CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,381 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
150,843 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2007-2304 EXP | Multiple directory traversal vulnerabilities in Quick and Dirty Blog (QDBlog) 0.4, and possibly earlier, allow remote attackers to include and execute… | Patch early | 7.5 high | 2.7% | 2007-04-26 |
| CVE-2017-8221 EXP | Wireless IP Camera (P2P) WIFICAM devices rely on a cleartext UDP tunnel protocol (aka the Cloud feature) for communication between an Android applicat… | Patch early | 7.5 high | 2.7% | 2017-04-25 |
| CVE-2006-0947 EXP | Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to create users that cannot be deleted via scripting code in the "31" para… | Patch early | 7.5 high | 2.7% | 2006-03-01 |
| CVE-2006-1800 EXP | Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and execute arbitrary files via ".."… | Patch early | 7.5 high | 2.7% | 2006-04-18 |
| CVE-2000-0032 EXP | Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database. | Patch early | 10.0 high | 2.7% | 1999-12-22 |
| CVE-2022-45030 EXP | A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= (this may interact with secure-file-pri… | Patch early | 8.8 high | 2.7% | 2023-04-15 |
| CVE-2006-2962 EXP | PHP remote file inclusion vulnerability in sql_fcnsOLD.php in Emergenices Personnel Information System (Empris) 20020923 and earlier allows remote att… | Patch early | 7.5 high | 2.7% | 2006-06-12 |
| CVE-2006-4102 EXP | PHP remote file inclusion vulnerability in tpl.inc.php in Falko Timme and Till Brehm SQLiteWebAdmin 0.1 and earlier allows remote attackers to execute… | Patch early | 7.5 high | 2.7% | 2006-08-14 |
| CVE-2006-4213 EXP | PHP remote file inclusion vulnerability in config.php in David Kent Norman Thatware 0.4.6 and possibly earlier allows remote attackers to execute arbi… | Patch early | 7.5 high | 2.7% | 2006-08-17 |
| CVE-2006-4746 EXP | PHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1 allows remote attackers to execute arbitrary PHP code… | Patch early | 7.5 high | 2.7% | 2006-09-13 |
| CVE-2008-2294 EXP | Pet Grooming Management System 2.0 allows remote attackers to gain privileges via a direct request to useradded.php with a modified user name for "adm… | Patch early | 7.5 high | 2.7% | 2008-05-18 |
| CVE-2007-3529 EXP | videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value of the id[] parameter, which rev… | Patch early | 7.8 high | 2.7% | 2007-07-03 |
| CVE-2003-1314 EXP | PHP remote file inclusion vulnerability in admin/auth.php in EternalMart Guestbook (EMGB) 1.1 allows remote attackers to execute arbitrary PHP code vi… | Patch early | 7.5 high | 2.7% | 2003-12-31 |
| CVE-2006-6611 EXP | PHP remote file inclusion vulnerability in interface.php in Barman 0.0.1r3 allows remote attackers to execute arbitrary PHP code via a URL in the base… | Patch early | 7.5 high | 2.7% | 2006-12-18 |
| CVE-2006-6612 EXP | PHP remote file inclusion vulnerability in basic.inc.php in PhpMyCms 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the basepa… | Patch early | 7.5 high | 2.7% | 2006-12-18 |
| CVE-2011-2944 EXP | SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the userna… | Patch early | 7.5 high | 2.7% | 2014-08-12 |
| CVE-2014-5140 EXP | The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly handle : (colon) characters, whi… | Patch early | 8.8 high | 2.7% | 2020-01-03 |
| CVE-2006-4636 EXP | Directory traversal vulnerability in SZEWO PhpCommander 3.0 and earlier allows remote attackers to include and execute arbitrary local files via direc… | Patch early | 7.5 high | 2.7% | 2006-09-08 |
| CVE-2006-7069 EXP | PHP remote file inclusion vulnerability in smarty_config.php in Socketwiz Bookmarks 2.0 and earlier allows remote attackers to execute arbitrary PHP c… | Patch early | 7.5 high | 2.7% | 2007-03-02 |
| CVE-2006-7081 EXP | Multiple PHP remote file inclusion vulnerabilities in PhpNews 1.0 allow remote attackers to execute arbitrary PHP code via the Include parameter to (1… | Patch early | 7.5 high | 2.7% | 2007-03-02 |
| CVE-2007-0178 EXP | PHP remote file inclusion vulnerability in info.php in Easy Banner Pro 2.8 allows remote attackers to execute arbitrary PHP code via a URL in the s[ph… | Patch early | 7.5 high | 2.7% | 2007-01-11 |
| CVE-2007-0190 EXP | PHP remote file inclusion vulnerability in edit_address.php in edit-x ecommerce allows remote attackers to execute arbitrary PHP code via a URL in the… | Patch early | 7.5 high | 2.7% | 2007-01-12 |
| CVE-2007-4287 EXP | PHP remote file inclusion vulnerability in fc_functions/fc_example.php in FishCart 3.2 RC2 and earlier allows remote attackers to execute arbitrary PH… | Patch early | 7.5 high | 2.7% | 2007-08-09 |
| CVE-2018-12326 EXP | Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 RC3 allows an attacker to achieve code execution and escalate to higher privile… | Patch early | 8.4 high | 2.7% | 2018-06-17 |
| CVE-2005-4155 EXP | registration.PHP in ATutor 1.5.1 pl2 allows remote attackers to execute arbitrary SQL commands via an e-mail address that ends in a NULL character, wh… | Patch early | 7.5 high | 2.7% | 2005-12-11 |
| CVE-2004-2032 EXP | Netgear RP114 allows remote attackers to bypass the keyword based URL filtering by requesting a long URL, as demonstrated using a large number of %20… | Patch early | 7.5 high | 2.7% | 2004-05-24 |
| CVE-2012-5293 EXP | Multiple PHP remote file inclusion vulnerabilities in SAPID CMS 1.2.3 Stable allow remote attackers to execute arbitrary PHP code via a URL in the (1)… | Patch early | 7.5 high | 2.7% | 2012-10-04 |
| CVE-2005-0980 EXP | PHP remote file inclusion vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary PHP code by modifying the… | Patch early | 7.5 high | 2.7% | 2005-05-02 |
| CVE-2002-1720 EXP | SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain privileges via the password fiel… | Patch early | 7.5 high | 2.7% | 2002-12-31 |
| CVE-2006-2116 EXP | planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/gallery_admin.php. | Patch early | 7.5 high | 2.7% | 2006-05-01 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt