| J2EE Misconfiguration: Data Transmission Without Encryption | 5 | 2 |
| J2EE Misconfiguration: Insufficient Session-ID Length | 6 | 1 |
| J2EE Misconfiguration: Missing Custom Error Page | 7 | 0 |
| J2EE Misconfiguration: Entity Bean Declared Remote | 8 | 0 |
| J2EE Misconfiguration: Weak Access Permissions for EJB Methods | 9 | 0 |
| ASP.NET Misconfiguration: Creating Debug Binary | 11 | 2 |
| ASP.NET Misconfiguration: Missing Custom Error Page | 12 | 1 |
| ASP.NET Misconfiguration: Password in Configuration File | 13 | 0 |
| Compiler Removal of Code to Clear Buffers | 14 | 0 |
| External Control of System or Configuration Setting | 15 | 52 |
| Improper Input Validation | 20 | 12473 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 22 | 8253 |
| Relative Path Traversal | 23 | 353 |
| Path Traversal: '../filedir' | 24 | 100 |
| Path Traversal: '/../filedir' | 25 | 13 |
| Path Traversal: '/dir/../filename' | 26 | 16 |
| Path Traversal: 'dir/../../filename' | 27 | 20 |
| Path Traversal: '..\filedir' | 28 | 2 |
| Path Traversal: '\..\filename' | 29 | 60 |
| Path Traversal: '\dir\..\filename' | 30 | 1 |
| Path Traversal: 'dir\..\..\filename' | 31 | 11 |
| Path Traversal: '...' (Triple Dot) | 32 | 2 |
| Path Traversal: '....' (Multiple Dot) | 33 | 0 |
| Path Traversal: '....//' | 34 | 1 |
| Path Traversal: '.../...//' | 35 | 147 |
| Absolute Path Traversal | 36 | 109 |
| Path Traversal: '/absolute/pathname/here' | 37 | 4 |
| Path Traversal: '\absolute\pathname\here' | 38 | 0 |
| Path Traversal: 'C:dirname' | 39 | 1 |
| Path Traversal: '\\UNC\share\name\' (Windows UNC Share) | 40 | 3 |
| Improper Resolution of Path Equivalence | 41 | 22 |
| Path Equivalence: 'filename.' (Trailing Dot) | 42 | 1 |
| Path Equivalence: 'filename....' (Multiple Trailing Dot) | 43 | 1 |
| Path Equivalence: 'file.name' (Internal Dot) | 44 | 1 |
| Path Equivalence: 'file...name' (Multiple Internal Dot) | 45 | 0 |
| Path Equivalence: 'filename ' (Trailing Space) | 46 | 0 |
| Path Equivalence: ' filename' (Leading Space) | 47 | 0 |
| Path Equivalence: 'file name' (Internal Whitespace) | 48 | 0 |
| Path Equivalence: 'filename/' (Trailing Slash) | 49 | 0 |
| Path Equivalence: '//multiple/leading/slash' | 50 | 1 |
| Path Equivalence: '/multiple//internal/slash' | 51 | 0 |
| Path Equivalence: '/multiple/trailing/slash//' | 52 | 0 |
| Path Equivalence: '\multiple\\internal\backslash' | 53 | 0 |
| Path Equivalence: 'filedir\' (Trailing Backslash) | 54 | 0 |
| Path Equivalence: '/./' (Single Dot Directory) | 55 | 0 |
| Path Equivalence: 'filedir*' (Wildcard) | 56 | 0 |
| Path Equivalence: 'fakedir/../realdir/filename' | 57 | 1 |
| Path Equivalence: Windows 8.3 Filename | 58 | 0 |
| Improper Link Resolution Before File Access ('Link Following') | 59 | 1419 |
| UNIX Symbolic Link (Symlink) Following | 61 | 117 |
| UNIX Hard Link | 62 | 3 |
| Windows Shortcut Following (.LNK) | 64 | 10 |
| Windows Hard Link | 65 | 6 |
| Improper Handling of File Names that Identify Virtual Resources | 66 | 1 |
| Improper Handling of Windows Device Names | 67 | 5 |
| Improper Handling of Windows ::DATA Alternate Data Stream | 69 | 2 |
| Improper Handling of Apple HFS+ Alternate Data Stream Path | 72 | 0 |
| External Control of File Name or Path | 73 | 350 |
| Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') | 74 | 4395 |
| Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) | 75 | 40 |
| Improper Neutralization of Equivalent Special Elements | 76 | 10 |
| Improper Neutralization of Special Elements used in a Command ('Command Injection') | 77 | 3607 |
| Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | 78 | 5273 |
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 79 | 42688 |
| Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 80 | 496 |
| Improper Neutralization of Script in an Error Message Web Page | 81 | 8 |
| Improper Neutralization of Script in Attributes of IMG Tags in a Web Page | 82 | 0 |
| Improper Neutralization of Script in Attributes in a Web Page | 83 | 18 |
| Improper Neutralization of Encoded URI Schemes in a Web Page | 84 | 17 |
| Doubled Character XSS Manipulations | 85 | 2 |
| Improper Neutralization of Invalid Characters in Identifiers in Web Pages | 86 | 10 |
| Improper Neutralization of Alternate XSS Syntax | 87 | 33 |
| Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') | 88 | 316 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 89 | 18065 |
| Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') | 90 | 47 |
| XML Injection (aka Blind XPath Injection) | 91 | 121 |
| Improper Neutralization of CRLF Sequences ('CRLF Injection') | 93 | 104 |
| Improper Control of Generation of Code ('Code Injection') | 94 | 5988 |
| Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') | 95 | 111 |
| Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') | 96 | 26 |
| Improper Neutralization of Server-Side Includes (SSI) Within a Web Page | 97 | 7 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 98 | 833 |
| Improper Control of Resource Identifiers ('Resource Injection') | 99 | 55 |
| Struts: Duplicate Validation Forms | 102 | 1 |
| Struts: Incomplete validate() Method Definition | 103 | 0 |
| Struts: Form Bean Does Not Extend Validation Class | 104 | 0 |
| Struts: Form Field Without Validator | 105 | 0 |
| Struts: Plug-in Framework not in Use | 106 | 0 |
| Struts: Unused Validation Form | 107 | 0 |
| Struts: Unvalidated Action Form | 108 | 1 |
| Struts: Validator Turned Off | 109 | 0 |
| Struts: Validator Without Form Field | 110 | 0 |
| Direct Use of Unsafe JNI | 111 | 2 |
| Missing XML Validation | 112 | 10 |
| Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') | 113 | 71 |
| Process Control | 114 | 24 |
| Misinterpretation of Input | 115 | 36 |
| Improper Encoding or Escaping of Output | 116 | 391 |
| Improper Output Neutralization for Logs | 117 | 117 |
| Incorrect Access of Indexable Resource ('Range Error') | 118 | 23 |