CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
| CVE | Vendor · product | Exploitation | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2009-3165SQL injection vulnerability in the Bug.create WebService function in Bugzilla 2.23.4 through 3.0.8, 3.1.1 through 3.2.4, and 3.3.1 through 3.4.1 allows remote attackers to execute… | Mozilla · Bugzilla | Possible | – | 1.4% | 2009-09-15 |
| CVE-2009-3125SQL injection vulnerability in the Bug.search WebService function in Bugzilla 3.3.2 through 3.4.1, and 3.5, allows remote attackers to execute arbitrary SQL commands via unspecifi… | Mozilla · Bugzilla | Possible | – | 1.4% | 2009-09-15 |
| CVE-2022-1887The search term could have been specified externally to trigger SQL injection. This vulnerability affects Firefox for iOS < 101. | Mozilla · Firefox for iOS | Unlikely | 9.8 | 0.6% | 2022-12-22 |
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.