Injection of arbitrary commands into user input.

Improper sanitization of SQL queries leading to injection attacks.

Unauthorized access to objects by manipulating references.

Improper validation of file paths allowing unauthorized access to directories.

Security issues during deserialization or parsing of data.

Use of weak or easily guessable passwords.

Flaws in the authentication process.

Vulnerabilities related to session handling and management.

Unauthorized elevation of user privileges.

Plain-text communication allows sniffing of sensitive data.

Weak encryption of sensitive data.

Generation of inadequate random numbers.

Improper validation of SSL/TLS Certificates.

Vulnerabilities related to mistakes or flaws in cryptographic algorithms, methods, or libraries.

Insufficient handling of unexpected errors or exceptions, potentially exposing sensitive information or causing system instability.

Outdated and deprecated components that introduce a known vulnerability.

Flaws in how the system manages user privileges and permissions, leading to unauthorized access.

Insecure configuration leading to vulnerabilities.

Injecting malicious code into web apps to compromise user data or actions.

Unauthorized execution of actions through forged requests.

Inclusion of remote files in web applications.

Inclusion of local files in web applications.

Improper handling of redirection URLs.

Tricking the server to make unauthorized requests.

Improper handling of dynamic libraries, potentially allowing malicious DLLs to be loaded and executed.

Occurs when a program writes more data to a buffer than it can hold, potentially overwriting adjacent memory.

Involves accessing memory locations outside the allocated boundaries, often leading to unintended consequences.

Refers to using memory after it has been deallocated, potentially causing unpredictable behavior or vulnerabilities.

Accidental exposure of sensitive information related to a system.

Mishandling and exposure of sensitive information related to a user.

Situations where the state of a resource changes between the time it is checked and the time it is used, leading to unexpected behavior.

Occur when multiple threads or processes concurrently access and modify shared data, potentially resulting in unpredictable outcomes.

Race conditions that specifically affect file operations, which may result in security vulnerabilities when handling files.

Failure to release file handles after use, potentially leading to resource exhaustion or security vulnerabilities.

Neglecting to close network socket handles, which can result in resource depletion or potential security issues.

Failing to deallocate memory properly, causing the program to consume excessive memory resources.

Depleting system resources, such as CPU, memory, or network connec- tions, due to poor resource management, potentially leading to system instability or denial of service.

Occur when integer variables exceed their maximum values, often leading to unexpected or insecure behavior.

Result from imprecise rounding of numerical values, potentially causing discrepancies in calculations.

Stem from the finite precision of floating-point numbers, potentially causing inaccuracies in mathematical operations.

Involve mistakes in numerical calculations, which can lead to unintended results or vulnerabilities in software.