| Dead Code | |
| Incorrect Calculation | |
| Protection Mechanism Failure | |
| Time-of-check Time-of-use (TOCTOU) Race Condition | |
| Omitted Break Statement in Switch | |
| Out-of-bounds Write | |
| Heap-based Buffer Overflow | |
| SQL Injection | |
| Insecure Randomness | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Insertion of Sensitive Information into Log File | |
| Stack-based Buffer Overflow | |
| Command Injection | |
| Out-of-bounds Read | |
| Off-by-one Error | |
| Integer Underflow (Wrap or Wraparound) | |
| Timing Attack | |
| Improper Authentication | |
| Out-of-bounds Write | |
| Race Condition | |
| LDAP Injection | |
| Stack-based Buffer Overflow | |
| Out-of-bounds Read | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Check for Dropped Privileges | |
| Command Injection | |
| Integer Underflow (Wrap or Wraparound) | |
| Command Injection | |
| Directory Traversal | |
| Use of Externally-Controlled Format String | |
| Out-of-bounds Read | |
| Incorrect Calculation | |
| Symlink Attack | |
| Access of Resource Using Incompatible Type ('Type Confusion') | |
| Buffer Overflow | |
| Arbitrary Code Execution | |
| Arbitrary Code Execution | |
| Out-of-bounds Read | |
| Stack-based Buffer Overflow | |
| Out-of-bounds Read | |
| Arbitrary Code Execution | |
| Heap-based Buffer Overflow | |
| Out-of-bounds Write | |