| ID |
Name |
CVE |
| CWE-119 |
Improper Restriction of Operations within the Bounds of a Memory Buffer |
|
|
10460 |
| CWE-79 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
|
|
8790 |
| CWE-264 |
Permissions, Privileges, and Access Controls |
|
|
6507 |
| CWE-20 |
Improper Input Validation |
|
|
5606 |
| CWE-200 |
Information Exposure |
|
|
4939 |
| CWE-89 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
|
|
4925 |
| CWE-399 |
Resource Management Errors |
|
|
3315 |
| CWE-310 |
Cryptographic Issues |
|
|
2404 |
| CWE-22 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
|
|
2284 |
| CWE-94 |
Improper Control of Generation of Code ('Code Injection') |
|
|
2200 |
| CWE-284 |
Improper Access Control |
|
|
2186 |
| CWE-352 |
Cross-Site Request Forgery (CSRF) |
|
|
1617 |
| CWE-189 |
Numeric Errors |
|
|
1413 |
| CWE-287 |
Improper Authentication |
|
|
1261 |
| CWE-255 |
Credentials Management |
|
|
807 |
| CWE-125 |
Out-of-bounds Read |
|
|
623 |
| CWE-254 |
Security Features |
|
|
571 |
| CWE-362 |
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') |
|
|
537 |
| CWE-476 |
NULL Pointer Dereference |
|
|
491 |
| CWE-416 |
Use After Free |
|
|
487 |
