I'm reading up on the OWASP Top 10 for helping me defend my web app against common "app sec"-type attacks (SQL Injection, CSRF, etc.). And in a recent questionrecent question I was prompted to not only use OWASP Top 10 for appsec vulns, but to also list all of the applications and tools I am using as part of my architecture and cross-check them against the CVE Database, which I will do.
But then there's other types of attacks: attacks that are not appsec related (not on OWASP Top 10) nor vendor-specific (and thus in the CVE DB). Attacks like DoS/DDoS. Where would these fit in?
I'm looking to find a list of these "other" types of attacks; attacks my software/servers/networks might be vulnerable to but aren't listed by OWASP or CVE. I'm sure there's too many to enumerate, but somewhere, someone has to have them aggregated into a list...thanks in advance.