CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,569 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
12,663 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2004-1962 EXP | SQL injection vulnerability in index.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection filters by using "/**/" sequences… | Patch early | 7.5 high | 1.2% | 2004-12-31 |
| CVE-2007-6559 EXP | Multiple SQL injection vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to execute arbitrary SQL commands via (1) the from parameter… | Patch early | 7.5 high | 1.2% | 2007-12-28 |
| CVE-2011-5183 EXP | Multiple SQL injection vulnerabilities in OrderSys 1.6.4 and earlier allow remote attackers to execute arbitrary SQL commands via the where_clause par… | Patch early | 7.5 high | 1.2% | 2012-09-20 |
| CVE-2007-3119 EXP | SQL injection vulnerability in news.asp in Kartli Alisveris Sistemi (aka Free-PayPal-Shopping-Cart) 1.0 allows remote attackers to execute arbitrary S… | Patch early | 7.5 high | 1.2% | 2007-06-07 |
| CVE-2007-6137 EXP | SQL injection vulnerability in news.php in Content Injector 1.52 allows remote attackers to execute arbitrary SQL commands via the cat parameter to in… | Patch early | 7.5 high | 1.2% | 2007-11-27 |
| CVE-2007-6472 EXP | Multiple SQL injection vulnerabilities in phpMyRealty (PMR) 1.0.9 allow (1) remote attackers to execute arbitrary SQL commands via the type parameter… | Patch early | 7.5 high | 1.2% | 2007-12-20 |
| CVE-2008-3346 EXP | SQL injection vulnerability in product_detail.php in ShopCart DX allows remote attackers to execute arbitrary SQL commands via the pid parameter. | Patch early | 7.5 high | 1.2% | 2008-07-28 |
| CVE-2008-4495 EXP | SQL injection vulnerability in view_cat.php in PHP Auto Dealer 2.7 allows remote attackers to execute arbitrary SQL commands via the v_cat parameter. | Patch early | 7.5 high | 1.2% | 2008-10-09 |
| CVE-2008-4496 EXP | SQL injection vulnerability in view_cat.php in PHP Realtor 1.5 allows remote attackers to execute arbitrary SQL commands via the v_cat parameter. | Patch early | 7.5 high | 1.2% | 2008-10-09 |
| CVE-2006-6747 EXP | SQL injection vulnerability in show_news.php in Xt-News 0.1 allows remote attackers to execute arbitrary SQL commands via the id_news parameter. | Patch early | 7.5 high | 1.2% | 2006-12-27 |
| CVE-1999-0767 EXP | Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable. | Patch early | 7.2 high | 1.2% | 1999-09-08 |
| CVE-2000-1175 EXP | Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument. | Patch early | 7.2 high | 1.2% | 2001-01-09 |
| CVE-2007-2259 EXP | SQL injection vulnerability in forum.php in EsForum 3.0 allows remote attackers to execute arbitrary SQL commands via the idsalon parameter. | Patch early | 7.5 high | 1.2% | 2007-04-25 |
| CVE-2008-0832 EXP | SQL injection vulnerability in index.php in the Kemas Antonius com_quran 1.1 and earlier component for Mambo and Joomla! allows remote attackers to ex… | Patch early | 7.5 high | 1.2% | 2008-02-20 |
| CVE-2008-1336 EXP | SQL injection vulnerability in Koobi CMS 4.2.3 through 4.3.0 allows remote attackers to execute arbitrary SQL commands via the categ parameter in a li… | Patch early | 7.5 high | 1.2% | 2008-03-13 |
| CVE-2008-1763 EXP | SQL injection vulnerability in _blogadata/include/sond_result.php in Blogator-script 0.95 allows remote attackers to execute arbitrary SQL commands vi… | Patch early | 7.5 high | 1.2% | 2008-04-12 |
| CVE-2008-2626 EXP | SQL injection vulnerability in comment.asp in Battle Blog 1.25 and earlier allows remote attackers to execute arbitrary SQL commands via the entry par… | Patch early | 7.5 high | 1.2% | 2008-06-10 |
| CVE-2008-3238 EXP | Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via (1) the seller_id parameter… | Patch early | 7.5 high | 1.2% | 2008-07-21 |
| CVE-2008-3413 EXP | SQL injection vulnerability in category.php in Greatclone GC Auction Platinum allows remote attackers to execute arbitrary SQL commands via the cate_i… | Patch early | 7.5 high | 1.2% | 2008-07-31 |
| CVE-2008-3414 EXP | SQL injection vulnerability in line2.php in SiteAdmin allows remote attackers to execute arbitrary SQL commands via the art parameter. | Patch early | 7.5 high | 1.2% | 2008-07-31 |
| CVE-2008-3580 EXP | Multiple SQL injection vulnerabilities in Qsoft K-Links allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to visit.php… | Patch early | 7.5 high | 1.2% | 2008-08-10 |
| CVE-2008-4755 EXP | SQL injection vulnerability in gotourl.php in PozScripts Classified Auctions Script allows remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.2% | 2008-10-28 |
| CVE-2008-5365 EXP | SQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.2% | 2008-12-08 |
| CVE-2008-5573 EXP | SQL injection vulnerability in the login feature in Poll Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) Password and (2… | Patch early | 7.5 high | 1.2% | 2008-12-15 |
| CVE-2008-5640 EXP | SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter. | Patch early | 7.5 high | 1.2% | 2008-12-17 |
| CVE-2008-6394 EXP | SQL injection vulnerability in core/user.php in CS-Cart 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the cs_cookies… | Patch early | 7.5 high | 1.2% | 2009-03-04 |
| CVE-2008-6425 EXP | SQL injection vulnerability in news.php in ComicShout 2.8 allows remote attackers to execute arbitrary SQL commands via the news_id parameter, a diffe… | Patch early | 7.5 high | 1.2% | 2009-03-06 |
| CVE-2010-1721 EXP | SQL injection vulnerability in the Intellectual Property (aka IProperty or com_iproperty) component 1.5.3 for Joomla! allows remote attackers to execu… | Patch early | 7.5 high | 1.2% | 2010-05-04 |
| CVE-2007-1630 EXP | SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Link Engine allows remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.2% | 2007-03-23 |
| CVE-2007-1696 EXP | SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execute arbitrary SQL commands via t… | Patch early | 7.5 high | 1.2% | 2007-03-27 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt