| ID |
Name |
CVE |
| CWE-119 |
Improper Restriction of Operations within the Bounds of a Memory Buffer |
|
|
12184 |
| CWE-79 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
|
|
10676 |
| CWE-264 |
Permissions, Privileges, and Access Controls |
|
|
7325 |
| CWE-20 |
Improper Input Validation |
|
|
6901 |
| CWE-200 |
Information Exposure |
|
|
6170 |
| CWE-89 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
|
|
5341 |
| CWE-399 |
Resource Management Errors |
|
|
3585 |
| CWE-284 |
Improper Access Control |
|
|
3321 |
| CWE-22 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
|
|
2807 |
| CWE-310 |
Cryptographic Issues |
|
|
2673 |
| CWE-94 |
Improper Control of Generation of Code ('Code Injection') |
|
|
2375 |
| CWE-352 |
Cross-Site Request Forgery (CSRF) |
|
|
2052 |
| CWE-287 |
Improper Authentication |
|
|
1513 |
| CWE-189 |
Numeric Errors |
|
|
1418 |
| CWE-125 |
Out-of-bounds Read |
|
|
1307 |
| CWE-255 |
Credentials Management |
|
|
1153 |
| CWE-190 |
Integer Overflow or Wraparound |
|
|
1003 |
| CWE-416 |
Use After Free |
|
|
996 |
| CWE-254 |
Security Features |
|
|
846 |
| CWE-476 |
NULL Pointer Dereference |
|
|
801 |
