| ID |
Name |
CVE |
| CWE-119 |
Improper Restriction of Operations within the Bounds of a Memory Buffer |
|
|
10859 |
| CWE-79 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
|
|
9040 |
| CWE-264 |
Permissions, Privileges, and Access Controls |
|
|
6680 |
| CWE-20 |
Improper Input Validation |
|
|
5794 |
| CWE-200 |
Information Exposure |
|
|
5180 |
| CWE-89 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
|
|
4967 |
| CWE-399 |
Resource Management Errors |
|
|
3380 |
| CWE-310 |
Cryptographic Issues |
|
|
2426 |
| CWE-284 |
Improper Access Control |
|
|
2378 |
| CWE-22 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
|
|
2329 |
| CWE-94 |
Improper Control of Generation of Code ('Code Injection') |
|
|
2226 |
| CWE-352 |
Cross-Site Request Forgery (CSRF) |
|
|
1674 |
| CWE-189 |
Numeric Errors |
|
|
1416 |
| CWE-287 |
Improper Authentication |
|
|
1301 |
| CWE-255 |
Credentials Management |
|
|
846 |
| CWE-125 |
Out-of-bounds Read |
|
|
666 |
| CWE-254 |
Security Features |
|
|
608 |
| CWE-362 |
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') |
|
|
564 |
| CWE-476 |
NULL Pointer Dereference |
|
|
562 |
| CWE-416 |
Use After Free |
|
|
552 |
