This site currently shows sample data for demonstration.

Analysis

Top Bug Types

The most common classes of weakness in BDVDB, mapped to CWE IDs.

Top 10, all time. Data as of . Counts cover all 402,058 CVEs in the catalog. View entries lists the newest 9,783.

Top Bug Types by number of vulnerabilities
  1. Cross-Site Scripting 31,802 vulnerabilities 31,802 total: 528 Critical, 6,002 High, 25,272 lower
  2. Memory Corruption 31,401 vulnerabilities 31,401 total: 2,712 Critical, 16,876 High, 11,813 lower
  3. SQL Injection 13,782 vulnerabilities 13,782 total: 2,447 Critical, 6,328 High, 5,007 lower
  4. Missing Authorization 9,803 vulnerabilities 9,803 total: 419 Critical, 2,112 High, 7,272 lower
  5. Command Injection 7,315 vulnerabilities 7,315 total: 1,926 Critical, 3,471 High, 1,918 lower
  6. Improper Access Control 7,182 vulnerabilities 7,182 total: 902 Critical, 2,870 High, 3,410 lower
  7. Path Traversal 6,645 vulnerabilities 6,645 total: 760 Critical, 2,811 High, 3,074 lower
  8. Information Disclosure 6,447 vulnerabilities 6,447 total: 226 Critical, 1,319 High, 4,902 lower
  9. Cross-Site Request Forgery 6,364 vulnerabilities 6,364 total: 110 Critical, 1,773 High, 4,481 lower
  10. Authentication Issues 6,300 vulnerabilities 6,300 total: 1,938 Critical, 2,369 High, 1,993 lower
RankNameCWE IDsTotal vulnerabilitiesCritical/HighList
1Cross-Site ScriptingCWE-7931,8026,530View entries for Cross-Site Scripting
2Memory CorruptionCWE-119, CWE-120, CWE-122, CWE-125, CWE-190, CWE-415, CWE-416, CWE-476, CWE-78731,40119,588View entries for Memory Corruption
3SQL InjectionCWE-89, CWE-56413,7828,775View entries for SQL Injection
4Missing AuthorizationCWE-262, CWE-682, CWE-8629,8032,531View entries for Missing Authorization
5Command InjectionCWE-77, CWE-787,3155,397View entries for Command Injection
6Improper Access ControlCWE-284, CWE-338, CWE-7327,1823,772View entries for Improper Access Control
7Path TraversalCWE-22, CWE-23, CWE-24, CWE-26, CWE-27, CWE-35, CWE-376,6453,571View entries for Path Traversal
8Information DisclosureCWE-200, CWE-5326,4471,545View entries for Information Disclosure
9Cross-Site Request ForgeryCWE-3526,3641,883View entries for Cross-Site Request Forgery
10Authentication IssuesCWE-287, CWE-288, CWE-294, CWE-3066,3004,307View entries for Authentication Issues

185,662 entries have no specific CWE classification in the source data and are not ranked here.