CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,381 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
12,663 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2009-4791 EXP | Multiple SQL injection vulnerabilities in Family Connections (aka FCMS) before 1.8.2 allow remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.3% | 2010-04-22 |
| CVE-2006-5954 EXP | SQL injection vulnerability in page.asp in NetVIOS 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsID parameter. | Patch early | 7.5 high | 1.3% | 2006-11-17 |
| CVE-2013-6767 EXP | Stack-based buffer overflow in pepoly.dll in Quick Heal AntiVirus Pro 7.0.0.1 allows local users to execute arbitrary code or cause a denial of servic… | Patch early | 7.2 high | 1.3% | 2013-12-20 |
| CVE-2022-47636 EXP | A DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build 61739. When a user open a .oml file (OutSystems Model… | Patch early | 7.8 high | 1.3% | 2023-08-10 |
| CVE-2006-0066 EXP | SQL injection vulnerability in index.php in PHPjournaler 1.0 allows remote attackers to execute arbitrary SQL commands via the readold parameter. | Patch early | 7.5 high | 1.3% | 2006-01-03 |
| CVE-2006-0088 EXP | SQL injection vulnerability in intouch.lib.php in inTouch 0.5.1 Alpha allows remote attackers to execute arbitrary SQL commands via the user parameter… | Patch early | 7.5 high | 1.3% | 2006-01-05 |
| CVE-2006-0345 EXP | Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via the search parameter to search.ph… | Patch early | 7.5 high | 1.3% | 2006-01-21 |
| CVE-2006-0851 EXP | SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitrary SQL commands via the pid pa… | Patch early | 7.5 high | 1.3% | 2006-02-23 |
| CVE-2006-0973 EXP | SQL injection vulnerability in topics.php in Appalachian State University phpWebSite 0.10.2 and earlier allows remote attackers to execute arbitrary S… | Patch early | 7.5 high | 1.3% | 2006-03-03 |
| CVE-2007-0971 EXP | Multiple SQL injection vulnerabilities in Jupiter CMS 1.1.5 allow remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header and… | Patch early | 7.5 high | 1.3% | 2007-02-16 |
| CVE-2007-1417 EXP | SQL injection vulnerability in index.php in HC NEWSSYSTEM 1.0-4 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a ko… | Patch early | 7.5 high | 1.3% | 2007-03-12 |
| CVE-2005-4005 EXP | SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information and possibly execute arbitrary S… | Patch early | 7.5 high | 1.3% | 2005-12-05 |
| CVE-2004-1955 EXP | SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute arbitrary SQL code via the offset parameter. | Patch early | 7.5 high | 1.3% | 2004-12-31 |
| CVE-2004-2295 EXP | SQL injection vulnerability in the Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to execute arbitrary SQL commands via the order param… | Patch early | 7.5 high | 1.3% | 2004-12-31 |
| CVE-2005-1074 EXP | SQL injection vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to execute arbitrary SQL commands via the mode paramete… | Patch early | 7.5 high | 1.3% | 2005-05-02 |
| CVE-2005-1082 EXP | Multiple SQL injection vulnerabilities in AzDGDatingPlatinum 1.1.0 allows remote attackers to execute arbitrary SQL commands via (1) the id parameter… | Patch early | 7.5 high | 1.3% | 2005-04-09 |
| CVE-2005-1642 EXP | SQL injection vulnerability in the verify_email function in Woltlab Burning Board 2.x and earlier allows remote attackers to execute arbitrary SQL com… | Patch early | 7.5 high | 1.3% | 2005-05-17 |
| CVE-2005-3394 EXP | Multiple SQL injection vulnerabilities in forum.php in oaboard forum 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) channel… | Patch early | 7.5 high | 1.3% | 2005-11-01 |
| CVE-2005-3508 EXP | SQL injection vulnerability in showGallery.php in Gallery (Galerie) 2.4 allows remote attackers to execute arbitrary SQL commands via the galid parame… | Patch early | 7.5 high | 1.3% | 2005-11-06 |
| CVE-2005-3827 EXP | SQL injection vulnerability in product_cat in AgileBill 1.4.92 and earlier allows remote attackers to execute arbitrary SQL commands via the id parame… | Patch early | 7.5 high | 1.3% | 2005-11-26 |
| CVE-2005-3884 EXP | Multiple SQL injection vulnerabilities in the search action in Zainu 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.3% | 2005-11-29 |
| CVE-2005-3909 EXP | SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands v… | Patch early | 7.5 high | 1.3% | 2005-11-30 |
| CVE-2005-3930 EXP | SQL injection vulnerability in index.php in N-13 News 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.3% | 2005-12-01 |
| CVE-2005-3958 EXP | SQL injection vulnerability in index.php in Entergal MX 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) idcat parameter in a… | Patch early | 7.5 high | 1.3% | 2005-12-01 |
| CVE-2005-4043 EXP | SQL injection vulnerability in view.php in Hobosworld HobSR 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) arra… | Patch early | 7.5 high | 1.3% | 2005-12-06 |
| CVE-2005-4370 EXP | SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote attackers to execute arbitrary SQL commands via the ID par… | Patch early | 7.5 high | 1.3% | 2005-12-20 |
| CVE-2006-0545 EXP | SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows remote attackers to execute arbi… | Patch early | 7.5 high | 1.3% | 2006-02-04 |
| CVE-2006-0835 EXP | SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL queries and cause a denial of… | Patch early | 7.5 high | 1.3% | 2006-02-22 |
| CVE-2006-0879 EXP | SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary SQL commands via unspecified att… | Patch early | 7.5 high | 1.3% | 2006-02-24 |
| CVE-2006-1007 EXP | Multiple SQL injection vulnerabilities in N8cms 1.1 and 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) dir and (2) page_id p… | Patch early | 7.5 high | 1.3% | 2006-03-06 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt