| Off-by-one Error | |
| Improper Check for Certificate Revocation | |
| Improper Authentication | |
| Improper Authentication | |
| Information Exposure | |
| Allocation of Resources Without Limits or Throttling | |
| Arbitrary Code Injection | |
| Memory Leak | |
| HTTP Request Smuggling | |
| Cross-site Scripting (XSS) | |
| Deserialization of Untrusted Data | |
| SQL Injection | |
| Deserialization of Untrusted Data | |
| Improper Input Validation | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Deserialization of Untrusted Data | |
| Improper Access Control | |
| Improper Input Validation | |
| Improper Access Control | |
| Improper Access Control | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Out-of-bounds Read | |
| Information Exposure | |
| Improper Input Validation | |
| Insufficient Verification of Data Authenticity | |
| Improper Input Validation | |
| Incorrect Privilege Assignment | |
| Exposure of Resource to Wrong Sphere | |
| Error Handling | |
| HTTP Request Smuggling | |
| Resource Exhaustion | |
| Improper Input Validation | |
| Resource Exhaustion | |
| Improper Access Control | |
| HTTP Request Smuggling | |
| Deserialization of Untrusted Data | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Input Validation | |
| Improper Access Control | |
| Resource Injection | |
| Deserialization of Untrusted Data | |
| Information Exposure | |
| Covert Timing Channel | |
| Improper Access Control | |
| Security Features | |
| Information Exposure | |
| Security Features | |
| Deserialization of Untrusted Data | |
| Access Restriction Bypass | |
| Improper Authorization | |
| Resource Exhaustion | |
| Session Fixation | |
| Improper Access Control | |
| Cross-site Scripting (XSS) | |