| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Unprotected Alternate Channel | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Inefficient Regular Expression Complexity | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Incomplete Cleanup | |
| LDAP Injection | |
| Cross-site Scripting (XSS) | |
| Authentication Bypass | |
| Cross-site Scripting (XSS) | |
| Incomplete Blacklist | |
| Allocation of Resources Without Limits or Throttling | |
| Uncaught Exception | |
| Comparison Using Wrong Factors | |
| Direct Request ('Forced Browsing') | |
| Cross-site Scripting (XSS) | |
| Inefficient Regular Expression Complexity | |
| Improper Certificate Validation | |
| Incorrect Behavior Order: Early Amplification | |
| Allocation of Resources Without Limits or Throttling | |
| Information Exposure | |
| Cleartext Storage of Sensitive Information | |
| Insufficient Session Expiration | |
| Missing Authorization | |
| Incorrect Privilege Assignment | |
| Authorization Bypass Through User-Controlled Key | |
| Missing Authorization | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Cross-site Scripting (XSS) | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Missing Authorization | |
| CVE-2026-67405 | |
| Directory Traversal | |
| Overly Permissive Cross-domain Whitelist | |
| Plaintext Storage of a Password | |
| Missing Authorization | |
| Authorization Bypass Through User-Controlled Key | |
| Inefficient Regular Expression Complexity | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Information Exposure | |
| Privilege Defined With Unsafe Actions | |
| Improper Handling of Highly Compressed Data (Data Amplification) | |
| Inefficient Regular Expression Complexity | |
| Insufficient Granularity of Access Control | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Unchecked Input for Loop Condition | |
| Cross-site Scripting (XSS) | |
| Inappropriate Encoding for Output Context | |
| Improperly Implemented Security Check for Standard | |
| Direct Request ('Forced Browsing') | |
| Improper Neutralization of Equivalent Special Elements | |
| Allocation of Resources Without Limits or Throttling | |
| Cross-site Scripting (XSS) | |
| Use of Obsolete Functions | |
| Insufficient Granularity of Access Control | |
| Cross-site Scripting (XSS) | |
| Incomplete Cleanup | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Handling of Insufficient Permissions or Privileges | |
| Excessive Platform Resource Consumption within a Loop | |
| Allocation of Resources Without Limits or Throttling | |
| Executable Regular Expression Error | |