OWASP Top 10 Vulnerabilities
The OWASP Top 10 web application security risks.
The data
0
- Rank
- A01
- Name
- Broken Access Control
- Description
- Restrictions on authenticated users are not properly enforced.
1
- Rank
- A02
- Name
- Cryptographic Failures
- Description
- Failures related to cryptography that expose sensitive data.
2
- Rank
- A03
- Name
- Injection
- Description
- Untrusted data is sent to an interpreter as part of a command or query.
3
- Rank
- A04
- Name
- Insecure Design
- Description
- Missing or ineffective security design controls.
4
- Rank
- A05
- Name
- Security Misconfiguration
- Description
- Insecure default configurations or incomplete ad-hoc configurations.
5
- Rank
- A06
- Name
- Vulnerable and Outdated Components
- Description
- Using components with known vulnerabilities.
6
- Rank
- A07
- Name
- Identification and Authentication Failures
- Description
- Weaknesses in identity and session management.
7
- Rank
- A08
- Name
- Software and Data Integrity Failures
- Description
- Assuming untrusted updates and data are valid.
8
- Rank
- A09
- Name
- Security Logging and Monitoring Failures
- Description
- Insufficient logging and monitoring to detect and respond to attacks.
9
- Rank
- A10
- Name
- Server-Side Request Forgery
- Description
- Forcing the server to make requests to unintended locations.
Fetch the same bytes
The static files are identical to what the API returns, but with no rate limit and no server round trip. Use the API when you want a query and a content type; use the files when you want to cache one document.
curl "https://yjtoon.com/api/dataset/common-vulnerabilities-owasp?format=toon"
const res = await fetch( "https://yjtoon.com/static-data/dataset/common-vulnerabilities-owasp.toon" ); const toon = await res.text();
Rate limit: 120 requests per minute per IP, no key and no signup. API reference →