| Insufficient Session Expiration | |
| Improper Handling of Highly Compressed Data (Data Amplification) | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Direct Request ('Forced Browsing') | |
| Information Exposure | |
| Missing Authorization | |
| Information Exposure Through Log Files | |
| Information Exposure | |
| Information Exposure | |
| SQL Injection | |
| Execution with Unnecessary Privileges | |
| Allocation of Resources Without Limits or Throttling | |
| Information Exposure | |
| Cross-site Request Forgery (CSRF) | |
| Cross-site Request Forgery (CSRF) | |
| Cross-site Scripting (XSS) | |
| Improper Input Validation | |
| Improper Input Validation | |
| Covert Timing Channel | |
| Information Exposure | |
| Use After Free | |