CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,852 CVEs
1,739 on KEV
17,301 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
12,663 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2007-1556 EXP | SQL injection vulnerability in kommentare.php in Creative Files 1.2 allows remote attackers to execute arbitrary SQL commands via the dlid parameter. | Patch early | 7.5 high | 1.2% | 2007-03-21 |
| CVE-2005-4486 EXP | SQL injection vulnerability in Quantum Art QP7.Enterprise (formerly Q-Publishing) allows remote attackers to execute arbitrary SQL commands via the p_… | Patch early | 7.5 high | 1.2% | 2005-12-22 |
| CVE-2007-1445 EXP | SQL injection vulnerability in the heme preview feature for default.asp in BP Blog 7.0 through 7.0.2 allows remote attackers to execute arbitrary SQL… | Patch early | 7.5 high | 1.2% | 2007-03-14 |
| CVE-2005-2675 EXP | Note: the vendor has disputed this issue. Multiple SQL injection vulnerabilities in Land Down Under (LDU) 800 allow remote attackers to execute arbitr… | Patch early | 7.5 high | 1.2% | 2005-08-23 |
| CVE-2005-2896 EXP | SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_userpw parameter to startup.php,… | Patch early | 7.5 high | 1.2% | 2005-09-14 |
| CVE-2005-3509 EXP | Multiple SQL injection vulnerabilities in JPortal allow remote attackers to execute arbitrary SQL commands via (1) banner.php or the id parameter to (… | Patch early | 7.5 high | 1.2% | 2005-11-06 |
| CVE-2005-3918 EXP | Multiple SQL injection vulnerabilities in OvBB 0.08a allow remote attackers to execute arbitrary SQL commands via the (1) threadid parameter to thread… | Patch early | 7.5 high | 1.2% | 2005-11-30 |
| CVE-2005-3920 EXP | SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the (1) gal parameter to index.php or (2) i… | Patch early | 7.5 high | 1.2% | 2005-11-30 |
| CVE-2005-3943 EXP | Multiple SQL injection vulnerabilities in ilyav FAQ System 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) FAQ_I… | Patch early | 7.5 high | 1.2% | 2005-12-01 |
| CVE-2019-13069 EXP | extenua SilverSHielD 6.x fails to secure its ProgramData folder, leading to a Local Privilege Escalation to SYSTEM. The attacker must replace SilverSh… | Patch early | 7.8 high | 1.2% | 2019-08-17 |
| CVE-2004-1821 EXP | SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to gain privileges or perform unauthorized database o… | Patch early | 7.5 high | 1.2% | 2004-03-15 |
| CVE-2005-0792 EXP | SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter to index.php or (2) pa… | Patch early | 7.5 high | 1.2% | 2005-03-15 |
| CVE-2005-2383 EXP | SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the user parameter in an HTTP P… | Patch early | 7.5 high | 1.2% | 2005-07-26 |
| CVE-2006-0728 EXP | SQL injection vulnerability in search.php in webSPELL 4.01.00 and earlier allows remote attackers to inject arbitrary SQL commands via the title_op pa… | Patch early | 7.5 high | 1.2% | 2006-02-16 |
| CVE-2007-4110 EXP | SQL injection vulnerability in sign_in.aspx in Message Board / Threaded Discussion Forum Application Template allows remote attackers to execute arbit… | Patch early | 7.5 high | 1.2% | 2007-07-31 |
| CVE-2007-4119 EXP | Multiple SQL injection vulnerabilities in yonetici.asp in Berthanas Ziyaretci Defteri 2.0 allow remote attackers to execute arbitrary SQL commands via… | Patch early | 7.5 high | 1.2% | 2007-08-01 |
| CVE-2020-28169 EXP | The td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges because the bin directory is writable by a user account,… | Patch early | 7.0 high | 1.2% | 2020-12-24 |
| CVE-2016-3672 EXP | The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which… | Patch early | 7.8 high | 1.2% | 2016-04-27 |
| CVE-2018-10709 EXP | The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and Resta… | Patch early | 7.8 high | 1.2% | 2018-10-30 |
| CVE-2007-4920 EXP | SQL injection vulnerability in soporte_derecha_w.php in PHP Webquest 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.2% | 2007-09-17 |
| CVE-2007-5061 EXP | SQL injection vulnerability in mods/banners/navlist.php in Clansphere 2007.4 allows remote attackers to execute arbitrary SQL commands via the cat_id… | Patch early | 7.5 high | 1.2% | 2007-09-24 |
| CVE-2007-5131 EXP | SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId paramet… | Patch early | 7.5 high | 1.2% | 2007-09-27 |
| CVE-2007-6658 EXP | SQL injection vulnerability in admin.php/vars.php in CustomCMS (CCMS) 3.1 Demo allows remote attackers to execute arbitrary SQL commands via the p par… | Patch early | 7.5 high | 1.2% | 2008-01-04 |
| CVE-2008-2671 EXP | SQL injection vulnerability in comments.php in DCFM Blog 0.9.4 allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.2% | 2008-06-12 |
| CVE-2008-4880 EXP | SQL injection vulnerability in prodshow.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the id parameter, a differ… | Patch early | 7.5 high | 1.2% | 2008-11-04 |
| CVE-2008-5097 EXP | SQL injection vulnerability in index.php in MyFWB 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter. | Patch early | 7.5 high | 1.2% | 2008-11-14 |
| CVE-2009-0324 EXP | Multiple SQL injection vulnerabilities in BibCiter 1.4 allow remote attackers to execute arbitrary SQL commands via the (1) idp parameter to reports/p… | Patch early | 7.5 high | 1.2% | 2009-01-29 |
| CVE-2009-0327 EXP | SQL injection vulnerability in readbible.php in Free Bible Search PHP Script 1.0 allows remote attackers to execute arbitrary SQL commands via the ver… | Patch early | 7.5 high | 1.2% | 2009-01-29 |
| CVE-2007-3088 EXP | SQL injection vulnerability in index.php in Comicsense allows remote attackers to execute arbitrary SQL commands via the epi parameter. | Patch early | 7.5 high | 1.2% | 2007-06-06 |
| CVE-2006-4419 EXP | SQL injection vulnerability in note.php in ProManager 0.73 allows remote attackers to execute arbitrary SQL commands via the note_id parameter. | Patch early | 7.5 high | 1.2% | 2006-08-28 |
← previous page 334 of 334
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt