| Comparison Using Wrong Factors | |
| Incorrect Implementation of Authentication Algorithm | |
| Exposed Dangerous Method or Function | |
| Improper Validation of Integrity Check Value | |
| Improperly Implemented Security Check for Standard | |
| HTTP Request Smuggling | |
| HTTP Request Smuggling | |
| HTTP Request Smuggling | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Out-of-bounds Write | |
| Improper Handling of Highly Compressed Data (Data Amplification) | |
| Allocation of Resources Without Limits or Throttling | |
| Improperly Implemented Security Check for Standard | |
| Exposure of Data Element to Wrong Session | |
| Information Exposure Through Caching | |
| Directory Traversal | |
| Insufficient Compartmentalization | |
| Directory Traversal | |
| Exposed Dangerous Method or Function | |
| Allocation of Resources Without Limits or Throttling | |
| Insufficient Compartmentalization | |
| Out-of-bounds Read | |
| Improper Validation of Integrity Check Value | |
| HTTP Request Smuggling | |
| XML Injection | |
| Improper Certificate Validation | |
| CRLF Injection | |
| Directory Traversal | |
| XML Injection | |
| Out-of-bounds Read | |
| Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') | |
| HTTP Request Smuggling | |
| XML External Entity (XXE) Injection | |
| Incorrect Implementation of Authentication Algorithm | |
| LDAP Injection | |
| Compiler Optimization Removal or Modification of Security-critical Code | |
| Improper Certificate Validation | |
| Improperly Implemented Security Check for Standard | |
| Improper Certificate Validation | |
| Comparison Using Wrong Factors | |
| Incorrect Implementation of Authentication Algorithm | |
| Exposed Dangerous Method or Function | |
| Improper Validation of Integrity Check Value | |
| Improperly Implemented Security Check for Standard | |
| HTTP Request Smuggling | |
| HTTP Request Smuggling | |
| HTTP Request Smuggling | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Out-of-bounds Write | |
| Improper Handling of Highly Compressed Data (Data Amplification) | |
| Allocation of Resources Without Limits or Throttling | |
| Improperly Implemented Security Check for Standard | |
| Exposure of Data Element to Wrong Session | |
| Information Exposure Through Caching | |
| Directory Traversal | |
| Insufficient Compartmentalization | |
| Directory Traversal | |
| Exposed Dangerous Method or Function | |
| Allocation of Resources Without Limits or Throttling | |
| Insufficient Compartmentalization | |
| Out-of-bounds Read | |
| Improper Validation of Integrity Check Value | |
| HTTP Request Smuggling | |
| XML Injection | |
| Improper Certificate Validation | |
| CRLF Injection | |
| Directory Traversal | |
| XML Injection | |
| Out-of-bounds Read | |
| Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') | |
| HTTP Request Smuggling | |
| XML External Entity (XXE) Injection | |
| Incorrect Implementation of Authentication Algorithm | |
| LDAP Injection | |
| Compiler Optimization Removal or Modification of Security-critical Code | |
| Improper Certificate Validation | |
| Improperly Implemented Security Check for Standard | |
| Improper Certificate Validation | |
| Allocation of Resources Without Limits or Throttling | |
| Uncaught Exception | |
| Improper Cross-boundary Removal of Sensitive Data | |
| Server-Side Request Forgery (SSRF) | |
| Allocation of Resources Without Limits or Throttling | |
| Uncaught Exception | |
| Improper Cross-boundary Removal of Sensitive Data | |
| Server-Side Request Forgery (SSRF) | |
| Improper Certificate Validation | |
| Improper Verification of Cryptographic Signature | |
| NULL Pointer Dereference | |
| Resource Exhaustion | |
| Inefficient Regular Expression Complexity | |
| Out-of-bounds Write | |
| Improper Certificate Validation | |
| Resource Exhaustion | |
| Integer Overflow or Wraparound | |
| Improper Certificate Validation | |
| Improper Verification of Cryptographic Signature | |
| NULL Pointer Dereference | |
| Resource Exhaustion | |
| Inefficient Regular Expression Complexity | |
| Out-of-bounds Write | |
| Improper Certificate Validation | |
| Resource Exhaustion | |
| Integer Overflow or Wraparound | |
| Improper Verification of Cryptographic Signature | |
| NULL Pointer Dereference | |
| Out-of-bounds Write | |
| Improper Certificate Validation | |
| Improper Certificate Validation | |
| Resource Exhaustion | |
| Inefficient Regular Expression Complexity | |
| Resource Exhaustion | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Out-of-bounds Write | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Buffer Underflow | |
| Expired Pointer Dereference | |
| Out-of-bounds Write | |
| Out-of-bounds Read | |
| Uncontrolled Recursion | |
| Out-of-bounds Read | |
| XML External Entity (XXE) Injection | |
| Cleartext Transmission of Sensitive Information | |
| Heap-based Buffer Overflow | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Buffer Underflow | |
| Expired Pointer Dereference | |
| Out-of-bounds Write | |
| Out-of-bounds Read | |
| Uncontrolled Recursion | |
| Out-of-bounds Read | |
| XML External Entity (XXE) Injection | |
| Cleartext Transmission of Sensitive Information | |
| Heap-based Buffer Overflow | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Cleartext Transmission of Sensitive Information | |
| Heap-based Buffer Overflow | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Uncontrolled Recursion | |
| Out-of-bounds Read | |
| XML External Entity (XXE) Injection | |
| Integer Overflow or Wraparound | |
| Expired Pointer Dereference | |
| Expired Pointer Dereference | |
| Buffer Underflow | |
| Out-of-bounds Write | |
| Out-of-bounds Read | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Out-of-bounds Read | |
| Buffer Overflow | |
| Improper Certificate Validation | |
| CRLF Injection | |
| Key Exchange without Entity Authentication | |
| Out-of-bounds Write | |
| Out-of-bounds Read | |
| Improper Certificate Validation | |
| CRLF Injection | |
| Key Exchange without Entity Authentication | |
| Out-of-bounds Write | |
| Out-of-bounds Read | |
| Improper Certificate Validation | |
| Out-of-bounds Read | |
| Out-of-bounds Write | |
| CRLF Injection | |
| Key Exchange without Entity Authentication | |
| NULL Pointer Dereference | |
| Out-of-bounds Read | |
| Out-of-bounds Read | |
