CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,806 CVEs
1,739 on KEV
17,301 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
12,663 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2006-6787 EXP | SQL injection vulnerability in admin/admin_mail_adressee.asp in Newsletter MX 1.0.2 and earlier allows remote attackers to execute arbitrary SQL comma… | Patch early | 7.5 high | 1.2% | 2006-12-28 |
| CVE-2006-5622 EXP | SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary SQL commands via the aid para… | Patch early | 7.5 high | 1.2% | 2006-10-31 |
| CVE-2002-0961 EXP | Vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allow remote attackers to conduct unauthorized operations as other users, e.g. by deleting clien… | Patch early | 7.5 high | 1.2% | 2002-10-04 |
| CVE-2007-6466 EXP | Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the prod par… | Patch early | 7.5 high | 1.2% | 2007-12-20 |
| CVE-2008-3954 EXP | SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands via the c… | Patch early | 7.5 high | 1.2% | 2008-09-11 |
| CVE-2000-0949 EXP | Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option. | Patch early | 7.2 high | 1.2% | 2000-12-19 |
| CVE-2007-3812 EXP | SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL commands via the f parameter in… | Patch early | 7.5 high | 1.2% | 2007-07-17 |
| CVE-2007-4109 EXP | SQL injection vulnerability in sign_in.aspx in WebStore (Online Store Application Template) allows remote attackers to execute arbitrary SQL commands… | Patch early | 7.5 high | 1.2% | 2007-07-31 |
| CVE-2001-0112 EXP | Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands. | Patch early | 7.2 high | 1.2% | 2001-03-12 |
| CVE-2006-7116 EXP | SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbitrary SQL commands and bypass au… | Patch early | 7.5 high | 1.2% | 2007-03-06 |
| CVE-2007-2685 EXP | Multiple SQL injection vulnerabilities in index.php in Jetbox CMS 2.1 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2)… | Patch early | 7.5 high | 1.2% | 2007-05-21 |
| CVE-2014-7822 EXP | The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a sin… | Patch early | 7.2 high | 1.2% | 2015-03-16 |
| CVE-2010-1994 EXP | SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in co… | Patch early | 7.5 high | 1.2% | 2010-05-20 |
| CVE-2010-4268 EXP | SQL injection vulnerability in the Pulse Infotech Flip Wall (com_flipwall) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL… | Patch early | 7.5 high | 1.2% | 2010-11-17 |
| CVE-2008-5737 EXP | SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the user… | Patch early | 7.5 high | 1.2% | 2008-12-26 |
| CVE-2009-0445 EXP | SQL injection vulnerability in index.php in Dreampics Gallery Builder allows remote attackers to execute arbitrary SQL commands via the exhibition_id… | Patch early | 7.5 high | 1.2% | 2009-02-10 |
| CVE-2009-2308 EXP | Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation (aka Affiliates) module 1.1.0 and earlier for PunBB allow remote attackers… | Patch early | 7.5 high | 1.2% | 2009-07-02 |
| CVE-2009-2894 EXP | Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to product… | Patch early | 7.5 high | 1.2% | 2009-08-20 |
| CVE-2009-4576 EXP | SQL injection vulnerability in the BeeHeard (com_beeheard) component 1.x for Joomla! allows remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.2% | 2010-01-06 |
| CVE-2009-4598 EXP | SQL injection vulnerability in the JPhoto (com_jphoto) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id… | Patch early | 7.5 high | 1.2% | 2010-01-12 |
| CVE-2010-0720 EXP | SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.2% | 2010-02-26 |
| CVE-2007-5181 EXP | SQL injection vulnerability in detay.asp in Netkamp Emlak Scripti allows remote attackers to execute arbitrary SQL commands via the ilan_id parameter. | Patch early | 7.5 high | 1.2% | 2007-10-03 |
| CVE-2007-5679 EXP | SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute arbitrary SQL commands via the id paramete… | Patch early | 7.5 high | 1.2% | 2007-10-25 |
| CVE-2008-0429 EXP | SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via t… | Patch early | 7.5 high | 1.2% | 2008-01-23 |
| CVE-2008-3370 EXP | SQL injection vulnerability in the CUA Login Module in EMC Centera Universal Access (CUA) 4.0_4735.p4 allows remote attackers to execute arbitrary SQL… | Patch early | 7.5 high | 1.2% | 2008-07-30 |
| CVE-2007-1920 EXP | SQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier allows remote attackers to execute arbitrary SQL comman… | Patch early | 7.5 high | 1.2% | 2007-04-10 |
| CVE-1999-0034 EXP | Buffer overflow in suidperl (sperl), Perl 4.x and 5.x. | Patch early | 7.2 high | 1.2% | 1997-05-29 |
| CVE-2005-2009 EXP | Multiple SQL injection vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) ci, (2) d, or (3) m… | Patch early | 7.5 high | 1.2% | 2005-06-20 |
| CVE-2000-0795 EXP | Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option. | Patch early | 7.2 high | 1.2% | 2000-10-20 |
| CVE-2017-15808 EXP | In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php. | Patch early | 8.8 high | 1.2% | 2017-10-23 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt