CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,381 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
12,663 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2006-2853 EXP | SQL injection vulnerability in content.php in abarcar Realty Portal 5.1.5 allows remote attackers to execute arbitrary SQL commands via the cat parame… | Patch early | 7.5 high | 1.3% | 2006-06-06 |
| CVE-2006-2884 EXP | SQL injection vulnerability in index.php in Kmita FAQ 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter. | Patch early | 7.5 high | 1.3% | 2006-06-07 |
| CVE-2006-3518 EXP | SQL injection vulnerability in SayfalaAltList.asp in Webvizyon Portal 2006 allows remote attackers to execute arbitrary SQL commands via the ID parame… | Patch early | 7.5 high | 1.3% | 2006-07-11 |
| CVE-2006-3560 EXP | SQL injection vulnerability in topics.php in Blue Dojo Graffiti Forums 1.0 allows remote attackers to execute arbitrary SQL commands via the f paramet… | Patch early | 7.5 high | 1.3% | 2006-07-13 |
| CVE-2006-3763 EXP | SQL injection vulnerability in category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.3% | 2006-07-21 |
| CVE-2007-0140 EXP | SQL injection vulnerability in down.asp in Kolayindir Download (Yenionline) allows remote attackers to execute arbitrary SQL commands via the id param… | Patch early | 7.5 high | 1.3% | 2007-01-09 |
| CVE-2015-7556 EXP | DeleGate 9.9.13 allows local users to gain privileges as demonstrated by the dgcpnod setuid program. | Patch early | 7.8 high | 1.3% | 2020-01-15 |
| CVE-2006-1978 EXP | SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_user… | Patch early | 7.5 high | 1.3% | 2006-04-21 |
| CVE-2004-2201 EXP | SQL injection vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to execute arbitrary SQL commands via the FOR_ID parameter in me… | Patch early | 7.5 high | 1.3% | 2004-12-31 |
| CVE-2005-3868 EXP | Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) term, (2) id,… | Patch early | 7.5 high | 1.3% | 2005-11-29 |
| CVE-2005-3872 EXP | Multiple SQL injection vulnerabilities in Ugroup 2.6.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) FORUM_ID param… | Patch early | 7.5 high | 1.3% | 2005-11-29 |
| CVE-2005-3925 EXP | Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote attackers to execute arbitrary SQ… | Patch early | 7.5 high | 1.3% | 2005-11-30 |
| CVE-2005-3939 EXP | Multiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earler allow remote attackers to execute arbitrary SQL commands via the (1) cat… | Patch early | 7.5 high | 1.3% | 2005-12-01 |
| CVE-2005-3953 EXP | SQL injection vulnerability in Bedeng PSP 1.1 allows remote attackers to execute arbitrary SQL commands via the cwhere parameter to (1) index.php and… | Patch early | 7.5 high | 1.3% | 2005-12-01 |
| CVE-2005-4001 EXP | Multiple SQL injection vulnerabilities in phpYellowTM Pro Edition and Lite Edition 5.33 allow remote attackers to execute arbitrary SQL commands via t… | Patch early | 7.5 high | 1.3% | 2005-12-05 |
| CVE-2005-4141 EXP | Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via the (1) harf parameter in kullanicili… | Patch early | 7.5 high | 1.3% | 2005-12-09 |
| CVE-2005-4251 EXP | Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) s… | Patch early | 7.5 high | 1.3% | 2005-12-14 |
| CVE-2026-44680 EXP | MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to @mikro-orm/knex 6.6.14 and @mikro-orm/… | Patch early | 7.6 high | 1.3% | 2026-05-26 |
| CVE-2019-8717 EXP | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15, tvOS 13. An application may be abl… | Patch early | 7.8 high | 1.3% | 2019-12-18 |
| CVE-2006-4524 EXP | Multiple SQL injection vulnerabilities in login_verif.asp in Digiappz Freekot 1.01 allow remote attackers to execute arbitrary SQL commands via the (1… | Patch early | 7.5 high | 1.3% | 2006-09-01 |
| CVE-2006-4612 EXP | SQL injection vulnerability in ReplyNew.asp in ZIXForum 1.12 allows remote attackers to execute arbitrary SQL commands via the RepId parameter. | Patch early | 7.5 high | 1.3% | 2006-09-07 |
| CVE-2006-6173 EXP | Buffer overflow in the shared_region_make_private_np function in vm/vm_unix.c in Mac OS X 10.4.6 and earlier allows local users to execute arbitrary c… | Patch early | 7.2 high | 1.3% | 2006-11-30 |
| CVE-2005-4081 EXP | Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and possibly execute arbitrary SQL co… | Patch early | 7.5 high | 1.3% | 2005-12-08 |
| CVE-2000-0935 EXP | Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file. | Patch early | 7.2 high | 1.3% | 2000-12-19 |
| CVE-2005-3575 EXP | SQL injection vulnerability in show.php in Cyphor 0.19 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.3% | 2005-11-16 |
| CVE-2006-4142 EXP | SQL injection vulnerability in extra/online.php in Virtual War (VWar) 1.5.0 R14 and earlier allows remote attackers to execute arbitrary SQL commands… | Patch early | 7.5 high | 1.3% | 2006-08-14 |
| CVE-2014-2225 EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in Ubiquiti Networks UniFi Controller before 3.2.1 allow remote attackers to hijack the aut… | Patch early | 8.8 high | 1.3% | 2020-02-08 |
| CVE-2014-9445 EXP | SQL injection vulnerability in incl/create.inc.php in Installatron GQ File Manager 0.2.5 allows remote attackers to execute arbitrary SQL commands via… | Patch early | 7.5 high | 1.3% | 2015-01-02 |
| CVE-2007-0053 EXP | SQL injection vulnerability in detail.asp in ASP SiteWare autoDealer 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.3% | 2007-01-04 |
| CVE-2005-0193 EXP | Buffer overflow in the (1) -v and (2) -a switches in mRouter in iSync 1.5 in Mac OS X 10.3.7 and earlier allows local users to execute arbitrary code. | Patch early | 7.2 high | 1.3% | 2005-01-22 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt