OWASP Top 10
The OWASP Top 10 summarizes critical classes of web application risk. It is a prioritization and awareness resource, not a complete security standard or a substitute for threat modeling and secure engineering.
OWASP Top 10
OWASP's awareness document for the most critical web application security risks.