CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,621 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
12,663 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2010-2688 EXP | SQL injection vulnerability in detail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL commands via the ID parameter… | Patch early | 7.5 high | 1.2% | 2010-07-12 |
| CVE-2010-2721 EXP | SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary SQL commands via the artist_id… | Patch early | 7.5 high | 1.2% | 2010-07-13 |
| CVE-2010-2853 EXP | SQL injection vulnerability in flashPlayer/playVideo.php in iScripts VisualCaster allows remote attackers to execute arbitrary SQL commands via the pr… | Patch early | 7.5 high | 1.2% | 2010-07-25 |
| CVE-2010-4800 EXP | SQL injection vulnerability in doadd.php in BaconMap 1.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. | Patch early | 7.5 high | 1.2% | 2011-04-27 |
| CVE-2010-4921 EXP | SQL injection vulnerability in inc_pollingboothmanager.asp in DMXReady Polling Booth Manager allows remote attackers to execute arbitrary SQL commands… | Patch early | 7.5 high | 1.2% | 2011-10-08 |
| CVE-2010-4926 EXP | SQL injection vulnerability in the TimeTrack (com_timetrack) component 1.2.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via… | Patch early | 7.5 high | 1.2% | 2011-10-09 |
| CVE-2010-4963 EXP | SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the order_by parameter. | Patch early | 7.5 high | 1.2% | 2011-10-09 |
| CVE-2010-4972 EXP | SQL injection vulnerability in index.php in YPNinc JokeScript allows remote attackers to execute arbitrary SQL commands via the ypncat_id parameter. | Patch early | 7.5 high | 1.2% | 2011-11-01 |
| CVE-2010-4974 EXP | SQL injection vulnerability in info.php in BrotherScripts (BS) and ScriptsFeed Auto Dealer allows remote attackers to execute arbitrary SQL commands v… | Patch early | 7.5 high | 1.2% | 2011-11-01 |
| CVE-2010-4983 EXP | SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.2% | 2011-11-01 |
| CVE-2010-5012 EXP | SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE:… | Patch early | 7.5 high | 1.2% | 2011-11-02 |
| CVE-2010-5013 EXP | SQL injection vulnerability in listing_detail.asp in Mckenzie Creations Virtual Real Estate Manager (VRM) 3.5 allows remote attackers to execute arbit… | Patch early | 7.5 high | 1.2% | 2011-11-02 |
| CVE-2010-5021 EXP | SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to execute arbitrary SQL commands… | Patch early | 7.5 high | 1.2% | 2011-11-02 |
| CVE-2012-6626 EXP | SQL injection vulnerability in verify-user.php in b2ePMS 1.0 allows remote attackers to execute arbitrary SQL commands via the username field. | Patch early | 7.5 high | 1.2% | 2014-01-16 |
| CVE-2008-5493 EXP | SQL injection vulnerability in track.php in PHPStore Wholesales (aka Wholesale) allows remote attackers to execute arbitrary SQL commands via the id p… | Patch early | 7.5 high | 1.2% | 2008-12-12 |
| CVE-2008-5496 EXP | SQL injection vulnerability in showcategory.php in PozScripts Business Directory Script allows remote attackers to execute arbitrary SQL commands via… | Patch early | 7.5 high | 1.2% | 2008-12-12 |
| CVE-2008-5772 EXP | Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via the (1)… | Patch early | 7.5 high | 1.2% | 2008-12-30 |
| CVE-2008-6101 EXP | SQL injection vulnerability in click.php in Adult Banner Exchange Website allows remote attackers to execute arbitrary SQL commands via the targetid p… | Patch early | 7.5 high | 1.2% | 2009-02-10 |
| CVE-2010-0614 EXP | SQL injection vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to execute arbitrary SQL commands via the query parameter in the (1… | Patch early | 7.5 high | 1.2% | 2010-02-11 |
| CVE-2010-0671 EXP | SQL injection vulnerability in index.php in KR MEDIA Pogodny CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a n… | Patch early | 7.5 high | 1.2% | 2010-02-22 |
| CVE-2010-0753 EXP | SQL injection vulnerability in the SQL Reports (com_sqlreport) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via… | Patch early | 7.5 high | 1.2% | 2010-02-27 |
| CVE-2010-0761 EXP | SQL injection vulnerability in index.php in CommodityRentals Books/eBooks Rentals Script allows remote attackers to execute arbitrary SQL commands via… | Patch early | 7.5 high | 1.2% | 2010-03-02 |
| CVE-2010-0981 EXP | SQL injection vulnerability in the TPJobs (com_tpjobs) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id_c[]… | Patch early | 7.5 high | 1.2% | 2010-03-16 |
| CVE-2014-7286 EXP | Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local users to gain privileges via uns… | Patch early | 7.2 high | 1.2% | 2014-12-22 |
| CVE-2003-1244 EXP | SQL injection vulnerability in page_header.php in phpBB 2.0, 2.0.1 and 2.0.2 allows remote attackers to brute force user passwords and possibly gain u… | Patch early | 7.5 high | 1.2% | 2003-12-31 |
| CVE-2008-6214 EXP | SQL injection vulnerability in poll_results.php in Harlandscripts Pro Traffic One allows remote attackers to execute arbitrary SQL commands via the id… | Patch early | 7.5 high | 1.2% | 2009-02-20 |
| CVE-2008-1137 EXP | SQL injection vulnerability in the Garys Cookbook (com_garyscookbook) 1.1.1 and earlier component for Mambo and Joomla! allows remote attackers to exe… | Patch early | 7.5 high | 1.2% | 2008-03-04 |
| CVE-2008-1954 EXP | SQL injection vulnerability in one_day.php in Web Calendar Pro 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user_… | Patch early | 7.5 high | 1.2% | 2008-04-25 |
| CVE-2008-1957 EXP | SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands via the nb parameter in voir m… | Patch early | 7.5 high | 1.2% | 2008-04-25 |
| CVE-2008-4054 EXP | SQL injection vulnerability in indir.php in Kolifa.net Download Script 1.2 allows remote attackers to execute arbitrary SQL commands via the id parame… | Patch early | 7.5 high | 1.2% | 2008-09-11 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt