community to collaboratively expand and refine into a dictionary of softwarespecific security vulnerability definitions. In addition to PLOVER, CWE derives
vulnerability categories from software and application security taxonomies
such as the Seven Pernicious Kingdoms and the OWASP Top Ten.
Software Security Assurance State-of-the-Art Report (SOAR) 37