Open Redirect
Content is hidden
Cross-site scripting XSS
Improper Access Control
DoS
Server Security Misconfiguration
Business Logic Errors