CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,406 CVEs
1,739 on KEV
17,299 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-12
150,847 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2006-3315 EXP | PHP remote file inclusion vulnerability in page.php in an unspecified RahnemaCo.com product, possibly eShop, allows remote attackers to execute arbitr… | Patch early | 7.5 high | 2.6% | 2006-06-29 |
| CVE-2006-3967 EXP | PHP remote file inclusion vulnerability in component/option,com_moskool/Itemid,34/admin.moskool.php in MamboXChange Moskool 1.5 allows remote attacker… | Patch early | 7.5 high | 2.6% | 2006-08-01 |
| CVE-2006-3982 EXP | PHP remote file inclusion vulnerability in quickie.php in Knusperleicht Quickie, probably 0.2, allows remote attackers to execute arbitrary PHP code v… | Patch early | 7.5 high | 2.6% | 2006-08-05 |
| CVE-2006-4007 EXP | PHP remote file inclusion vulnerability in index.php in Knusperleicht Guestbook 3.5 allows remote attackers to execute arbitrary PHP code via a URL in… | Patch early | 7.5 high | 2.6% | 2006-08-07 |
| CVE-2006-4008 EXP | PHP remote file inclusion vulnerability in index.php in Knusperleicht Faq 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the f… | Patch early | 7.5 high | 2.6% | 2006-08-07 |
| CVE-2006-4230 EXP | Multiple PHP remote file inclusion vulnerabilities in index.php in Lizge V.20 Web Portal allow remote attackers to execute arbitrary PHP code via a UR… | Patch early | 7.5 high | 2.6% | 2006-08-18 |
| CVE-2006-4241 EXP | PHP remote file inclusion vulnerability in processor/reporter.sql.php in the Reporter Mambo component (com_reporter) allows remote attackers to execut… | Patch early | 7.5 high | 2.6% | 2006-08-21 |
| CVE-2006-4357 EXP | PHP remote file inclusion vulnerability in clients/index.php in Diesel Smart Traffic allows remote attackers to execute arbitrary PHP code via a URL i… | Patch early | 7.5 high | 2.6% | 2006-08-27 |
| CVE-2006-4443 EXP | PHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise allows remote attackers to execute arbitrary PHP code vi… | Patch early | 7.5 high | 2.6% | 2006-08-29 |
| CVE-2006-4891 EXP | SQL injection vulnerability in ArticlesTableview.asp in Techno Dreams Articles & Papers Package 2.0 and earlier allows remote attackers to execute arb… | Patch early | 7.5 high | 2.6% | 2006-09-19 |
| CVE-2006-4892 EXP | SQL injection vulnerability in faqview.asp in Techno Dreams FAQ Manager Package 1.0 allows remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 2.6% | 2006-09-19 |
| CVE-2013-7278 EXP | SQL injection vulnerability in Naxtech CMS Afroditi 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to default.asp. | Patch early | 7.5 high | 2.6% | 2014-01-08 |
| CVE-2007-3076 EXP | A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files to the client system via the Dow… | Patch early | 7.8 high | 2.6% | 2007-06-06 |
| CVE-2006-4882 EXP | SQL injection vulnerability in Review.asp in Julian Roberts Charon Cart 3 allows remote attackers to execute arbitrary SQL commands via the ProductID… | Patch early | 7.5 high | 2.6% | 2006-09-19 |
| CVE-2006-6545 EXP | PHP remote file inclusion vulnerability in includes/common.php in the ErrorDocs 1.0.0 and earlier module for mxBB (mx_errordocs) allows remote attacke… | Patch early | 7.5 high | 2.6% | 2006-12-14 |
| CVE-2006-6560 EXP | PHP remote file inclusion vulnerability in includes/common.php in the mx_modsdb 1.0.0 module for MxBB (aka MX-System) Portal allows remote attackers t… | Patch early | 7.5 high | 2.6% | 2006-12-14 |
| CVE-2006-6615 EXP | PHP remote file inclusion vulnerability in includes/act_constants.php in the Activity Games (mx_act) 0.92 module for mxBB allows remote attackers to e… | Patch early | 7.5 high | 2.6% | 2006-12-18 |
| CVE-2006-6666 EXP | PHP remote file inclusion vulnerability in index.php in VerliAdmin 0.3 and earlier allows remote authenticated users to execute arbitrary PHP code via… | Patch early | 7.5 high | 2.6% | 2006-12-20 |
| CVE-2007-6376 EXP | Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to include and execute arbitrary local files… | Patch early | 7.5 high | 2.6% | 2007-12-15 |
| CVE-2009-2922 EXP | Absolute path traversal vulnerability in pixaria.image.php in Pixaria Gallery 2.0.0 through 2.3.5 allows remote attackers to read arbitrary files via… | Patch early | 7.8 high | 2.6% | 2009-08-21 |
| CVE-2005-0680 EXP | PHP remote file inclusion vulnerability in download_center_lite.inc.php for Download Center Lite 1.6 allows remote attackers to execute arbitrary PHP… | Patch early | 7.5 high | 2.6% | 2005-03-07 |
| CVE-2005-1312 EXP | PHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to execute arbitrary PHP code via unknown vectors. | Patch early | 7.5 high | 2.6% | 2005-04-24 |
| CVE-2008-0230 EXP | PHP remote file inclusion vulnerability in php121db.php in osDate 2.0.8 and possibly earlier versions allows remote attackers to execute arbitrary PHP… | Patch early | 7.5 high | 2.6% | 2008-01-11 |
| CVE-2006-6237 EXP | SQL injection vulnerability in the decode_cookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remote attackers to execute arbitra… | Patch early | 7.5 high | 2.6% | 2006-12-03 |
| CVE-2008-6723 EXP | TurnkeyForms Entertainment Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLogged cooki… | Patch early | 7.5 high | 2.6% | 2009-04-14 |
| CVE-2008-6743 EXP | RSMScript 1.21 allows remote attackers to bypass authentication and gain administrative privileges by setting the verified cookie to an arbitrary valu… | Patch early | 7.5 high | 2.6% | 2009-04-22 |
| CVE-2008-6857 EXP | Absolute Podcast .NET 1.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value. | Patch early | 7.5 high | 2.6% | 2009-07-14 |
| CVE-2008-7007 EXP | Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and gain administrative access by setting the (1) admin_name and (2) admin… | Patch early | 7.5 high | 2.6% | 2009-08-19 |
| CVE-2008-6269 EXP | Joovili 3.1.4 allows remote attackers to bypass authentication and gain privileges as other users, including the administrator, by setting the (1) ses… | Patch early | 7.5 high | 2.6% | 2009-02-25 |
| CVE-2008-6307 EXP | E-topbiz Link Back Checker 1 allows remote attackers to bypass authentication and gain administrative access by setting the auth cookie to "admin." | Patch early | 7.5 high | 2.6% | 2009-02-26 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt