CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,473 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
12,663 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2023-39147 EXP | An arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code via uploading a crafted image file. | Patch early | 7.8 high | 1.2% | 2023-08-01 |
| CVE-2004-1938 EXP | SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands via doubly hex-encoded characte… | Patch early | 7.5 high | 1.2% | 2004-04-19 |
| CVE-2005-0841 EXP | SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passthru.php and possibly other php… | Patch early | 7.5 high | 1.2% | 2005-05-02 |
| CVE-2012-1911 EXP | Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) to_… | Patch early | 7.5 high | 1.2% | 2012-09-09 |
| CVE-2019-5596 EXP | In FreeBSD 11.2-STABLE after r338618 and before r343786, 12.0-STABLE before r343781, and 12.0-RELEASE before 12.0-RELEASE-p3, a bug in the reference c… | Patch early | 8.8 high | 1.2% | 2019-02-12 |
| CVE-2017-7642 EXP | The sudo helper in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.21 allows local users to gain root privileges by… | Patch early | 7.8 high | 1.2% | 2017-08-02 |
| CVE-2011-5277 EXP | Multiple SQL injection vulnerabilities in signature.php in the Advanced Forum Signatures (aka afsignatures) plugin 2.0.4 for MyBB allow remote attacke… | Patch early | 7.5 high | 1.2% | 2014-04-08 |
| CVE-2011-5278 EXP | SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin (aka afsignatures) 2.0.4 for MyBB allows remote attackers to execute… | Patch early | 7.5 high | 1.2% | 2014-04-08 |
| CVE-2012-2574 EXP | SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL c… | Patch early | 7.5 high | 1.2% | 2012-07-23 |
| CVE-2003-1196 EXP | SQL injection vulnerability in viewtopic.asp in VieBoard 2.6 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. | Patch early | 7.5 high | 1.2% | 2003-11-03 |
| CVE-2004-1826 EXP | SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands v… | Patch early | 7.5 high | 1.2% | 2004-03-16 |
| CVE-2004-1952 EXP | SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password. | Patch early | 7.5 high | 1.2% | 2004-04-23 |
| CVE-2005-0271 EXP | Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) cat para… | Patch early | 7.5 high | 1.2% | 2005-01-03 |
| CVE-2005-0805 EXP | SQL injection vulnerability in index.php in Subdreamer Light, when magic_quotes_gpc is enabled, allows remote attackers to execute arbitrary SQL comma… | Patch early | 7.5 high | 1.2% | 2005-05-02 |
| CVE-2005-0858 EXP | Multiple SQL injection vulnerabilities in CoolForum 0.8 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parame… | Patch early | 7.5 high | 1.2% | 2005-05-02 |
| CVE-2007-6058 EXP | Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the id… | Patch early | 7.5 high | 1.2% | 2007-11-20 |
| CVE-2007-6656 EXP | SQL injection vulnerability in content_css.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remote attackers to execute arbitrar… | Patch early | 7.5 high | 1.2% | 2008-01-04 |
| CVE-2007-3519 EXP | SQL injection vulnerability in eventdisplay.php in phpEventCalendar 0.2.3 and earlier allows remote attackers to execute arbitrary SQL commands via th… | Patch early | 7.5 high | 1.2% | 2007-07-03 |
| CVE-2012-1029 EXP | SQL injection vulnerability in mobile/search/index.php in Tube Ace (Adult PHP Tube Script) 1.6 allows remote attackers to execute arbitrary SQL comman… | Patch early | 7.5 high | 1.2% | 2012-02-08 |
| CVE-1999-0040 EXP | Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges. | Patch early | 7.2 high | 1.2% | 1997-05-01 |
| CVE-2019-5512 EXP | VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle COM classes appropriately. Successful exploitation of t… | Patch early | 8.8 high | 1.2% | 2019-04-09 |
| CVE-2012-5379 EXP | Untrusted search path vulnerability in the installation functionality in ActivePython 3.2.2.3, when installed in the top-level C:\ directory, might al… | Patch early | 7.3 high | 1.2% | 2012-10-11 |
| CVE-2014-5089 EXP | SQL injection vulnerability in admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.2% | 2014-08-06 |
| CVE-2005-2058 EXP | Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitrary SQL commands via the Numbe… | Patch early | 7.5 high | 1.2% | 2005-06-29 |
| CVE-2005-2989 EXP | Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) tid parameter to… | Patch early | 7.5 high | 1.2% | 2005-09-20 |
| CVE-2006-5017 EXP | SQL injection vulnerability in admin/all_users.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to execute arbit… | Patch early | 7.5 high | 1.2% | 2006-09-27 |
| CVE-2000-0119 EXP | The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED folder that is used by the Wi… | Patch early | 7.2 high | 1.2% | 1999-12-22 |
| CVE-2007-2661 EXP | SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to execute arbitrary SQL commands via the var parameter, a different… | Patch early | 7.5 high | 1.2% | 2007-05-14 |
| CVE-2007-3077 EXP | SQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the rank param… | Patch early | 7.5 high | 1.2% | 2007-06-06 |
| CVE-2007-3518 EXP | SQL injection vulnerability in msg.php in HispaH YouTube Clone Script (youtubeclone) allows remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.2% | 2007-07-03 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt