weakness class · disclosed reports
SQL Injection
315 disclosed reports · $173,889 paid
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Each strip is a weakness as programs filed it. Each square stands for disclosed reports.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.