CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
Code-Projects has 1,461 CVEs, 0 exploited. Pick a weakness or a product to list them.
By weakness
- SQL Injection1,053
- Cross-site Scripting237
- File and Path Handling77
- Memory Corruption33
- Information Disclosure15
- Access Control14
- Authentication10
- Cross-Site Request Forgery9
- Command and Code Injection3
- Cryptography3
- Insecure Direct Object Reference3
- Injection and Smuggling2
- Deserialization and Object Injection1
- Input Validation and Logic1
By product
- Exam Form Submission30
- Blood Bank Management System28
- Patient Record Management System28
- Job Recruitment25
- Online Music Site23
- Inventory Management System21
- Online Shoe Store21
- Simple Laundry System21
- Blood Bank System20
- Library System20
- Pharmacy Management System20
- Chat System19
- E-Commerce Website18
- Real Estate Property Management System18
- Simple Online Hotel Reservation System18
- Simple Pizza Ordering System18
- Employee Management System17
- Online Restaurant Management System17
- Hostel Management System16
- Online Appointment Booking System16
- Simple Food Ordering System16
- Client Details System15
- Intern Membership Management System15
- Online Class and Exam Scheduling System15
- Online Reviewer System15
- Church Donation System14
- Simple Admin Panel14
- Farmacia13
- Online Bidding System13
- Online Product Reservation System13
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.