CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,492 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
12,663 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2007-2750 EXP | SQL injection vulnerability in print.php in SimpNews 2.40.01 and earlier allows remote attackers to execute arbitrary SQL commands via the newsnr para… | Patch early | 7.5 high | 1.2% | 2007-05-17 |
| CVE-2007-3520 EXP | SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL commands via the CategoryID pa… | Patch early | 7.5 high | 1.2% | 2007-07-03 |
| CVE-2007-3631 EXP | SQL injection vulnerability in index.php in GameSiteScript (gss) 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the par… | Patch early | 7.5 high | 1.2% | 2007-07-10 |
| CVE-2007-3810 EXP | SQL injection vulnerability in index.php in Realtor 747 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter. | Patch early | 7.5 high | 1.2% | 2007-07-17 |
| CVE-2007-4128 EXP | SQL injection vulnerability in index.php in the Firestorm Technologies GMaps (com_gmaps) 1.00 component for Joomla! allows remote attackers to execute… | Patch early | 7.5 high | 1.2% | 2007-08-01 |
| CVE-2010-1344 EXP | SQL injection vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote attackers to execute arbitrary SQL co… | Patch early | 7.5 high | 1.2% | 2010-04-09 |
| CVE-2010-1477 EXP | SQL injection vulnerability in the SermonSpeaker (com_sermonspeaker) component before 3.2.1 for Joomla! allows remote attackers to execute arbitrary S… | Patch early | 7.5 high | 1.2% | 2010-04-19 |
| CVE-2005-3877 EXP | Multiple SQL injection vulnerabilities in Simple Document Management System (SDMS) 2.0-CVS and earlier allow remote attackers to execute arbitrary SQL… | Patch early | 7.5 high | 1.2% | 2005-11-29 |
| CVE-2007-4892 EXP | Multiple SQL injection vulnerabilities in SWSoft Plesk 7.6.1, 8.1.0, 8.1.1, and 8.2.0 for Windows allow remote attackers to execute arbitrary SQL comm… | Patch early | 7.5 high | 1.2% | 2007-09-14 |
| CVE-2008-6418 EXP | SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitrary SQL commands via the info_ha… | Patch early | 7.5 high | 1.2% | 2009-03-06 |
| CVE-2013-2498 EXP | SQL injection vulnerability in the login page in flexycms/modules/user/user_manager.php in SimpleHRM 2.3, 2.2, and earlier allows remote attackers to… | Patch early | 7.5 high | 1.2% | 2014-03-01 |
| CVE-2014-2847 EXP | SQL injection vulnerability in default.asp in CIS Manager CMS allows remote attackers to execute arbitrary SQL commands via the TroncoID parameter. | Patch early | 7.5 high | 1.2% | 2014-04-11 |
| CVE-2006-0668 EXP | SQL injection vulnerability in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in m… | Patch early | 7.5 high | 1.2% | 2006-02-13 |
| CVE-2004-2350 EXP | SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL and gain privileges via the sea… | Patch early | 7.5 high | 1.2% | 2004-12-31 |
| CVE-2004-2413 EXP | SQL injection vulnerability in VP-ASP Shopping Cart 4.0 through 5.0 allows remote attackers to execute arbitrary SQL commands via the (1) Processed0 a… | Patch early | 7.5 high | 1.2% | 2004-12-31 |
| CVE-2009-1910 EXP | SQL injection vulnerability in index.php in RTWebalbum 1.0.462 allows remote attackers to execute arbitrary SQL commands via the AlbumId parameter. | Patch early | 7.5 high | 1.2% | 2009-06-04 |
| CVE-2010-0762 EXP | SQL injection vulnerability in index.php in CommodityRentals CD Rental Software allows remote attackers to execute arbitrary SQL commands via the cat_… | Patch early | 7.5 high | 1.2% | 2010-03-02 |
| CVE-2007-0575 EXP | Multiple SQL injection vulnerabilities in the administrative login page (admin/login.asp) in ASPCode.net AdMentor allow remote attackers to execute ar… | Patch early | 7.5 high | 1.2% | 2007-01-30 |
| CVE-2007-3563 EXP | SQL injection vulnerability in includes/view_page.php in AV Arcade 2.1b allows remote attackers to execute arbitrary SQL commands via the id parameter… | Patch early | 7.5 high | 1.2% | 2007-07-04 |
| CVE-2007-3987 EXP | SQL injection vulnerability in SearchResults.asp in ImageRacer 1.0, when WordSearchCrit is enabled, allows remote attackers to execute arbitrary SQL c… | Patch early | 7.5 high | 1.2% | 2007-07-25 |
| CVE-2016-10156 EXP | A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local a… | Patch early | 7.8 high | 1.2% | 2017-01-23 |
| CVE-2007-0984 EXP | SQL injection vulnerability in admin_poll.asp in PollMentor 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to poll… | Patch early | 7.5 high | 1.2% | 2007-02-16 |
| CVE-2004-1925 EXP | Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via… | Patch early | 7.5 high | 1.2% | 2004-04-12 |
| CVE-2006-6038 EXP | SQL injection vulnerability in editpoll.php in Powie's PHP Forum (pForum) 1.29a and earlier allows remote attackers to execute arbitrary SQL commands… | Patch early | 7.5 high | 1.2% | 2006-11-22 |
| CVE-2006-0821 EXP | SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via the tid parameter. | Patch early | 7.5 high | 1.2% | 2006-02-21 |
| CVE-2010-4861 EXP | SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands via the search parameter. | Patch early | 7.5 high | 1.2% | 2011-10-05 |
| CVE-2000-0520 EXP | Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands via a long tape name. | Patch early | 7.2 high | 1.2% | 2000-06-07 |
| CVE-2001-0115 EXP | Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter. | Patch early | 7.2 high | 1.2% | 2001-03-12 |
| CVE-2014-9005 EXP | Multiple SQL injection vulnerabilities in vldPersonals before 2.7.1 allow remote attackers to execute arbitrary SQL commands via the (1) country, (2)… | Patch early | 7.5 high | 1.2% | 2014-11-20 |
| CVE-2007-1555 EXP | SQL injection vulnerability in forum.php in the Minerva mod 2.0.21 build 238a and earlier for phpBB allows remote attackers to execute arbitrary SQL c… | Patch early | 7.5 high | 1.2% | 2007-03-20 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt