| OS Command Injection | |
| Incorrect Authorization | |
| Resource Exhaustion | |
| Excessive Platform Resource Consumption within a Loop | |
| Unchecked Input for Loop Condition | |
| Improperly Controlled Modification of Dynamically-Determined Object Attributes | |
| Resource Exhaustion | |
| OS Command Injection | |
| Incorrect Authorization | |
| Inefficient Regular Expression Complexity | |
| Improper Handling of Highly Compressed Data (Data Amplification) | |
| Origin Validation Error | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Validation of Specified Type of Input | |
| Deserialization of Untrusted Data | |
| Improperly Controlled Modification of Dynamically-Determined Object Attributes | |
| Server-Side Request Forgery (SSRF) | |
| Information Exposure | |
| Exposure of System Data to an Unauthorized Control Sphere | |
| Server-Side Request Forgery (SSRF) | |
| Authentication Bypass | |
| Incorrect Authorization | |
| Missing Release of Resource after Effective Lifetime | |
| Incomplete Blacklist | |
| Deserialization of Untrusted Data | |
| Incomplete Blacklist | |
| Deserialization of Untrusted Data | |
| Deserialization of Untrusted Data | |
| Improperly Controlled Modification of Dynamically-Determined Object Attributes | |
| Directory Traversal | |
| Improper Resource Shutdown or Release | |
| Session Fixation | |