CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,394 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
12,663 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-5816 EXP | SQL injection vulnerability in repository.php in ILIAS 3.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ref_id para… | Patch early | 7.5 high | 1.3% | 2009-01-02 |
| CVE-2006-5450 EXP | SQL injection vulnerability in index.asp in Kinesis Interactive Cinema System (KICS) CMS allows remote attackers to execute arbitrary SQL commands via… | Patch early | 7.5 high | 1.3% | 2006-10-23 |
| CVE-2006-5765 EXP | SQL injection vulnerability in rss.php in Article Script 1.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the category… | Patch early | 7.5 high | 1.3% | 2006-11-06 |
| CVE-2007-5974 EXP | SQL injection vulnerability in mailer.php in JPortal 2 allows remote attackers to execute arbitrary SQL commands via the to parameter. | Patch early | 7.5 high | 1.3% | 2007-11-15 |
| CVE-2015-1875 EXP | SQL injection vulnerability in a2billing/customer/iridium_threed.php in Elastix 2.5.0 and earlier allows remote attackers to execute arbitrary SQL com… | Patch early | 7.5 high | 1.3% | 2015-03-11 |
| CVE-2005-3846 EXP | SQL injection vulnerability in news.php in Fantastic News 2.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the category… | Patch early | 7.5 high | 1.3% | 2005-11-26 |
| CVE-2005-4461 EXP | SQL injection vulnerability in index.php in Beehive Forum 0.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user_ses… | Patch early | 7.5 high | 1.3% | 2005-12-21 |
| CVE-2006-0943 EXP | SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id p… | Patch early | 7.5 high | 1.3% | 2006-03-01 |
| CVE-2007-0226 EXP | SQL injection vulnerability in wbsearch.aspx in uniForum 4 and earlier allows remote attackers to execute arbitrary SQL commands via the "by User" fie… | Patch early | 7.5 high | 1.3% | 2007-01-13 |
| CVE-2005-2697 EXP | SQL injection vulnerability in search.php for MyBulletinBoard (MyBB) 1.00 Release Candidate 1 through 4 allows remote attackers to execute arbitrary S… | Patch early | 7.5 high | 1.3% | 2005-08-26 |
| CVE-2005-3679 EXP | SQL injection vulnerability in admin/index.php in ActiveCampaign 1-2-All Broadcast Email allows remote attackers to execute arbitrary SQL commands and… | Patch early | 7.5 high | 1.3% | 2005-11-18 |
| CVE-2012-5334 EXP | SQL injection vulnerability in product_desc.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the pid parameter. | Patch early | 7.5 high | 1.3% | 2012-10-08 |
| CVE-2006-5886 EXP | SQL injection vulnerability in propertysdetails.asp in Dynamic Dataworx NuRealestate (NuRems) 1.0 and earlier allows remote attackers to execute arbit… | Patch early | 7.5 high | 1.3% | 2006-11-14 |
| CVE-2006-6930 EXP | SQL injection vulnerability in viewad.asp in Rapid Classified 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.3% | 2007-01-13 |
| CVE-2007-4156 EXP | Multiple SQL injection vulnerabilities in wolioCMS allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to member.php in… | Patch early | 7.5 high | 1.3% | 2007-08-03 |
| CVE-2006-5946 EXP | SQL injection vulnerability in demo/glossary/glossary.asp in FunkyASP Glossary 1.0 allows remote attackers to execute arbitrary SQL commands via the a… | Patch early | 7.5 high | 1.3% | 2006-11-17 |
| CVE-2006-6092 EXP | Multiple SQL injection vulnerabilities in vehiclelistings.asp in 20/20 Auto Gallery allow remote attackers to execute arbitrary SQL commands via the (… | Patch early | 7.5 high | 1.3% | 2006-11-24 |
| CVE-2012-1116 EXP | SQL injection vulnerability in Joomla! 1.7.x and 2.5.x before 2.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | Patch early | 7.5 high | 1.3% | 2012-09-26 |
| CVE-2013-6839 EXP | SQL injection vulnerability in InstantSoft InstantCMS 1.10.3 and earlier allows remote attackers to execute arbitrary SQL commands via the orderby par… | Patch early | 7.5 high | 1.3% | 2013-12-13 |
| CVE-2001-0111 EXP | Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument. | Patch early | 7.2 high | 1.3% | 2001-03-12 |
| CVE-2005-4500 EXP | SQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) show and (2) type parameter. NOTE:… | Patch early | 7.5 high | 1.3% | 2005-12-22 |
| CVE-2006-1330 EXP | Multiple SQL injection vulnerabilities in phpWebsite 0.83 and earlier allow remote attackers to execute arbitrary SQL commands via the sid parameter t… | Patch early | 7.5 high | 1.3% | 2006-03-21 |
| CVE-2006-3221 EXP | SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via double-encod… | Patch early | 7.5 high | 1.3% | 2006-06-24 |
| CVE-2006-4793 EXP | Multiple SQL injection vulnerabilities in icerik.asp in TualBLOG 1.0 allow remote attackers to execute arbitrary SQL commands, as demonstrated by the… | Patch early | 7.5 high | 1.3% | 2006-09-14 |
| CVE-2015-4658 EXP | Multiple SQL injection vulnerabilities in admin/login.php in Milw0rm Clone Script 1.0 allow remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.3% | 2015-06-18 |
| CVE-2007-1719 EXP | Buffer overflow in eject.c in Jason W. Bacon mcweject 0.9 on FreeBSD, and possibly other versions, allows local users to execute arbitrary code via a… | Patch early | 7.2 high | 1.3% | 2007-03-28 |
| CVE-2006-5889 EXP | SQL injection vulnerability in printLog.php in BrewBlogger (BB) 1.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.3% | 2006-11-14 |
| CVE-2007-1517 EXP | SQL injection vulnerability in comments.php in WSN Guest 1.02 and 1.21 allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.3% | 2007-03-20 |
| CVE-2007-2622 EXP | Multiple SQL injection vulnerabilities in TaskDriver 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the username par… | Patch early | 7.5 high | 1.3% | 2007-05-11 |
| CVE-2010-1931 EXP | SQL injection vulnerability in includes/content/cart.inc.php in CubeCart PHP Shopping cart 4.3.4 through 4.3.9 allows remote attackers to execute arbi… | Patch early | 7.5 high | 1.3% | 2010-06-10 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt