By year
23
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Latest high and critical flaws
- CVE-2023-49641 Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · May 12, 2025
- CVE-2023-50867 Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Jan 4, 2024
- CVE-2023-50866 Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Jan 4, 2024
- CVE-2023-50865 Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Jan 4, 2024
- CVE-2023-50864 Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Jan 4, 2024
- CVE-2023-50863 Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Jan 4, 2024
- CVE-2023-50862 Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Jan 4, 2024
- CVE-2023-50760 Online Notice Board System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'f' parameter of user/update_profile_pic.php page, allowing an autHigh 8.8 · Jan 4, 2024
- CVE-2023-50753 Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Jan 4, 2024
- CVE-2023-50752 Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Jan 4, 2024
- CVE-2023-50743 Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Jan 4, 2024
- CVE-2023-49666 Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Jan 4, 2024
- CVE-2023-49665 Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Jan 4, 2024
- CVE-2023-49658 Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Jan 4, 2024
- CVE-2023-49639 Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Jan 4, 2024
- CVE-2023-49633 Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Jan 4, 2024
- CVE-2023-49625 Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Jan 4, 2024
- CVE-2023-49624 Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Jan 4, 2024
- CVE-2023-49622 Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Jan 4, 2024
- CVE-2023-49689 Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Dec 21, 2023
- CVE-2023-49688 Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Dec 21, 2023
- CVE-2023-49681 Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Dec 21, 2023
- CVE-2023-49677 Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Critical 9.8 · Dec 21, 2023
- CVE-2023-5011 Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities.High 8.8 · Dec 20, 2023
- CVE-2023-5010 Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities.High 8.8 · Dec 20, 2023
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.