CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,406 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
12,663 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2007-3293 EXP | SQL injection vulnerability in categoria.php in LiveCMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the cid paramete… | Patch early | 7.5 high | 1.3% | 2007-06-20 |
| CVE-2016-7621 EXP | An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. Th… | Patch early | 7.8 high | 1.3% | 2017-02-20 |
| CVE-2007-0566 EXP | SQL injection vulnerability in news_detail.asp in ASP NEWS 3 and earlier allows remote attackers to execute arbitrary SQL commands via the id paramete… | Patch early | 7.5 high | 1.3% | 2007-01-30 |
| CVE-2007-0786 EXP | SQL injection vulnerability in view.php in Noname Media Photo Galerie Standard 1.1.1 and earlier allows remote attackers to execute arbitrary SQL comm… | Patch early | 7.5 high | 1.3% | 2007-02-06 |
| CVE-2007-0812 EXP | SQL injection vulnerability in pms.php in Woltlab Burning Board (wBB) Lite 1.0.2pl3e and earlier allows remote authenticated users to execute arbitrar… | Patch early | 7.5 high | 1.3% | 2007-02-07 |
| CVE-2007-1295 EXP | SQL injection vulnerability in topic_title.php in AJ Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the td_id parameter. | Patch early | 7.5 high | 1.3% | 2007-03-07 |
| CVE-2009-0825 EXP | SQL injection vulnerability in system/rss.php in TinX/cms 3.x before 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parame… | Patch early | 7.5 high | 1.3% | 2009-03-09 |
| CVE-2009-2734 EXP | SQL injection vulnerability in the get_employee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute arbitrary S… | Patch early | 7.5 high | 1.3% | 2009-10-16 |
| CVE-2012-3791 EXP | Multiple SQL injection vulnerabilities in Simple Web Content Management System 1.1 allow remote attackers to execute arbitrary SQL commands via the id… | Patch early | 7.5 high | 1.3% | 2012-06-21 |
| CVE-2005-4071 EXP | Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commands via th… | Patch early | 7.5 high | 1.3% | 2005-12-08 |
| CVE-2003-1051 EXP | Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line argu… | Patch early | 7.2 high | 1.3% | 2004-09-28 |
| CVE-2007-1410 EXP | SQL injection vulnerability in kategori.asp in GaziYapBoz Game Portal allows remote attackers to execute arbitrary SQL commands via the kategori param… | Patch early | 7.5 high | 1.3% | 2007-03-10 |
| CVE-2007-1425 EXP | SQL injection vulnerability in index.php in Triexa SonicMailer Pro 3.2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.3% | 2007-03-13 |
| CVE-2016-0727 EXP | The crontab script in the ntp package before 1:4.2.6.p3+dfsg-1ubuntu3.11 on Ubuntu 12.04 LTS, before 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10 on Ubuntu 14.04… | Patch early | 7.8 high | 1.3% | 2017-04-14 |
| CVE-2006-5509 EXP | Eval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote attackers to execute arbitrary PHP code via crafted POST requ… | Patch early | 7.5 high | 1.3% | 2006-10-25 |
| CVE-2007-0759 EXP | Multiple SQL injection vulnerabilities in EasyMoblog 0.5.1 allow remote attackers to execute arbitrary SQL commands via the (1) i or (2) post_id param… | Patch early | 7.5 high | 1.3% | 2007-02-06 |
| CVE-2017-6953 EXP | Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long "Register a new card" input fields. There may be a… | Patch early | 7.8 high | 1.3% | 2017-05-08 |
| CVE-2006-0413 EXP | Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL commands via the (1) discuss, (2) tim,… | Patch early | 7.5 high | 1.3% | 2006-01-25 |
| CVE-2006-0510 EXP | SQL injection vulnerability in userlogin.jsp in Daffodil CRM 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified parameters… | Patch early | 7.5 high | 1.3% | 2006-02-01 |
| CVE-2006-0750 EXP | SQL injection vulnerability in army.php in supersmashbrothers (SSB) Army System 2.1.0 for Invision Power Board (IPB) allows remote attackers to execut… | Patch early | 7.5 high | 1.3% | 2006-02-18 |
| CVE-2006-1501 EXP | SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly… | Patch early | 7.5 high | 1.3% | 2006-03-30 |
| CVE-2006-3347 EXP | SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary SQL commands via the id paramete… | Patch early | 7.5 high | 1.3% | 2006-07-03 |
| CVE-2006-4592 EXP | Incomplete blacklist vulnerability in default.asp in 8pixel.net Simple Blog 2.3 and earlier allows remote attackers to conduct SQL injection attacks v… | Patch early | 7.5 high | 1.3% | 2006-09-06 |
| CVE-2007-0142 EXP | SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the C… | Patch early | 7.5 high | 1.3% | 2007-01-09 |
| CVE-2005-4198 EXP | SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the prov… | Patch early | 7.5 high | 1.3% | 2005-12-13 |
| CVE-2001-0423 EXP | Buffer overflow in ipcs in Solaris 7 x86 allows local users to execute arbitrary code via a long TZ (timezone) environmental variable, a different vul… | Patch early | 7.2 high | 1.3% | 2001-07-02 |
| CVE-2008-5689 EXP | tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (panic) and possibly execute arbi… | Patch early | 7.2 high | 1.3% | 2008-12-19 |
| CVE-2006-2474 EXP | SQL injection vulnerability in lshop.cgi in Cosmoshop 8.11.106 and earlier allows remote attackers to execute arbitrary SQL commands via the artnum pa… | Patch early | 7.5 high | 1.3% | 2006-05-19 |
| CVE-2006-2867 EXP | SQL injection vulnerability in editpost.php in CoolForum 0.8.3 beta and earlier allows remote attackers to execute arbitrary SQL commands via the post… | Patch early | 7.5 high | 1.3% | 2006-06-06 |
| CVE-2006-3213 EXP | SQL injection vulnerability in WeBBoA Hosting 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter to an unspecified scr… | Patch early | 7.5 high | 1.3% | 2006-06-24 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt