| Improper Neutralization of Special Elements | |
| Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') | |
| Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') | |
| Out-of-bounds Write | |
| Allocation of Resources Without Limits or Throttling | |
| Out-of-bounds Read | |
| Insecure Temporary File | |
| Cleartext Transmission of Sensitive Information | |
| HTTP Request Smuggling | |
| Uncontrolled Search Path Element | |
| Cross-site Scripting (XSS) | |
| Authentication Bypass | |
| Cross-site Scripting (XSS) | |
| Improper Privilege Management | |
| Improper Restriction of Names for Files and Other Resources | |
| Creation of Temporary File in Directory with Incorrect Permissions | |
| Buffer Over-read | |
| Heap-based Buffer Overflow | |