Common Weakness Enumeration (CWE)

In this section, we will talk about the Common Weakness Enumeration (CWE). The CWE is a universal online dictionary of weaknesses that have been found in computer software. In this section, we will cover two well-known CWEs—the OWASP Top 10 and the SANS Top 25.

OWASP Top 10

Open Web Application Security Project (OWASP) is an organization that provides computer and internet applications with impartial, realistic, and cost-effective information.

The current list for 2020 contains the following bugs:

• Injection
• Broken authentication
• Sensitive data exposure
• XML external entities (XXE)

• Broken access control
• Security misconfigurations
• Cross-site scripting (XSS)
• Insecure deserialization
...