CWE

It is a catalog of software weakness types that lead to vulnerabilities, used in secure design and code review.