3. CWE-120 : Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
4. CWE-22 : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
5. CWE-494 : Download of Code Without Integrity Check
6. CWE-829 : Inclusion of Functionality from Untrusted Control Sphere