Vulnerability types
Every vulnerability sorted by what kind of flaw it is, from SQL injection to memory corruption.
- Cross-site scripting54,178
- Memory corruption53,628
- Denial of service36,532
- information_disclosure35,428
- Missing authorization28,513
- SQL injection23,565
- Path traversal19,236
- privilege_escalation16,160
- other15,119
- Use after free14,674
- Command injection12,719
- Authentication bypass12,705
- Code injection12,068
- security_feature_bypass11,539
- null_dereference10,794
- csrf9,403
- integer_overflow7,706
- race_condition6,395
- file_upload5,611
- weak_cryptography5,145
- Server-side request forgery4,428
- Unsafe deserialization3,875
- hardcoded_credentials3,850
- open_redirect2,174
- xxe1,711
- business_logic1,404
- misconfiguration1,377
- supply_chain1,280
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.