| Reachable Assertion | |
| Out-of-bounds Read | |
| NULL Pointer Dereference | |
| Incorrect Conversion between Numeric Types | |
| Buffer Overflow | |
| HTTP Request Smuggling | |
| Improper Certificate Validation | |
| Integer Overflow or Wraparound | |
| Insufficient Comparison | |
| Reachable Assertion | |
| Improper Input Validation | |
| Cross-site Scripting (XSS) | |
| Cross-site Request Forgery (CSRF) | |
| Out-of-bounds Write | |
| Information Exposure | |
| Out-of-bounds Write | |
| Incorrect Default Permissions | |
| Out-of-bounds Write | |
| Out-of-bounds Write | |
| CVE-2019-12523 | |
| HTTP Request Smuggling | |
| Cross-site Scripting (XSS) | |
| CVE-2019-12854 | |
| Out-of-bounds Read | |
| Incorrect Calculation of Buffer Size | |
| Exposure of Resource to Wrong Sphere | |
| CVE-2019-12528 | |
| Improper Input Validation | |
| Improper Input Validation | |
| Arbitrary Code Injection | |
| Integer Overflow or Wraparound | |
| CVE-2019-12528 | |
| Off-by-one Error | |
| Out-of-bounds Write | |
| Improper Synchronization | |
| HTTP Request Smuggling | |
| HTTP Request Smuggling | |
| Insufficient Comparison | |
| Improper Locking | |
| Improper Encoding or Escaping of Output | |
| Improper Encoding or Escaping of Output | |
| Memory Leak | |
| Memory Leak | |
| Improper Input Validation | |