CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,394 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
12,663 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2006-1374 EXP | SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute arbitrary SQL commands via the t… | Patch early | 7.5 high | 1.3% | 2006-03-24 |
| CVE-2006-7170 EXP | Multiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to execute arbitrary SQL commands via the (1) t, (2) productI… | Patch early | 7.5 high | 1.3% | 2007-03-20 |
| CVE-2007-1428 EXP | SQL injection vulnerability in search.php in PHP Labs JobSitePro 1.0 allows remote attackers to execute arbitrary SQL commands via the salary paramete… | Patch early | 7.5 high | 1.3% | 2007-03-13 |
| CVE-2012-5900 EXP | Multiple SQL injection vulnerabilities in SAMEDIA LandShop 0.9.2 allow remote attackers to execute arbitrary SQL commands via the (1) OB_ID parameter… | Patch early | 7.5 high | 1.3% | 2012-11-17 |
| CVE-2026-61876 EXP | LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allowing adjacent network attackers to inject HTML mar… | Patch early | 8.8 high | 1.3% | 2026-07-12 |
| CVE-2011-5099 EXP | SQL injection vulnerability in helper/popup.php in the ccNewsletter (mod_ccnewsletter) component 1.0.7 through 1.0.9 for Joomla! allows remote attacke… | Patch early | 7.5 high | 1.3% | 2012-08-14 |
| CVE-2006-2835 EXP | SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) forumid parameter in add.php and… | Patch early | 7.5 high | 1.3% | 2006-06-06 |
| CVE-2006-4025 EXP | SQL injection vulnerability in profile.php in XennoBB 2.1.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1… | Patch early | 7.5 high | 1.3% | 2006-08-09 |
| CVE-2007-6602 EXP | SQL injection vulnerability in app/models/identity.php in NoseRub 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.3% | 2007-12-31 |
| CVE-2016-7633 EXP | An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Directory Services" component. It allows… | Patch early | 7.8 high | 1.3% | 2017-02-20 |
| CVE-2011-5168 EXP | SQL injection vulnerability in user.php in Banana Dance before B.1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.3% | 2012-09-15 |
| CVE-2001-0422 EXP | Buffer overflow in Xsun in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable. | Patch early | 7.2 high | 1.3% | 2001-07-02 |
| CVE-2005-0948 EXP | SQL injection vulnerability in ad_click.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via the banner_id parameter. | Patch early | 7.5 high | 1.3% | 2005-05-02 |
| CVE-2010-3485 EXP | SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the userhandle cookie to L… | Patch early | 7.5 high | 1.3% | 2010-09-22 |
| CVE-2006-0719 EXP | SQL injection vulnerability in member_login.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.3% | 2006-02-15 |
| CVE-2006-5945 EXP | Multiple SQL injection vulnerabilities in MGinternet Car Site Manager (CSM) allow remote attackers to execute arbitrary SQL commands via the (1) p par… | Patch early | 7.5 high | 1.3% | 2006-11-17 |
| CVE-2006-6147 EXP | Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute arbitrary SQL commands via the (1) LinkID parameter to… | Patch early | 7.5 high | 1.3% | 2006-11-28 |
| CVE-2006-6152 EXP | Multiple SQL injection vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to execute arbitrary SQL commands via the (1) cat pa… | Patch early | 7.5 high | 1.3% | 2006-11-28 |
| CVE-2006-6204 EXP | Multiple SQL injection vulnerabilities in Enthrallweb eHomes allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter to (a)… | Patch early | 7.5 high | 1.3% | 2006-12-01 |
| CVE-2006-6208 EXP | Multiple SQL injection vulnerabilities in Enthrallweb eClassifieds allow remote attackers to execute arbitrary SQL commands via the (1) AD_ID, (2) cat… | Patch early | 7.5 high | 1.3% | 2006-12-01 |
| CVE-2009-3504 EXP | SQL injection vulnerability in offers_buy.php in Alibaba Clone 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.3% | 2009-09-30 |
| CVE-2018-1122 EXP | procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled dir… | Patch early | 7.3 high | 1.3% | 2018-05-23 |
| CVE-2006-4926 EXP | The NDIS-TDI Hooking Engine, as used in the (1) KLICK (KLICK.SYS) and (2) KLIN (KLIN.SYS) device drivers 2.0.0.281 for in Kaspersky Labs Anti-Virus 6.… | Patch early | 7.2 high | 1.3% | 2006-10-20 |
| CVE-2007-1058 EXP | SQL injection vulnerability in user_pages/page.asp in Online Web Building 2.0 allows remote attackers to execute arbitrary SQL commands via the art_id… | Patch early | 7.5 high | 1.3% | 2007-02-21 |
| CVE-2012-6520 EXP | Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbitrary SQL commands via the (1)… | Patch early | 7.5 high | 1.3% | 2013-01-24 |
| CVE-1999-1219 EXP | Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain root privileges, possibly through… | Patch early | 7.2 high | 1.3% | 1994-08-11 |
| CVE-2006-5398 EXP | SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter. | Patch early | 7.5 high | 1.3% | 2006-10-18 |
| CVE-2013-6079 EXP | Buffer overflow in MostGear Soft Easy LAN Folder Share 3.2.0.100 allows local users to cause a denial of service (application crash) and possibly exec… | Patch early | 7.2 high | 1.3% | 2013-10-11 |
| CVE-2025-68137 EXP | EVerest is an EV charging software stack. Prior to version 2025.10.0, an integer overflow occurring in `SdpPacket::parse_header()` allows the current… | Patch early | 8.3 high | 1.3% | 2026-01-21 |
| CVE-2010-1350 EXP | SQL injection vulnerability in the JP Jobs (com_jp_jobs) component 1.4.1 and earlier for Joomla! allows remote attackers to execute arbitrary SQL comm… | Patch early | 7.5 high | 1.3% | 2010-04-12 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt