| CRLF Injection | |
| Link Following | |
| Link Following | |
| Link Following | |
| Improper Validation of Specified Quantity in Input | |
| Improper Validation of Array Index | |
| Incorrect Authorization | |
| Link Following | |
| Reliance on Untrusted Inputs in a Security Decision | |
| Integer Overflow or Wraparound | |
| Link Following | |
| Incorrect Calculation of Buffer Size | |
| Symlink Following | |
| Not Failing Securely ('Failing Open') | |
| Algorithmic Complexity | |
| Out-of-bounds Write | |
| Improper Certificate Validation | |
| Incorrect Authorization | |
| Link Following | |
| Allocation of Resources Without Limits or Throttling | |
| Out-of-bounds Write | |
| Use of Uninitialized Resource | |
| Authentication Bypass | |
| Link Following | |
| OS Command Injection | |
| Link Following | |
| Link Following | |
| Incorrect Type Conversion or Cast | |
| Link Following | |
| Allocation of Resources Without Limits or Throttling | |
| Link Following | |
| Out-of-bounds Write | |
| Directory Traversal | |
| Out-of-bounds Read | |
| Missing Authorization | |
| Authentication Bypass | |
| Improper Input Validation | |
| Out-of-bounds Read | |
| CVE-2017-17434 | |
| Use of Uninitialized Resource | |
| Time-of-check Time-of-use (TOCTOU) | |
| Detection of Error Condition Without Action | |
| Out-of-bounds Read | |
| Directory Traversal | |
| Race Condition | |
| Directory Traversal | |
| Out-of-bounds Write | |
| Link Following | |
| Off-by-one Error | |
| Improper Handling of Length Parameter Inconsistency | |
| CVE-2025-10158 | |
