| Detection of Error Condition Without Action | |
| Insufficient Logging | |
| Reliance on Untrusted Inputs in a Security Decision | |
| Improper Resource Shutdown or Release | |
| Directory Traversal | |
| Symbolic Name not Mapping to Correct Object | |
| Time-of-check Time-of-use (TOCTOU) | |
| Off-by-one Error | |
| Insufficient Session Expiration | |
| Authentication Bypass | |
| Incorrect Behavior Order: Authorization Before Parsing and Canonicalization | |
| HTTP Request Smuggling | |
| Incorrect Behavior Order: Authorization Before Parsing and Canonicalization | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Incorrect Implementation of Authentication Algorithm | |
| Incorrect Synchronization | |
| HTTP Request Smuggling | |
| Authentication Bypass by Primary Weakness | |
| Improper Handling of Length Parameter Inconsistency | |
| Improper Certificate Validation | |
| HTTP Request Smuggling | |
| Incomplete Cleanup | |
| Authentication Bypass | |
| Missing Release of Resource after Effective Lifetime | |
| Allocation of Resources Without Limits or Throttling | |
| Excessive Platform Resource Consumption within a Loop | |
| Allocation of Resources Without Limits or Throttling | |
| Authentication Bypass by Primary Weakness | |