CWE

CWE names the kind of weakness. CVE names one specific instance of it in one product.

SQL injection is a CWE. A particular SQL injection flaw in a particular version of a particular application is a CVE. Keeping them apart matters when reading reports, because a list of CVEs tells you what to patch and a list of CWEs tells you what your development process keeps producing.