The Open Web Application Security Project (OWASP) defines the following categories of vulnerabilities [1]:

• API Abuse
• Authentication Vulnerability
• Authorization Vulnerability
• Availability Vulnerability
• Code Permission Vulnerability
• Code Quality Vulnerability
• Configuration Vulnerability
• Cryptographic Vulnerability
• Encoding Vulnerability
• Environmental Vulnerability
• Error Handling Vulnerability
• General Logic Error Vulnerability
• Input Validation Vulnerability
• Logging and Auditing Vulnerability
• Password Management Vulnerability
• Path Vulnerability
• Sensitive Data Protection Vulnerability
• Session Management Vulnerability
• Unsafe Mobile Code
• Use of Dangerous API

References