| Eval Injection | |
| Missing Authentication for Critical Function | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Incorrect Authorization | |
| Cross-site Scripting (XSS) | |
| Use of Incorrectly-Resolved Name or Reference | |
| Incorrect Privilege Assignment | |
| Eval Injection | |
| Missing Authentication for Critical Function | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Incorrect Authorization | |
| Cross-site Scripting (XSS) | |
| Use of Incorrectly-Resolved Name or Reference | |
| Incorrect Privilege Assignment | |
| Eval Injection | |
| Missing Authentication for Critical Function | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Incorrect Authorization | |
| Cross-site Scripting (XSS) | |
| Use of Incorrectly-Resolved Name or Reference | |
| Incorrect Privilege Assignment | |
| Eval Injection | |
| Missing Authentication for Critical Function | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Incorrect Authorization | |
| Cross-site Scripting (XSS) | |
| Use of Incorrectly-Resolved Name or Reference | |
| Incorrect Privilege Assignment | |
| Eval Injection | |
| Missing Authentication for Critical Function | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Incorrect Authorization | |
| Cross-site Scripting (XSS) | |
| Use of Incorrectly-Resolved Name or Reference | |
| Incorrect Privilege Assignment | |
| Eval Injection | |
| Missing Authentication for Critical Function | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Incorrect Authorization | |
| Cross-site Scripting (XSS) | |
| Use of Incorrectly-Resolved Name or Reference | |
| Incorrect Privilege Assignment | |
| Eval Injection | |
| Missing Authentication for Critical Function | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Incorrect Authorization | |
| Cross-site Scripting (XSS) | |
| Use of Incorrectly-Resolved Name or Reference | |
| Incorrect Privilege Assignment | |
| Improperly Controlled Modification of Dynamically-Determined Object Attributes | |
| Out-of-bounds Write | |
| Allocation of Resources Without Limits or Throttling | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| Open Redirect | |
| Cross-site Scripting (XSS) | |
| Improperly Controlled Modification of Dynamically-Determined Object Attributes | |
| Cross-site Request Forgery (CSRF) | |
| Open Redirect | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Exposure of System Data to an Unauthorized Control Sphere | |
| Exposure of System Data to an Unauthorized Control Sphere | |
| Exposure of System Data to an Unauthorized Control Sphere | |
| Exposure of System Data to an Unauthorized Control Sphere | |
| Use of Password Hash With Insufficient Computational Effort | |
| Incorrect Authorization | |
| Use of Password Hash With Insufficient Computational Effort | |
| Incorrect Authorization | |
| Use of Password Hash With Insufficient Computational Effort | |
| Incorrect Authorization | |
| Use of Password Hash With Insufficient Computational Effort | |
| Incorrect Authorization | |
| Improper Input Validation | |
| Improper Input Validation | |
| Improper Input Validation | |
| Improper Input Validation | |
| Cross-site Request Forgery (CSRF) | |
| Cross-site Request Forgery (CSRF) | |
| Cross-site Request Forgery (CSRF) | |
| Cross-site Request Forgery (CSRF) | |
| Improper Input Validation | |
| Improper Input Validation | |
| Cross-site Request Forgery (CSRF) | |
| Cross-site Request Forgery (CSRF) | |
| Use of Password Hash With Insufficient Computational Effort | |
| Incorrect Authorization | |
| Use of Password Hash With Insufficient Computational Effort | |
| Incorrect Authorization | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Exposure of System Data to an Unauthorized Control Sphere | |
| Exposure of System Data to an Unauthorized Control Sphere | |
| Improper Input Validation | |
| Use of Password Hash With Insufficient Computational Effort | |
| Incorrect Authorization | |
| Cross-site Request Forgery (CSRF) | |
| Use of Password Hash With Insufficient Computational Effort | |
| Incorrect Authorization | |
| Use of Password Hash With Insufficient Computational Effort | |
| Incorrect Authorization | |
| Use of Password Hash With Insufficient Computational Effort | |
| Incorrect Authorization | |
| Use of Password Hash With Insufficient Computational Effort | |
| Use of Password Hash With Insufficient Computational Effort | |
| Use of Password Hash With Insufficient Computational Effort | |
| Incorrect Authorization | |
| Improper Input Validation | |
| Cross-site Request Forgery (CSRF) | |
| Cross-site Request Forgery (CSRF) | |
| Cross-site Request Forgery (CSRF) | |
| Cross-site Request Forgery (CSRF) | |
| Cross-site Request Forgery (CSRF) | |
| Cross-site Request Forgery (CSRF) | |