CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
408,097 CVEs
1,741 on KEV
17,306 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-14
152,621 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2007-3354 EXP | Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition allow remote attackers to execute arbitrary SQL commands via the s_user_id pa… | Patch early | 7.5 high | 2.1% | 2007-06-22 |
| CVE-2018-8811 EXP | Cross-site request forgery (CSRF) vulnerability in system/workplace/admin/accounts/user_role.jsp in OpenCMS 10.5.3 allows remote attackers to hijack t… | Patch early | 8.8 high | 2.1% | 2018-03-20 |
| CVE-2018-6224 EXP | A lack of cross-site request forgery (CSRF) protection vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to submit aut… | Patch early | 8.8 high | 2.1% | 2018-03-15 |
| CVE-2007-2065 EXP | PHP remote file inclusion vulnerability in db/PollDB.php in Robert Ladstaetter ActionPoll 1.1.1 allows remote attackers to execute arbitrary PHP code… | Patch early | 7.5 high | 2.1% | 2007-04-18 |
| CVE-2010-1106 EXP | PHP remote file inclusion vulnerability in cgi/index.php in AdvertisementManager 3.1.0 allows remote attackers to execute arbitrary PHP code via a URL… | Patch early | 7.5 high | 2.1% | 2010-03-25 |
| CVE-2009-4104 EXP | SQL injection vulnerability in Lyften Designs LyftenBloggie (com_lyftenbloggie) component 1.0.4 for Joomla! allows remote attackers to execute arbitra… | Patch early | 7.5 high | 2.1% | 2009-11-29 |
| CVE-2014-5082 EXP | Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider Pro, and Sphider-plus allow remote attackers to execut… | Patch early | 7.5 high | 2.1% | 2014-08-06 |
| CVE-2014-9237 EXP | SQL injection vulnerability in Proticaret E-Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via a tem:Code element in a SOAP re… | Patch early | 7.5 high | 2.1% | 2014-12-03 |
| CVE-2006-3364 EXP | SQL injection vulnerability in index.php in the NP_SEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to execute arbitrary SQL commands via t… | Patch early | 7.5 high | 2.1% | 2006-07-06 |
| CVE-2008-2128 EXP | PHP remote file inclusion vulnerability in templates/header.php in CMS Faethon 2.2 Ultimate allows remote attackers to execute arbitrary PHP code via… | Patch early | 7.5 high | 2.1% | 2008-05-09 |
| CVE-2008-2649 EXP | Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the app_pa… | Patch early | 7.5 high | 2.1% | 2008-06-10 |
| CVE-2008-7091 EXP | Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to v… | Patch early | 7.5 high | 2.1% | 2009-08-26 |
| CVE-2009-0456 EXP | PHP remote file inclusion vulnerability in examples/example_clientside_javascript.php in patForms, as used in Sourdough 0.3.5, allows remote attackers… | Patch early | 7.5 high | 2.1% | 2009-02-10 |
| CVE-2009-0495 EXP | PHP remote file inclusion vulnerability in include/define.php in REALTOR 747 4.11 allows remote attackers to execute arbitrary PHP code via a URL in t… | Patch early | 7.5 high | 2.1% | 2009-02-10 |
| CVE-2009-0513 EXP | Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbitrary PHP code via a URL in the classFiles p… | Patch early | 7.5 high | 2.1% | 2009-02-11 |
| CVE-2009-1822 EXP | Multiple PHP remote file inclusion vulnerabilities in the InterJoomla ArtForms (com_artforms) component 2.1b7 for Joomla! allow remote attackers to ex… | Patch early | 7.5 high | 2.1% | 2009-05-29 |
| CVE-2009-2378 EXP | PHP remote file inclusion vulnerability in formmailer.admin.inc.php in Jax FormMailer 3.0.0 allows remote attackers to execute arbitrary PHP code via… | Patch early | 7.5 high | 2.1% | 2009-07-08 |
| CVE-2009-2791 EXP | PHP remote file inclusion vulnerability in pda_projects.php in WebDynamite ProjectButler 1.5.0 allows remote attackers to execute arbitrary PHP code v… | Patch early | 7.5 high | 2.1% | 2009-08-17 |
| CVE-2009-3323 EXP | Multiple PHP remote file inclusion vulnerabilities in BAnner ROtation System mini (BAROSmini) 0.32.595 allow remote attackers to execute arbitrary PHP… | Patch early | 7.5 high | 2.1% | 2009-09-23 |
| CVE-2009-3331 EXP | Multiple PHP remote file inclusion vulnerabilities in DDL CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the wwwRoot parame… | Patch early | 7.5 high | 2.1% | 2009-09-23 |
| CVE-2009-3492 EXP | Multiple PHP remote file inclusion vulnerabilities in Loggix Project 9.4.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL… | Patch early | 7.5 high | 2.1% | 2009-09-30 |
| CVE-2009-3541 EXP | PHP remote file inclusion vulnerability in CoupleDB.php in PHPGenealogy 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the Dat… | Patch early | 7.5 high | 2.1% | 2009-10-02 |
| CVE-2009-4156 EXP | PHP remote file inclusion vulnerability in modules/pms/index.php in Ciamos CMS 0.9.5 and earlier allows remote attackers to execute arbitrary PHP code… | Patch early | 7.5 high | 2.1% | 2009-12-02 |
| CVE-2009-4614 EXP | Multiple PHP remote file inclusion vulnerabilities in Moa Gallery 1.2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in… | Patch early | 7.5 high | 2.1% | 2010-01-18 |
| CVE-2009-4622 EXP | PHP remote file inclusion vulnerability in admin/admin_news_bot.php in Drunken:Golem Gaming Portal 0.5.1 alpha 2 allows remote attackers to execute ar… | Patch early | 7.5 high | 2.1% | 2010-01-18 |
| CVE-2015-6962 EXP | SQL injection vulnerability in the web application in Farol allows remote attackers to execute arbitrary SQL commands via the email parameter to tkmon… | Patch early | 7.5 high | 2.1% | 2015-09-17 |
| CVE-2023-25438 EXP | An issue was discovered in Genomedics MilleGP5 5.9.2, allows remote attackers to execute arbitrary code and gain escalated privileges via modifying sp… | Patch early | 7.8 high | 2.1% | 2023-05-04 |
| CVE-2005-1629 EXP | SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL commands via the verifykey parameter. | Patch early | 7.5 high | 2.1% | 2005-05-17 |
| CVE-2014-6045 EXP | SQL injection vulnerability in phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via… | Patch early | 7.2 high | 2.1% | 2018-08-28 |
| CVE-1999-1432 EXP | Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows… | Patch early | 7.5 high | 2.1% | 1998-07-16 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt