Labels

Improper Authentication - Generic

Authentication Bypass Using an Alternate Path or Channel

Improper Certificate Validation

Man-in-the-Middle

Missing Authentication for Critical Function

Brute Force

Cleartext Storage of Sensitive Information

Key Exchange without Entity Authentication

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Insufficient Verification of Data Authenticity

Cross-Site Request Forgery (CSRF)

Privacy Violation

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Time-of-check Time-of-use (TOCTOU) Race Condition

Denial of Service

Improper Handling of Highly Compressed Data (Data Amplification)

Forced Browsing

Unrestricted Upload of File with Dangerous Type

HTTP Request Smuggling

Download of Code Without Integrity Check