CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,492 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
12,663 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2007-6080 EXP | SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers to execute arbitrary SQL comma… | Patch early | 7.5 high | 1.2% | 2007-11-21 |
| CVE-2006-5879 EXP | SQL injection vulnerability in default1.asp in ASPPortal 4.0.0 beta and earlier allows remote attackers to execute arbitrary SQL commands via the Poll… | Patch early | 7.5 high | 1.2% | 2006-11-14 |
| CVE-2006-5892 EXP | SQL injection vulnerability in MoreInfo.asp in The Net Guys ASPired2Poll 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via… | Patch early | 7.5 high | 1.2% | 2006-11-14 |
| CVE-2006-5976 EXP | Multiple SQL injection vulnerabilities in admin_login.asp in BlogMe 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) Username… | Patch early | 7.5 high | 1.2% | 2006-11-20 |
| CVE-2006-6029 EXP | SQL injection vulnerability in vir_Login.asp in Property Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the UserName field. | Patch early | 7.5 high | 1.2% | 2006-11-21 |
| CVE-2007-1612 EXP | SQL injection vulnerability in index.php in Katalog Plyt Audio 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the kolum… | Patch early | 7.5 high | 1.2% | 2007-03-23 |
| CVE-2007-1616 EXP | SQL injection vulnerability in index.php in ScriptMagix Lyrics 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the recid… | Patch early | 7.5 high | 1.2% | 2007-03-23 |
| CVE-2008-6781 EXP | SQL injection vulnerability in directory.php in Sites for Scripts (SFS) Gaming Directory allows remote attackers to execute arbitrary SQL commands via… | Patch early | 7.5 high | 1.2% | 2009-05-01 |
| CVE-2005-1199 EXP | SQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to execute arbitrary SQL commands via the main parameter. | Patch early | 7.5 high | 1.2% | 2005-05-02 |
| CVE-2014-2540 EXP | SQL injection vulnerability in OrbitScripts Orbit Open Ad Server before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the site_d… | Patch early | 7.5 high | 1.2% | 2014-04-11 |
| CVE-2006-5914 EXP | SQL injection vulnerability in ls.php in SAMEDIA LandShop allows remote attackers to execute arbitrary SQL commands via the infield parameter. NOTE:… | Patch early | 7.5 high | 1.2% | 2006-11-15 |
| CVE-2006-5936 EXP | SQL injection vulnerability in dept.asp in SiteXpress E-Commerce System allows remote attackers to execute arbitrary SQL commands via the id parameter… | Patch early | 7.5 high | 1.2% | 2006-11-16 |
| CVE-2006-6021 EXP | SQL injection vulnerability in the login component in BestWebApp Dating Site allows remote attackers to execute arbitrary SQL commands via the (1) use… | Patch early | 7.5 high | 1.2% | 2006-11-21 |
| CVE-2006-6083 EXP | SQL injection vulnerability in search.asp in CreaScripts Creadirectory allows remote attackers to execute arbitrary SQL commands via the category para… | Patch early | 7.5 high | 1.2% | 2006-11-24 |
| CVE-2006-6181 EXP | Multiple SQL injection vulnerabilities in default.asp in ClickTech ClickContact allow remote attackers to execute arbitrary SQL commands via the (1) A… | Patch early | 7.5 high | 1.2% | 2006-12-01 |
| CVE-2006-6243 EXP | Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) did pa… | Patch early | 7.5 high | 1.2% | 2006-12-04 |
| CVE-2007-3402 EXP | SQL injection vulnerability in index.php in pagetool 1.07 allows remote attackers to execute arbitrary SQL commands via the news_id parameter in a pag… | Patch early | 7.5 high | 1.2% | 2007-06-26 |
| CVE-2007-3610 EXP | SQL injection vulnerability in categories_type.php in phpVID 0.9.9 allows remote attackers to execute arbitrary SQL commands via the cat parameter. | Patch early | 7.5 high | 1.2% | 2007-07-06 |
| CVE-1999-0014 EXP | Unauthorized privileged access or denial of service via dtappgather program in CDE. | Patch early | 7.2 high | 1.2% | 1998-01-21 |
| CVE-2004-0544 EXP | Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands. | Patch early | 7.2 high | 1.2% | 2004-08-06 |
| CVE-2017-7533 EXP | Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service (m… | Patch early | 7.0 high | 1.2% | 2017-08-05 |
| CVE-2006-3960 EXP | SQL injection vulnerability in top.php in X-Scripts X-Poll, probably 2.30, allows remote attackers to execute arbitrary SQL commands via the poll para… | Patch early | 7.5 high | 1.2% | 2006-08-01 |
| CVE-2007-0196 EXP | SQL injection vulnerability in admin_check_user.asp in Motionborg Web Real Estate 2.1 and earlier allows remote attackers to execute arbitrary SQL com… | Patch early | 7.5 high | 1.2% | 2007-01-11 |
| CVE-2006-5208 EXP | Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands via (1) the catid_search parame… | Patch early | 7.5 high | 1.2% | 2006-10-10 |
| CVE-2009-2230 EXP | SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4.7 allows remote authenticated users to execute arbit… | Patch early | 7.5 high | 1.2% | 2009-06-26 |
| CVE-2000-0317 EXP | Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option. | Patch early | 7.2 high | 1.2% | 2000-04-24 |
| CVE-2006-6780 EXP | SQL injection vulnerability in the login form in HLstats 1.20 through 1.34 allows remote attackers to execute arbitrary SQL commands via the killLimit… | Patch early | 7.5 high | 1.2% | 2006-12-28 |
| CVE-2007-1619 EXP | SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to execute arbitrary SQL commands… | Patch early | 7.5 high | 1.2% | 2007-03-23 |
| CVE-2007-1808 EXP | SQL injection vulnerability in show.php in the Camportail 1.1 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands v… | Patch early | 7.5 high | 1.2% | 2007-04-02 |
| CVE-2007-1810 EXP | SQL injection vulnerability in product_details.php in the Kshop 1.17 and earlier module for Xoops allows remote attackers to execute arbitrary SQL com… | Patch early | 7.5 high | 1.2% | 2007-04-02 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt