CWE™ is a list of common software and hardware security weaknesses which serves as a common language for security efforts.