| Origin Validation Error | |
| Inclusion of Functionality from Untrusted Control Sphere | |
| Allocation of Resources Without Limits or Throttling | |
| Out-of-bounds Write | |
| Link Following | |
| Cross-site Scripting (XSS) | |
| Link Following | |
| Improperly Controlled Sequential Memory Allocation | |
| HTTP Request Smuggling | |
| Algorithmic Complexity | |
| HTTP Request Smuggling | |
| Deadlock | |
| Race Condition | |
| Allocation of Resources Without Limits or Throttling | |
| Authentication Bypass | |
| Weak Password Recovery Mechanism for Forgotten Password | |
| Allocation of Resources Without Limits or Throttling | |
| Algorithmic Complexity | |
| Information Exposure | |
| Uncontrolled Recursion | |
| Arbitrary Code Injection | |
| Origin Validation Error | |
| Allocation of Resources Without Limits or Throttling | |
| Unchecked Return Value | |
| Unchecked Input for Loop Condition | |
| Improper Cross-boundary Removal of Sensitive Data | |
| HTTP Request Smuggling | |
| Access of Resource Using Incompatible Type ('Type Confusion') | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Encoding or Escaping of Output | |
| Allocation of Resources Without Limits or Throttling | |
| Arbitrary Code Injection | |
| Deserialization of Untrusted Data | |
| Allocation of Resources Without Limits or Throttling | |
| Deserialization of Untrusted Data | |
| Authentication Bypass | |
| Stack-based Buffer Overflow | |
| Link Following | |
| Improper Validation of Specified Type of Input | |
| Insufficient Verification of Data Authenticity | |
| LDAP Injection | |
| Allocation of Resources Without Limits or Throttling | |
| Incorrect Implementation of Authentication Algorithm | |
| Resource Exhaustion | |
| Link Following | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |