cwe-research-list  

Messages by Date

• 2024/08/23 [EXT] CWE-640 and use of security questions? Jeffrey Walton
• 2024/08/08 CWE REST API is now available! Common Weakness Enumeration (CWE)
• 2024/07/18 CWE Version 4.15 is now available! Common Weakness Enumeration (CWE)
• 2024/04/11 RE: Microsoft committing to CWEs Connor Mullaly
• 2024/04/10 Microsoft committing to CWEs Kurt Seifried
• 2024/03/11 RE: [EXT] Re: [EXT] CWE XML Problems Steven M Christey
• 2024/03/07 CWE Version 4.14 is now available! Common Weakness Enumeration (CWE)
• 2024/03/04 RE: [EXT] CWE XML Problems David B Rothenberg
• 2024/03/04 Re: [EXT] CWE XML Problems Kurt Seifried
• 2024/03/04 CWE XML Problems Kurt Seifried
• 2024/01/10 Re: [EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper) David A. Wheeler
• 2024/01/10 Re: [EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper) Kurt Seifried
• 2024/01/09 Re: [EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper) David A. Wheeler
• 2024/01/09 Re: [EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper) Hatfield, Arthur
• 2024/01/09 Re: [EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper) David A. Wheeler
• 2024/01/09 Re: [EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper) Przemyslaw Roguski
• 2024/01/04 Re: [EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper) Alec J Summers
• 2024/01/03 Re: [EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper) Kurt Seifried
• 2024/01/03 Re: [EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper) Andy Murren
• 2024/01/03 [EXT] Proposal: Add "Insecure default" as a general CWE category (per "Secure-by-design" paper) David A. Wheeler
• 2023/11/10 RE: [EXT] RE: [Non-DoD Source] Re: Request for CWE: Improper Licensing (UNCLASSIFIED) Steven M Christey
• 2023/11/09 Re: [EXT] RE: [Non-DoD Source] Re: Request for CWE: Improper Licensing (UNCLASSIFIED) Kurt Seifried
• 2023/11/09 Re: [EXT] RE: [Non-DoD Source] Re: Request for CWE: Improper Licensing (UNCLASSIFIED) Hatfield, Arthur
• 2023/11/09 Re: [EXT] RE: [Non-DoD Source] Re: Request for CWE: Improper Licensing (UNCLASSIFIED) Przemyslaw Roguski
• 2023/11/09 [EXT] RE: [Non-DoD Source] Re: Request for CWE: Improper Licensing (UNCLASSIFIED) Hood, Jonathan W CTR USARMY DEVCOM AVMC (USA)
• 2023/11/09 [EXT] Re: [Non-DoD Source] Re: Request for CWE: Improper Licensing (UNCLASSIFIED) Hatfield, Arthur
• 2023/11/09 [EXT] RE: [Non-DoD Source] Re: Request for CWE: Improper Licensing (UNCLASSIFIED) Hood, Jonathan W CTR USARMY DEVCOM AVMC (USA)
• 2023/11/06 [EXT] Re: Request for CWE: Improper Licensing (UNCLASSIFIED) Przemyslaw Roguski
• 2023/11/03 [EXT] Re: Request for CWE: Improper Licensing (UNCLASSIFIED) Kurt Seifried
• 2023/11/03 RE: Request for CWE: Improper Licensing (UNCLASSIFIED) Steven M Christey
• 2023/11/01 [EXT] RE: Request for CWE: Improper Licensing (UNCLASSIFIED) Hood, Jonathan W CTR USARMY DEVCOM AVMC (USA)
• 2023/09/21 15 “stubborn” CWEs that have appeared in every “CWE Top 25” list since 2019 with potential mitigations Common Weakness Enumeration (CWE)
• 2023/08/10 CWE Top 25 Weaknesses Trends from 2019 through 2023 now available! Common Weakness Enumeration (CWE)
• 2023/07/17 [EXT] HW CWE introduction slides Mohan Lal
• 2023/07/17 [EXT] Fwd: 2023 CWE Top 25 “On the Cusp” list now available! Jeffrey Walton
• 2023/07/17 2023 CWE Top 25 “On the Cusp” list now available! Common Weakness Enumeration (CWE)
• 2023/07/11 “2023 CWE Top 25” & CWE Version 4.12 are now available! Common Weakness Enumeration (CWE)
• 2023/05/03 CWE-295, Improper Certificate Validation, and sample code Jeffrey Walton
• 2023/05/01 CWE Version 4.11 is Now Available! Common Weakness Enumeration (CWE)
• 2023/02/02 CWE Version 4.10 is Now Available! Common Weakness Enumeration (CWE)
• 2022/09/13 Re: CWE/CAPEC definitions update Kurt Seifried
• 2022/09/12 CWE/CAPEC definitions update Alec J Summers
• 2022/07/20 FW: CWE/CAPEC Definitions Alec J Summers
• 2022/07/17 Re: CWE/CAPEC Definitions Kurt Seifried
• 2022/07/15 RE: CWE/CAPEC Definitions Rob Wissmann
• 2022/07/14 RE: CWE/CAPEC Definitions Steven M Christey
• 2022/07/14 Re: CWE/CAPEC Definitions David A. Wheeler
• 2022/07/14 Re: CWE/CAPEC Definitions SJ Jazz
• 2022/07/14 Re: CWE/CAPEC Definitions Hatfield, Arthur
• 2022/07/14 Re: CWE/CAPEC Definitions Hatfield, Arthur
• 2022/07/14 RE: CWE/CAPEC Definitions Rob Wissmann
• 2022/07/14 Re: CWE/CAPEC Definitions SJ Jazz
• 2022/07/14 RE: [External] - RE: CWE/CAPEC Definitions Paul Anderson
• 2022/07/14 RE: CWE/CAPEC Definitions Rob Wissmann
• 2022/07/14 Re: CWE/CAPEC Definitions nazar.abdul
• 2022/07/14 Re: CWE/CAPEC Definitions Landfield, Kent
• 2022/07/14 Re: CWE/CAPEC Definitions SJ Jazz
• 2022/07/14 RE: CWE/CAPEC Definitions Paul Wooderson
• 2022/07/14 RE: CWE/CAPEC Definitions Paul.Wortman
• 2022/07/14 RE: CWE/CAPEC Definitions Schweiger, Andreas Dr.
• 2022/07/13 RE: CWE/CAPEC Definitions James Pangburn
• 2022/07/13 Re: CWE/CAPEC Definitions Joe Baum
• 2022/07/13 Re: CWE/CAPEC Definitions Kurt Seifried
• 2022/07/13 Re: CWE/CAPEC Definitions SJ Jazz
• 2022/07/13 CWE/CAPEC Definitions Alec J Summers
• 2022/07/05 RE: [Non-DoD Source] Is there a CWE for this? Steven M Christey
• 2022/07/05 Re: [Non-DoD Source] Is there a CWE for this? Kurt Seifried
• 2022/07/05 RE: [Non-DoD Source] Is there a CWE for this? Rob Wissmann
• 2022/07/04 Re: [Non-DoD Source] Is there a CWE for this? Kurt Seifried
• 2022/07/04 RE: [Non-DoD Source] Is there a CWE for this? Steven M Christey
• 2022/07/03 Re: [Non-DoD Source] Is there a CWE for this? Kurt Seifried
• 2022/07/03 RE: [Non-DoD Source] Is there a CWE for this? Hood, Jonathan W CTR USARMY DEVCOM AVMC (USA)
• 2022/07/03 Is there a CWE for this? Kurt Seifried
• 2022/07/01 Re: CWE-653 name Yacouba Bamba
• 2022/06/30 Re: CWE-653 name Yacouba Bamba
• 2022/06/30 Re: CWE-653 name David A. Wheeler
• 2022/06/30 Re: CWE-653 name Kurt Seifried
• 2022/06/29 CWE 2022 Top 25 Now Available Rushi B Purohit
• 2022/06/28 CWE-653 name Rob Wissmann
• 2022/06/02 Request for Feedback: Modifications to CWE-113 (HTTP Response Splitting) and CWE-444 (HTTP Response Smuggling) Steven M Christey
• 2022/06/01 RE: [EXTERNAL]: Re: [External] - Re: Bad loop construct Kevin Hale
• 2022/06/01 RE: [EXTERNAL]: Re: [External] - Re: Bad loop construct Mahidhara, Shravan
• 2022/06/01 Re: [External] - Re: Bad loop construct llianghan
• 2022/06/01 Re: [External] - Re: Bad loop construct Kevin Keen
• 2022/05/31 Re: Bad loop construct Kurt Seifried
• 2022/05/31 Re: Bad loop construct Steve Grubb
• 2022/05/25 Re: [External] - RE: Bad loop construct David A. Wheeler
• 2022/05/25 Re: [External] - RE: Bad loop construct Kevin Keen
• 2022/05/24 RE: Bad loop construct Steven M Christey
• 2022/05/24 Re: Bad loop construct Kurt Seifried
• 2022/05/24 Re: Bad loop construct Steve Grubb
• 2022/05/24 Re: Bad loop construct Kurt Seifried
• 2022/05/24 Bad loop construct Steve Grubb
• 2022/04/29 CWE 4.7 Now Available! Alec J Summers
• 2022/03/21 Recommendation: Deprecate CWE-365: Race Condition in Switch Steve Battista
• 2022/03/16 CWE/CAPEC REST API Working Group Alec J Summers
• 2022/01/24 Re: New CWE for DNS domain normalization/canonicalization with trailing dot Kurt Seifried
• 2022/01/24 RE: New CWE for DNS domain normalization/canonicalization with trailing dot Steven M Christey
• 2022/01/24 New CWE for DNS domain normalization/canonicalization with trailing dot Kurt Seifried
• 2022/01/17 Additional case for CWE-1007 - needs another CWE? Kurt Seifried
• 2021/12/06 Re: Time to retire CWE-262 and CWE-263 Jason Dryhurst-Smith
• 2021/12/06 Re: Time to retire CWE-262 and CWE-263 Jeffrey Walton
• 2021/12/06 Re: Time to retire CWE-262 and CWE-263 Kurt Seifried
• 2021/12/03 Re: Time to retire CWE-262 and CWE-263 G. Ann Campbell
• 2021/12/03 Re: Time to retire CWE-262 and CWE-263 Jeffrey Walton
• 2021/12/03 RE: Time to retire CWE-262 and CWE-263 Larry Shields
• 2021/12/03 RE: Time to retire CWE-262 and CWE-263 Chris Eng
• 2021/12/03 RE: Time to retire CWE-262 and CWE-263 Steven M Christey
• 2021/12/03 Time to retire CWE-262 and CWE-263 Kurt Seifried
• 2021/12/02 Re: CWE Clarification: CWE-1007 and Homoglphys in Source Code Wojtek Andrijew
• 2021/11/30 RE: CWE Clarification: CWE-1007 and Homoglphys in Source Code Steven M Christey
• 2021/11/30 CWE Clarification: CWE-1007 and Homoglphys in Source Code Hood, Jonathan W CTR USARMY DEVCOM AVMC (USA)
• 2021/09/24 [EXT] Re: Cross-configuration attacks Fredrick Omeniho
• 2021/09/24 Re: Cross-configuration attacks Kerry Crouse
• 2021/09/24 RE: Cross-configuration attacks Kanuparthi, Arun
• 2021/09/24 Re: Cross-configuration attacks Kurt Seifried
• 2021/09/24 RE: Cross-configuration attacks Paul.Wortman
• 2021/09/24 RE: Cross-configuration attacks Steven M Christey
• 2021/09/24 CWE 129 - Example 3 John Thomas
• 2021/09/24 Re: Cross-configuration attacks Steve Battista
• 2021/09/24 RE: Cross-configuration attacks John Thomas
• 2021/09/24 Re: Cross-configuration attacks SebastianGanson
• 2021/09/23 RE: Cross-configuration attacks Steven M Christey
• 2021/09/23 Re: Cross-configuration attacks Kurt Seifried
• 2021/09/23 Cross-configuration attacks Jeffrey Walton
• 2021/08/26 CWE-499 Java Questions (UNCLASSIFIED) Hood, Jonathan W CTR USARMY DEVCOM AVMC (USA)
• 2021/07/20 The 2021 CWE Top 25 is now available! Alec J Summers