CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
405,610 CVEs
1,740 on KEV
17,302 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-13
10,149 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-2906 EXP | SQL injection vulnerability in lista_anexos.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL commands via the tsk_id parameter. | Patch early | 6.8 medium | 0.9% | 2008-06-30 |
| CVE-2008-2907 EXP | SQL injection vulnerability in admin/index.php in WebChamado 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL… | Patch early | 6.8 medium | 0.9% | 2008-06-30 |
| CVE-2008-5877 EXP | Multiple SQL injection vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc is disabled, allow remote atta… | Patch early | 6.8 medium | 0.9% | 2009-01-08 |
| CVE-2008-6146 EXP | SQL injection vulnerability in pm.php in DeluxeBB 1.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL… | Patch early | 6.8 medium | 0.9% | 2009-02-16 |
| CVE-2008-6907 EXP | Multiple SQL injection vulnerabilities in checkuser.php in 2532designs 2532|Gigs 1.2.2 Stable, when magic_quotes_gpc is disabled, allow remote attacke… | Patch early | 6.8 medium | 0.9% | 2009-08-06 |
| CVE-2026-51133 EXP | Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows a remote attacker to execute arbitrary code via the… | Patch early | 6.1 medium | 0.9% | 2026-09-15 |
| CVE-2008-3561 EXP | SQL injection vulnerability in s03.php in Powergap Shopsystem, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL com… | Patch early | 6.8 medium | 0.9% | 2008-08-10 |
| CVE-2008-4701 EXP | SQL injection vulnerability in admin.php in Libera CMS 1.12, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL comma… | Patch early | 6.8 medium | 0.9% | 2008-10-22 |
| CVE-2009-2242 EXP | SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via… | Patch early | 6.8 medium | 0.9% | 2009-06-27 |
| CVE-2009-2554 EXP | SQL injection vulnerability in the search method in jobline.class.php in Jobline (com_jobline) 1.1.2.2, 1.3.1, and possibly earlier versions, a compon… | Patch early | 6.8 medium | 0.9% | 2009-07-20 |
| CVE-2009-2608 EXP | Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to… | Patch early | 6.8 medium | 0.9% | 2009-07-27 |
| CVE-2009-4805 EXP | Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands… | Patch early | 6.8 medium | 0.9% | 2010-04-23 |
| CVE-2009-4925 EXP | Multiple SQL injection vulnerabilities in Portale e-commerce Creasito (aka creasito e-commerce content manager) 1.3.16, when magic_quotes_gpc is disab… | Patch early | 6.8 medium | 0.9% | 2010-07-12 |
| CVE-2009-4982 EXP | SQL injection vulnerability in the select function in Irokez CMS 0.7.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrar… | Patch early | 6.8 medium | 0.9% | 2010-08-25 |
| CVE-2008-6572 EXP | SQL injection vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to execute arbitrary SQL commands via the keyword… | Patch early | 6.8 medium | 0.9% | 2009-03-31 |
| CVE-2000-1199 EXP | PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain acce… | Patch early | 4.6 medium | 0.9% | 2001-08-31 |
| CVE-2007-1255 EXP | Unrestricted file upload vulnerability in admin.bbcode.php in Connectix Boards 0.7 and earlier allows remote authenticated administrators to execute a… | Patch early | 6.0 medium | 0.9% | 2007-03-03 |
| CVE-2009-1237 EXP | Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a denial of service (kernel memory… | Patch early | 4.9 medium | 0.9% | 2009-04-02 |
| CVE-2010-3858 EXP | The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does not properly restrict the stack… | Patch early | 4.9 medium | 0.9% | 2010-11-30 |
| CVE-2010-4243 EXP | fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguments and… | Patch early | 4.9 medium | 0.9% | 2011-01-22 |
| CVE-2008-0453 EXP | SQL injection vulnerability in list.php in Easysitenetwork Recipe allows remote attackers to execute arbitrary SQL commands via the categoryid paramet… | Patch early | 6.8 medium | 0.9% | 2008-01-25 |
| CVE-2008-1398 EXP | SQL injection vulnerability in online.php in AuraCMS 2.0 through 2.2.1 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-F… | Patch early | 6.8 medium | 0.9% | 2008-03-20 |
| CVE-2008-1462 EXP | SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid paramet… | Patch early | 6.8 medium | 0.9% | 2008-03-24 |
| CVE-2008-1789 EXP | SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter. | Patch early | 6.8 medium | 0.9% | 2008-04-15 |
| CVE-2008-2963 EXP | Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to (a) index.php,… | Patch early | 6.8 medium | 0.9% | 2008-07-02 |
| CVE-2008-3131 EXP | SQL injection vulnerability in chatbox.php in pSys 0.7.0 Alpha, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL co… | Patch early | 6.8 medium | 0.9% | 2008-07-10 |
| CVE-2008-3452 EXP | SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the loc_id parameter… | Patch early | 6.8 medium | 0.9% | 2008-08-04 |
| CVE-2008-4093 EXP | SQL injection vulnerability in memberstats.php in YourOwnBux 3.1 and 3.2 beta, when magic_quotes_gpc is disabled, allows remote attackers to execute a… | Patch early | 6.8 medium | 0.9% | 2008-09-15 |
| CVE-2008-4666 EXP | SQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to execute arbitrary SQL commands via the Category param… | Patch early | 6.8 medium | 0.9% | 2008-10-22 |
| CVE-2008-4711 EXP | SQL injection vulnerability in Joovili 3.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands v… | Patch early | 6.8 medium | 0.9% | 2008-10-23 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt