By year
20
21
22
23
24
25
Bars are flaws published each year; the red part is the share attackers have used.
Latest high and critical flaws
- CVE-2024-48245 Vehicle Management System 1.0 is vulnerable to SQL Injection.High 7.2 · Jan 7, 2025
- CVE-2024-33994 Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0.High 7.1 · Aug 6, 2024
- CVE-2024-33993 Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0.High 7.1 · Aug 6, 2024
- CVE-2024-33992 Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0.High 7.1 · Aug 6, 2024
- CVE-2024-33991 Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0.High 7.1 · Aug 6, 2024
- CVE-2024-33990 Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0.High 7.1 · Aug 6, 2024
- CVE-2024-33989 Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0.High 7.1 · Aug 6, 2024
- CVE-2024-33988 Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0.High 7.1 · Aug 6, 2024
- CVE-2024-33987 Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0.High 7.1 · Aug 6, 2024
- CVE-2024-33986 Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0.High 7.1 · Aug 6, 2024
- CVE-2024-33985 Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0.High 7.1 · Aug 6, 2024
- CVE-2024-33984 Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0.High 7.1 · Aug 6, 2024
- CVE-2024-33983 Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0.High 7.1 · Aug 6, 2024
- CVE-2024-33982 Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0.High 7.1 · Aug 6, 2024
- CVE-2024-33974 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0.Critical 9.8 · Aug 6, 2024
- CVE-2024-33973 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0.Critical 9.8 · Aug 6, 2024
- CVE-2024-33972 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0.Critical 9.8 · Aug 6, 2024
- CVE-2024-33971 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0.Critical 9.8 · Aug 6, 2024
- CVE-2024-33970 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0.Critical 9.8 · Aug 6, 2024
- CVE-2024-33969 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0.Critical 9.8 · Aug 6, 2024
- CVE-2024-33968 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0.Critical 9.8 · Aug 6, 2024
- CVE-2024-33967 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0.Critical 9.8 · Aug 6, 2024
- CVE-2024-33966 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0.Critical 9.8 · Aug 6, 2024
- CVE-2024-33965 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0.Critical 9.8 · Aug 6, 2024
- CVE-2024-33964 SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0.Critical 9.8 · Aug 6, 2024
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.