CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,373 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-11
12,663 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2006-1755 EXP | SQL injection vulnerability in admin.php in MD News 1 allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.3% | 2006-04-13 |
| CVE-2006-4202 EXP | SQL injection vulnerability in proje_goster.php in Spidey Blog Script 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via th… | Patch early | 7.5 high | 1.3% | 2006-08-17 |
| CVE-2016-0846 EXP | libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01… | Patch early | 8.4 high | 1.3% | 2016-04-18 |
| CVE-2014-3749 EXP | SQL injection vulnerability in Construtiva CIS Manager allows remote attackers to execute arbitrary SQL commands via the email parameter to autenticar… | Patch early | 7.5 high | 1.3% | 2014-05-20 |
| CVE-2014-9254 EXP | bb_func_unsub.php in MiniBB 3.1 before 20141127 uses an incorrect regular expression, which allows remote attackers to conduct SQl injection attacks v… | Patch early | 7.5 high | 1.3% | 2014-12-31 |
| CVE-2014-9347 EXP | SQL injection vulnerability in dosearch.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL commands via the words_exact parame… | Patch early | 7.5 high | 1.3% | 2014-12-08 |
| CVE-2001-1093 EXP | Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long command line argument. | Patch early | 7.2 high | 1.3% | 2001-09-10 |
| CVE-2007-0305 EXP | SQL injection vulnerability in etkinlikbak.asp in Okul Web Otomasyon Sistemi 4.0.1 allows remote attackers to execute arbitrary SQL commands via the i… | Patch early | 7.5 high | 1.3% | 2007-01-18 |
| CVE-2010-4945 EXP | SQL injection vulnerability in the CamelcityDB (com_camelcitydb2) component 2.2 for Joomla! allows remote attackers to execute arbitrary SQL commands… | Patch early | 7.5 high | 1.3% | 2011-10-09 |
| CVE-2003-0034 EXP | Buffer overflow in the mtink status monitor, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary cod… | Patch early | 7.2 high | 1.3% | 2003-02-07 |
| CVE-2005-4478 EXP | Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) menuid paramete… | Patch early | 7.5 high | 1.3% | 2005-12-22 |
| CVE-2006-0115 EXP | Multiple SQL injection vulnerabilities in OnePlug Solutions OnePlug CMS allow remote attackers to execute arbitrary SQL commands via the (1) Press_Rel… | Patch early | 7.5 high | 1.3% | 2006-01-09 |
| CVE-2014-8359 EXP | Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and conduct DL… | Patch early | 7.2 high | 1.3% | 2014-11-13 |
| CVE-2006-2847 EXP | SQL injection vulnerability in links.asp in aspWebLinks 2.0 allows remote attackers to execute arbitrary SQL commands via the linkID parameter. | Patch early | 7.5 high | 1.3% | 2006-06-06 |
| CVE-2014-1945 EXP | SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the add_value p… | Patch early | 7.5 high | 1.3% | 2014-03-09 |
| CVE-2007-0560 EXP | SQL injection vulnerability in user.asp in ASP EDGE 1.2b and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter. | Patch early | 7.5 high | 1.3% | 2007-01-30 |
| CVE-2007-0688 EXP | SQL injection vulnerability in oku.asp in Hunkaray Duyuru Scripti allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.3% | 2007-02-03 |
| CVE-2001-1582 EXP | Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS e… | Patch early | 7.2 high | 1.3% | 2001-12-31 |
| CVE-2007-1847 EXP | SQL injection vulnerability in viewcat.php in the Repository module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid pa… | Patch early | 7.5 high | 1.3% | 2007-04-03 |
| CVE-2007-2674 EXP | SQL injection vulnerability in detail.php in Pre Shopping Mall 1.0 allows remote attackers to execute arbitrary SQL commands via the prodid parameter. | Patch early | 7.5 high | 1.3% | 2007-05-14 |
| CVE-1999-0051 EXP | Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX. | Patch early | 7.2 high | 1.3% | 1997-01-06 |
| CVE-2004-0340 EXP | Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users t… | Patch early | 7.2 high | 1.3% | 2004-11-23 |
| CVE-2005-3686 EXP | SQL injection vulnerability in search.inc.php in Unclassified NewsBoard before 1.5.3 Patch 4 allows remote attackers to execute arbitrary SQL commands… | Patch early | 7.5 high | 1.3% | 2005-11-19 |
| CVE-2006-0249 EXP | SQL injection vulnerability in viewcat.php in BitDamaged geoBlog MOD_1.0 allows remote attackers to execute arbitrary SQL commands, then steal credent… | Patch early | 7.5 high | 1.3% | 2006-01-18 |
| CVE-2015-3140 EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, a… | Patch early | 8.8 high | 1.3% | 2019-11-21 |
| CVE-2006-0240 EXP | Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via the month parameter in an archi… | Patch early | 7.5 high | 1.3% | 2006-01-18 |
| CVE-2006-4601 EXP | SQL injection vulnerability in index.php in Annuaire 1Two 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.3% | 2006-09-07 |
| CVE-2003-1006 EXP | Buffer overflow in cd9660.util in Apple Mac OS X 10.0 through 10.3.2 and Apple Mac OS X Server 10.0 through 10.3.2 may allow local users to execute ar… | Patch early | 7.2 high | 1.3% | 2004-03-29 |
| CVE-2006-2499 EXP | SQL injection vulnerability in default.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to execute arbitrary SQL commands via the passwo… | Patch early | 7.5 high | 1.3% | 2006-05-20 |
| CVE-2006-2503 EXP | SQL injection vulnerability in misc.php in DeluxeBB 1.06 allows remote attackers to execute arbitrary SQL commands via the name parameter. | Patch early | 7.5 high | 1.3% | 2006-05-22 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt