CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,569 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
12,663 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2007-2312 EXP | Multiple SQL injection vulnerabilities in the Virtual War (VWar) 1.5.0 R15 module for PHP-Nuke allow remote attackers to execute arbitrary SQL command… | Patch early | 7.5 high | 1.2% | 2007-04-26 |
| CVE-2007-2320 EXP | SQL injection vulnerability in kontakt.php in Papoo 3.02 and earlier allows remote attackers to execute arbitrary SQL commands via the menuid paramete… | Patch early | 7.5 high | 1.2% | 2007-04-26 |
| CVE-2007-2549 EXP | SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to execute arbitrary SQL commands via th… | Patch early | 7.5 high | 1.2% | 2007-05-09 |
| CVE-2007-2735 EXP | SQL injection vulnerability in edit_day.php in the ResManager 1.2.1 and earlier module for Xoops allows remote attackers to execute arbitrary SQL comm… | Patch early | 7.5 high | 1.2% | 2007-05-17 |
| CVE-2007-2854 EXP | Multiple SQL injection vulnerabilities in account_change.php in BtiTracker 1.4.1 and earlier allow remote attackers to execute arbitrary SQL commands… | Patch early | 7.5 high | 1.2% | 2007-05-24 |
| CVE-2007-2890 EXP | SQL injection vulnerability in category.php in cpCommerce 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id_categ… | Patch early | 7.5 high | 1.2% | 2007-05-30 |
| CVE-2007-3051 EXP | SQL injection vulnerability in inc/class_users.php in RevokeSoft RevokeBB 1.0 RC4 and earlier allows remote attackers to execute arbitrary SQL command… | Patch early | 7.5 high | 1.2% | 2007-06-06 |
| CVE-2007-3196 EXP | SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to execute arbitrary SQL commands via… | Patch early | 7.5 high | 1.2% | 2007-06-12 |
| CVE-2007-3430 EXP | SQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to execute arbitrary SQL commands via the submit parame… | Patch early | 7.5 high | 1.2% | 2007-06-27 |
| CVE-2007-3811 EXP | Multiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to news.php or (… | Patch early | 7.5 high | 1.2% | 2007-07-17 |
| CVE-2007-3981 EXP | SQL injection vulnerability in index.php in WSN Links Basic Edition allows remote attackers to execute arbitrary SQL commands via the catid parameter… | Patch early | 7.5 high | 1.2% | 2007-07-25 |
| CVE-2008-5736 EXP | Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p1, 7.0 before 7.0-RELEASE-p7,… | Patch early | 7.2 high | 1.2% | 2008-12-26 |
| CVE-2006-2097 EXP | SQL injection vulnerability in func_msg.php in Invision Power Board (IPB) 2.1.4 allows remote attackers to execute arbitrary SQL commands via the from… | Patch early | 7.5 high | 1.2% | 2006-04-29 |
| CVE-2013-2627 EXP | SQL injection vulnerability in action.php in Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to execute arbitrary SQL commands… | Patch early | 7.5 high | 1.2% | 2013-12-21 |
| CVE-2006-5957 EXP | Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to execute arbitrary SQL commands via the (1) groupid parameter in (a) bro… | Patch early | 7.5 high | 1.2% | 2006-11-17 |
| CVE-2007-6498 EXP | Multiple SQL injection vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to execute arbitrary SQL com… | Patch early | 7.5 high | 1.2% | 2007-12-20 |
| CVE-2008-4088 EXP | SQL injection vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute arbitrary SQL commands via the sid pa… | Patch early | 7.5 high | 1.2% | 2008-09-15 |
| CVE-2008-4092 EXP | SQL injection vulnerability in printfeature.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.2% | 2008-09-15 |
| CVE-2008-1750 EXP | SQL injection vulnerability in Integry Systems LiveCart 1.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id paramet… | Patch early | 7.5 high | 1.2% | 2008-04-11 |
| CVE-2008-1895 EXP | Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID p… | Patch early | 7.5 high | 1.2% | 2008-04-18 |
| CVE-2008-1921 EXP | SQL injection vulnerability in store_pages/category_list.php in 5th Avenue Shopping Cart 1.2 trial edition allows remote attackers to execute arbitrar… | Patch early | 7.5 high | 1.2% | 2008-04-23 |
| CVE-2008-1990 EXP | Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) cID parameter to defa… | Patch early | 7.5 high | 1.2% | 2008-04-27 |
| CVE-2008-2036 EXP | SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers to execute arbitrary SQL commands via the poll_id parameter… | Patch early | 7.5 high | 1.2% | 2008-04-30 |
| CVE-2008-3749 EXP | SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbitrary SQL commands via the id p… | Patch early | 7.5 high | 1.2% | 2008-08-21 |
| CVE-2008-3762 EXP | SQL injection vulnerability in onlinestatus_html.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary SQL com… | Patch early | 7.5 high | 1.2% | 2008-08-21 |
| CVE-2008-4889 EXP | SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to execute arbitrary SQL commands vi… | Patch early | 7.5 high | 1.2% | 2008-11-04 |
| CVE-2010-1493 EXP | SQL injection vulnerability in the AWDwall (com_awdwall) component before 1.5.5 for Joomla! allows remote attackers to execute arbitrary SQL commands… | Patch early | 7.5 high | 1.2% | 2010-04-23 |
| CVE-2010-1600 EXP | SQL injection vulnerability in the Media Mall Factory (com_mediamall) component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL com… | Patch early | 7.5 high | 1.2% | 2010-04-29 |
| CVE-2010-1706 EXP | Multiple SQL injection vulnerabilities in login.php in 2daybiz Auction Script allow remote attackers to execute arbitrary SQL commands via (1) the log… | Patch early | 7.5 high | 1.2% | 2010-05-04 |
| CVE-2010-2684 EXP | SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitrary SQL commands via the id pa… | Patch early | 7.5 high | 1.2% | 2010-07-12 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt