errors, such as: Code injection Cross-site scripting in web applications Directory traversal E-mail injection Format string attacks HTTP header injection HTTP response splitting SQL injection Privilege-confusion bugs, such as: Clickjacking Cross-site request forgery in web applications FTP bounce attack Privilege escalation Race conditions, such as: Symlink races Time-of-check-to-time-of-use bugs Side-channel attack Timing attack User interface failures, such as: Blaming the Victim prompting a user to make a security decision without giving the user enough information to answer it Race Conditions Warning fatigue or user conditioning. Some set of coding guidelines have been developed and a large number of static code analyzers has been used to verify that the code follows the guidelines. See also Browser security Computer emergency response team Information security Internet security Mobile security Vulnerability scanner Coordinated vulnerability disclosure Full disclosure References External links Security advisories links from the Open Directory http://dmoz-odp.org/Computers/Security/Advisories_and_Patches/ Vulnerability Hacking (computer security) Security compliance Software testing