This report highlights the top vulnerabilities relating to Web applications. There are various good associations that are providing information on securing Web applications such as OWASP, SANS, and others who have also listed top vulnerabilities in their research.
