE Program

Celebrating the 15th anniversary of CAPEC™

March 2022 is the 15th anniversary of Common Attack Pattern Enumerations and Classifications (CAPEC™). On this important milestone, we…

Mar 23, 2022

Happy Anniversary Cake

Mar 23, 2022

CWE Program

Mind your REGEX or it can put your program into an infinite loop

If your project uses or implements regular expressions, you need to check them for a weakness that might allow an attacker to stop your…

Feb 1, 2022

REGEX that matches the chours of “Never going to Give you Up”

Feb 1, 2022

CWE Program

HTTP Desync: The Redux and Evolution of HTTP Smuggling and Splitting Attack Techniques

A special thanks to Adam Chaudry for his contribution to this blog.

Jan 12, 2022

HTTP Desync: The Redux and Evolution of HTTP Smuggling and Splitting Attack Techniques

Jan 12, 2022

CWE Program

CWE Program

The official blog of the CWE Program. Articles are written by program staff and our community partners. https://cwe.mitre.org

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams