CWE (Common Weakness Enumeration)

A community-driven catalog of software and hardware weakness types. Each CWE describes a vulnerability pattern (e.g., CWE-79 for XSS, CWE-89 for SQL injection). It enables standardized classification and comparison of security flaws.