| ID |
Name |
CVE |
| CWE-119 |
Improper Restriction of Operations within the Bounds of a Memory Buffer |
|
|
11837 |
| CWE-79 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
|
|
10254 |
| CWE-264 |
Permissions, Privileges, and Access Controls |
|
|
7089 |
| CWE-20 |
Improper Input Validation |
|
|
6524 |
| CWE-200 |
Information Exposure |
|
|
5902 |
| CWE-89 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
|
|
5257 |
| CWE-399 |
Resource Management Errors |
|
|
3527 |
| CWE-284 |
Improper Access Control |
|
|
3025 |
| CWE-22 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
|
|
2689 |
| CWE-310 |
Cryptographic Issues |
|
|
2652 |
| CWE-94 |
Improper Control of Generation of Code ('Code Injection') |
|
|
2328 |
| CWE-352 |
Cross-Site Request Forgery (CSRF) |
|
|
1935 |
| CWE-287 |
Improper Authentication |
|
|
1439 |
| CWE-189 |
Numeric Errors |
|
|
1418 |
| CWE-125 |
Out-of-bounds Read |
|
|
1086 |
| CWE-255 |
Credentials Management |
|
|
1010 |
| CWE-190 |
Integer Overflow or Wraparound |
|
|
958 |
| CWE-416 |
Use After Free |
|
|
839 |
| CWE-254 |
Security Features |
|
|
772 |
| CWE-476 |
NULL Pointer Dereference |
|
|
734 |
