CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,449 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
12,663 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-0469 EXP | SQL injection vulnerability in index.php in Tiger Php News System (TPNS) 1.0b and earlier allows remote attackers to execute arbitrary SQL commands vi… | Patch early | 7.5 high | 1.2% | 2008-01-29 |
| CVE-2008-1349 EXP | SQL injection vulnerability in viewcat.php in the bamaGalerie (Bama Galerie) 3.03 and 3.041 module for eXV2 2.0.6 allows remote attackers to execute a… | Patch early | 7.5 high | 1.2% | 2008-03-17 |
| CVE-2008-1408 EXP | SQL injection vulnerability in includes/functions/banners-external.php in phpBP 2 RC3 (2.204) FIX 4 allows remote attackers to execute arbitrary SQL c… | Patch early | 7.5 high | 1.2% | 2008-03-20 |
| CVE-2006-6337 EXP | Multiple SQL injection vulnerabilities in giris.asp in Aspee and Dogantepe Ziyaretci Defteri allow remote attackers to execute arbitrary SQL commands… | Patch early | 7.5 high | 1.2% | 2006-12-07 |
| CVE-2006-6927 EXP | Multiple SQL injection vulnerabilities in Rialto 1.6 allow remote attackers to execute arbitrary SQL commands via (1) the uname (username) and (2) pwo… | Patch early | 7.5 high | 1.2% | 2007-01-13 |
| CVE-2003-1359 EXP | Buffer overflow in stmkfont utility of HP-UX 10.0 through 11.22 allows local users to gain privileges via a long command line argument. | Patch early | 7.2 high | 1.2% | 2003-12-31 |
| CVE-2016-3134 EXP | The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or caus… | Patch early | 8.4 high | 1.2% | 2016-04-27 |
| CVE-2021-43326 EXP | Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory. | Patch early | 7.8 high | 1.2% | 2021-12-15 |
| CVE-2015-5148 EXP | SQL injection vulnerability in LivelyCart 1.2.0 allows remote attackers to execute arbitrary SQL commands via the search_query parameter to product/se… | Patch early | 7.5 high | 1.2% | 2015-06-30 |
| CVE-2007-2299 EXP | Multiple SQL injection vulnerabilities in Frogss CMS 0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) dzial parame… | Patch early | 7.5 high | 1.2% | 2007-04-26 |
| CVE-2014-10015 EXP | SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands vi… | Patch early | 7.5 high | 1.2% | 2015-01-13 |
| CVE-2004-1519 EXP | SQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute arbitrary SQL commands via (1) the bug_id parameter i… | Patch early | 7.5 high | 1.2% | 2004-12-31 |
| CVE-2005-3816 EXP | Multiple SQL injection vulnerabilities in forum.php in freeForum 1.1 and earlier and earlier allow remote attackers to execute arbitrary SQL commands… | Patch early | 7.5 high | 1.2% | 2005-11-26 |
| CVE-2005-3826 EXP | Multiple SQL injection vulnerabilities in Ezyhelpdesk 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) edit_id, (2) faq_id, an… | Patch early | 7.5 high | 1.2% | 2005-11-26 |
| CVE-2005-3844 EXP | SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the (1) pol… | Patch early | 7.5 high | 1.2% | 2005-11-26 |
| CVE-2005-4019 EXP | SQL injection vulnerability in index.php in Relative Real Estate Systems 1.02 and earlier allows remote attackers to execute arbitrary SQL commands vi… | Patch early | 7.5 high | 1.2% | 2005-12-05 |
| CVE-2005-4037 EXP | SQL injection vulnerability in functions.php in Web4Future Affiliate Manager PRO 4.1 and earlier allows remote attackers to execute arbitrary SQL comm… | Patch early | 7.5 high | 1.2% | 2005-12-06 |
| CVE-2005-4055 EXP | SQL injection vulnerability in index.php in Cars Portal 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) page and… | Patch early | 7.5 high | 1.2% | 2005-12-07 |
| CVE-2005-4419 EXP | Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0 allow remote attackers to exec… | Patch early | 7.5 high | 1.2% | 2005-12-20 |
| CVE-2006-1586 EXP | SQL injection vulnerability in admin_login.asp in ISP of Egypt SiteMan allows remote attackers to execute arbitrary SQL commands via the pass paramete… | Patch early | 7.5 high | 1.2% | 2006-04-02 |
| CVE-2006-6247 EXP | Multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers to execute arbitrary SQL commands via the ci parameter… | Patch early | 7.5 high | 1.2% | 2006-12-04 |
| CVE-2007-0631 EXP | SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL commands vi… | Patch early | 7.5 high | 1.2% | 2007-01-31 |
| CVE-2007-0765 EXP | SQL injection vulnerability in news.php in dB Masters Curium CMS 1.03 and earlier allows remote attackers to execute arbitrary SQL commands via the c_… | Patch early | 7.5 high | 1.2% | 2007-02-06 |
| CVE-2007-0864 EXP | SQL injection vulnerability in register.php in LushiWarPlaner 1.0 allows remote attackers to inject arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.2% | 2007-02-09 |
| CVE-2007-0865 EXP | SQL injection vulnerability in comments.php in LushiNews 1.01 and earlier allows remote authenticated users to inject arbitrary SQL commands via the i… | Patch early | 7.5 high | 1.2% | 2007-02-09 |
| CVE-2007-1298 EXP | SQL injection vulnerability in subcat.php in AJ Auction 1.0 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter. | Patch early | 7.5 high | 1.2% | 2007-03-07 |
| CVE-2007-2492 EXP | SQL injection vulnerability in index.php in the v4bJournal module for PostNuke allows remote authenticated users to execute arbitrary SQL commands via… | Patch early | 7.5 high | 1.2% | 2007-05-04 |
| CVE-2003-0985 EXP | The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds ch… | Patch early | 7.2 high | 1.2% | 2004-01-20 |
| CVE-2006-6149 EXP | SQL injection vulnerability in index.asp in JiRos FAQ Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the tID parameter. | Patch early | 7.5 high | 1.2% | 2006-11-28 |
| CVE-2000-0824 EXP | The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could all… | Patch early | 7.2 high | 1.2% | 2000-11-14 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt