Identifier system for publicly known vulnerabilities.

Attack involving unintended interpretation of input as commands.

Reusing previously captured valid data.

Protocol for accessing directory services.

Classification system for software weaknesses.

Injection targeting SQL queries.

Interception of communication between parties.

Service storing and providing identity-related information.

Standardized vulnerability severity scoring system.

Injection causing unintended operating-system commands.