Common Weakness Enumeration (CWE), a classification of almost 800 types and
categories of weaknesses that lead to vulnerabilities such as buffer overflows, XSS,
insufficient randomness, and bad permissions. The theory is being used to explain
classification problems and train non-expert analysts about the vulnerability researcher