CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,449 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
12,663 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2016-7089 EXP | WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifconfig command, aka ESCALATEPLOW… | Patch early | 7.8 high | 1.2% | 2016-08-24 |
| CVE-2004-1843 EXP | SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID parameter to (1) resend.asp or… | Patch early | 7.5 high | 1.2% | 2004-03-20 |
| CVE-2004-2175 EXP | Multiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands via the (1) product parameter to… | Patch early | 7.5 high | 1.2% | 2004-12-31 |
| CVE-2006-6115 EXP | SQL injection vulnerability in index.asp in fipsCMS 4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the fid parameter. | Patch early | 7.5 high | 1.2% | 2006-11-26 |
| CVE-2006-6116 EXP | SQL injection vulnerability in default2.asp in fipsForum 2.6 and earlier allows remote attackers to execute arbitrary SQL commands via the kat paramet… | Patch early | 7.5 high | 1.2% | 2006-11-26 |
| CVE-2006-6117 EXP | SQL injection vulnerability in index1.asp in fipsGallery 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the which param… | Patch early | 7.5 high | 1.2% | 2006-11-26 |
| CVE-2006-6191 EXP | SQL injection vulnerability in admin/edit.asp in 8pixel.net simpleblog 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via t… | Patch early | 7.5 high | 1.2% | 2006-12-01 |
| CVE-2006-6193 EXP | SQL injection vulnerability in edit.asp in BasicForum 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.2% | 2006-12-01 |
| CVE-2006-6214 EXP | SQL injection vulnerability in wallpaper.php in Wallpaper Website (Wallpaper Complete Website) 1.0.09 allows remote attackers to execute arbitrary SQL… | Patch early | 7.5 high | 1.2% | 2006-12-01 |
| CVE-2006-6813 EXP | SQL injection vulnerability in detail.asp in Mxmania File Upload Manager (FUM) 1.0.6 and earlier allows remote attackers to execute arbitrary SQL comm… | Patch early | 7.5 high | 1.2% | 2006-12-29 |
| CVE-2006-6873 EXP | Multiple SQL injection vulnerabilities in mod.php in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via (1) the did parameter… | Patch early | 7.5 high | 1.2% | 2006-12-31 |
| CVE-2012-4925 EXP | Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote attackers to execute arbitrary SQL commands via the u pa… | Patch early | 7.5 high | 1.2% | 2012-09-15 |
| CVE-2004-0424 EXP | Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of s… | Patch early | 7.2 high | 1.2% | 2004-07-07 |
| CVE-2006-6207 EXP | SQL injection vulnerability in products.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL commands vi… | Patch early | 7.5 high | 1.2% | 2006-12-01 |
| CVE-2006-6210 EXP | SQL injection vulnerability in listpics.asp in ASP ListPics 5.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. | Patch early | 7.5 high | 1.2% | 2006-12-01 |
| CVE-2012-4178 EXP | SQL injection vulnerability in spywall/includes/deptUploads_data.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL… | Patch early | 7.5 high | 1.2% | 2012-08-07 |
| CVE-1999-0050 EXP | Buffer overflow in HP-UX newgrp program. | Patch early | 7.2 high | 1.2% | 1996-12-01 |
| CVE-2002-2041 EXP | Multiple buffer overflows in realtime operating system (RTOS) 6.1.0 allows local users to execute arbitrary code via (1) a long ABLANG environment var… | Patch early | 7.2 high | 1.2% | 2002-12-31 |
| CVE-1999-0029 EXP | root privileges via buffer overflow in ordist command on SGI IRIX systems. | Patch early | 8.4 high | 1.2% | 1997-07-16 |
| CVE-2011-5203 EXP | SQL injection vulnerability in WB/Default.asp in Akiva WebBoard before 8 SR 1 allows remote attackers to execute arbitrary SQL commands via the name p… | Patch early | 7.5 high | 1.2% | 2012-10-04 |
| CVE-2012-4996 EXP | Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash paramete… | Patch early | 7.5 high | 1.2% | 2012-09-19 |
| CVE-2012-5333 EXP | SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.2% | 2012-10-08 |
| CVE-2006-2861 EXP | SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the version… | Patch early | 7.5 high | 1.2% | 2006-06-06 |
| CVE-2006-3176 EXP | SQL injection vulnerability in xarancms_haupt.php in xarancms 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.2% | 2006-06-23 |
| CVE-2006-4504 EXP | SQL injection vulnerability in NX5Linx 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) c and (2) l parameters. | Patch early | 7.5 high | 1.2% | 2006-08-31 |
| CVE-2007-3938 EXP | SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.8x and earlier before 20070720 allows remote attackers to execute arbitrary SQL… | Patch early | 7.5 high | 1.2% | 2007-07-21 |
| CVE-2007-6551 EXP | SQL injection vulnerability in showMsg.php in MailMachine Pro 2.2.4, and other versions before 2.2.6, allows remote attackers to execute arbitrary SQL… | Patch early | 7.5 high | 1.2% | 2007-12-28 |
| CVE-2008-5652 EXP | SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyBookMarker 4.0 allows remote attackers to execute arbitrary SQL comm… | Patch early | 7.5 high | 1.2% | 2008-12-17 |
| CVE-2008-6225 EXP | SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arbitrary SQL commands via the fli… | Patch early | 7.5 high | 1.2% | 2009-02-20 |
| CVE-2008-6419 EXP | Multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) sgc_id… | Patch early | 7.5 high | 1.2% | 2009-03-06 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt