| Missing Authentication for Critical Function | |
| Open Redirect | |
| Cross-site Scripting (XSS) | |
| NULL Pointer Dereference | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Use of Incorrectly-Resolved Name or Reference | |
| Incorrect Privilege Assignment | |
| Incorrect Authorization | |
| Out-of-bounds Write | |
| Incorrect Authorization | |
| Improper Input Validation | |
| Improper Input Validation | |
| Improper Authorization | |
| Improper Certificate Validation | |
| Man-in-the-Middle (MitM) | |
| Man-in-the-Middle (MitM) | |
| Man-in-the-Middle (MitM) | |
| Authentication Bypass | |
| Man-in-the-Middle (MitM) | |
| CVE-2015-5370 | |
| Man-in-the-Middle (MitM) | |
| Incorrect Calculation of Buffer Size | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| Information Exposure | |
| Insufficient Session Expiration | |
| Cross-site Scripting (XSS) | |