CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,509 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
12,663 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2014-9141 EXP | The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arb… | Patch early | 7.2 high | 1.2% | 2014-12-03 |
| CVE-2006-6937 EXP | SQL injection vulnerability in displaypic.asp in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary SQL commands via the sortorder p… | Patch early | 7.5 high | 1.2% | 2007-01-17 |
| CVE-2017-1000409 EXP | A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environment variable. Please note tha… | Patch early | 7.0 high | 1.2% | 2018-02-01 |
| CVE-2016-9151 EXP | Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 al… | Patch early | 7.8 high | 1.2% | 2016-11-19 |
| CVE-2007-5643 EXP | Multiple SQL injection vulnerabilities in Lussumo Vanilla 1.1.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the Categ… | Patch early | 7.5 high | 1.2% | 2007-10-23 |
| CVE-2007-6576 EXP | Multiple SQL injection vulnerabilities in Adult Script 1.6.5 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter… | Patch early | 7.5 high | 1.2% | 2007-12-28 |
| CVE-2019-3842 EXP | In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is po… | Patch early | 7.0 high | 1.2% | 2019-04-09 |
| CVE-2005-4232 EXP | SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat pa… | Patch early | 7.5 high | 1.2% | 2005-12-14 |
| CVE-2008-2633 EXP | Multiple SQL injection vulnerabilities in the EXP JoomRadio (com_joomradio) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL… | Patch early | 7.5 high | 1.2% | 2008-06-10 |
| CVE-2007-1166 EXP | SQL injection vulnerability in result.php in Nabopoll 1.2 allows remote attackers to execute arbitrary SQL commands via the surv parameter. | Patch early | 7.5 high | 1.2% | 2007-03-02 |
| CVE-2008-5289 EXP | SQL injection vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to execute arbitrary SQL commands via the id par… | Patch early | 7.5 high | 1.2% | 2008-12-01 |
| CVE-2015-7358 EXP | The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, does not prop… | Patch early | 7.8 high | 1.2% | 2017-10-03 |
| CVE-2018-5189 EXP | Race condition in Jungo Windriver 12.5.1 allows local users to cause a denial of service (buffer overflow) or gain system privileges by flipping pool… | Patch early | 7.8 high | 1.2% | 2018-01-11 |
| CVE-2015-4685 EXP | Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var… | Patch early | 7.0 high | 1.2% | 2017-09-19 |
| CVE-2010-5317 EXP | Multiple SQL injection vulnerabilities in index.php in SweetRice CMS before 0.6.7.1 allow remote attackers to execute arbitrary SQL commands via (1) t… | Patch early | 7.5 high | 1.2% | 2015-01-03 |
| CVE-2011-5313 EXP | Multiple SQL injection vulnerabilities in includes/password.php in Redaxscript 0.3.2 allow remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.2% | 2015-01-01 |
| CVE-2014-100012 EXP | SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i parameter. | Patch early | 7.5 high | 1.2% | 2015-01-13 |
| CVE-2014-8728 EXP | SQL injection vulnerability in the login page (login/login) in Subex ROC Fraud Management (aka Fraud Management System and FMS) 7.4 and earlier allows… | Patch early | 7.5 high | 1.2% | 2014-12-02 |
| CVE-2007-2543 EXP | SQL injection vulnerability in game.php in the Flashgames 1.0.1 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the lid… | Patch early | 7.5 high | 1.2% | 2007-05-09 |
| CVE-2005-3748 EXP | SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary… | Patch early | 7.5 high | 1.2% | 2005-11-22 |
| CVE-2007-3188 EXP | SQL injection vulnerability in down_indir.asp in Fullaspsite GeometriX Download Portal allows remote attackers to execute arbitrary SQL commands via t… | Patch early | 7.5 high | 1.2% | 2007-06-12 |
| CVE-2007-3583 EXP | SQL injection vulnerability in details_news.php in Girlserv ads 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the idne… | Patch early | 7.5 high | 1.2% | 2007-07-05 |
| CVE-2007-3683 EXP | SQL injection vulnerability in pagetopic.php in Aigaion 1.3.3 and earlier allows remote attackers to execute arbitrary SQL commands via the topic_id p… | Patch early | 7.5 high | 1.2% | 2007-07-11 |
| CVE-2015-6305 EXP | Untrusted search path vulnerability in the CMainThread::launchDownloader function in vpndownloader.exe in Cisco AnyConnect Secure Mobility Client 2.0… | Patch early | 7.2 high | 1.2% | 2015-09-26 |
| CVE-2001-1561 EXP | Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) -T arguments. | Patch early | 7.2 high | 1.2% | 2001-12-31 |
| CVE-2000-0340 EXP | Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable. | Patch early | 7.2 high | 1.2% | 2000-04-29 |
| CVE-2002-0184 EXP | Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via… | Patch early | 7.8 high | 1.2% | 2002-05-16 |
| CVE-2016-1611 EXP | Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.sh, which allows local users t… | Patch early | 7.8 high | 1.2% | 2016-08-01 |
| CVE-2010-0955 EXP | SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.2% | 2010-03-10 |
| CVE-2010-1270 EXP | SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitrary SQL commands via the id_au… | Patch early | 7.5 high | 1.2% | 2010-04-06 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt