CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
408,206 CVEs
1,745 on KEV
17,306 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-15
152,664 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-6182 EXP | SQL injection vulnerability in the Ignite Gallery (com_ignitegallery) component 0.8.0 through 0.8.3 for Joomla! allows remote attackers to execute arb… | Patch early | 7.5 high | 2% | 2009-02-19 |
| CVE-2010-3479 EXP | SQL injection vulnerability in list.php in BoutikOne 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter. | Patch early | 7.5 high | 2% | 2010-09-22 |
| CVE-2008-6892 EXP | SQL injection vulnerability in lire/index.php in Peel 3.1 allows remote attackers to execute arbitrary SQL commands via the rubid parameter. NOTE: th… | Patch early | 7.5 high | 2% | 2009-08-03 |
| CVE-2008-0224 EXP | SQL injection vulnerability in index.php in the Newbb_plus 0.92 and earlier module in RunCMS 1.6.1 allows remote attackers to execute arbitrary SQL co… | Patch early | 7.5 high | 2% | 2008-01-10 |
| CVE-2008-0255 EXP | SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute arbitrary SQL commands via the se… | Patch early | 7.5 high | 2% | 2008-01-15 |
| CVE-2008-1460 EXP | SQL injection vulnerability in the Joovideo (com_joovideo) 1.0 and 1.2.2 component for Mambo and Joomla! allows remote attackers to execute arbitrary… | Patch early | 7.5 high | 2% | 2008-03-24 |
| CVE-2006-5044 EXP | Unspecified vulnerability in Prince Clan (Princeclan) Chess component (com_pcchess) 0.8 and earlier for Mambo and Joomla! has unspecified impact and a… | Patch early | 7.5 high | 2% | 2006-09-27 |
| CVE-2006-6752 EXP | Buffer overflow in FTPRush 1.0.0.610 might allow attackers to gain privileges via a long Host field. NOTE: The provenance of this information is unkn… | Patch early | 7.5 high | 2% | 2006-12-27 |
| CVE-2009-2340 EXP | SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtUserName (aka User Na… | Patch early | 7.5 high | 2% | 2009-07-07 |
| CVE-2010-1874 EXP | SQL injection vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows remote attackers to execute arbitrary… | Patch early | 7.5 high | 2% | 2010-05-12 |
| CVE-2010-2317 EXP | Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) search, (2) sbr,… | Patch early | 7.5 high | 2% | 2010-06-17 |
| CVE-2017-6086 EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote attackers to hi… | Patch early | 8.8 high | 2% | 2017-06-27 |
| CVE-2005-1633 EXP | Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) anz… | Patch early | 7.5 high | 2% | 2005-05-17 |
| CVE-2011-3340 EXP | SQL injection vulnerability in ATCOM Netvolution 2.5.8 ASP allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header. | Patch early | 7.5 high | 2% | 2011-10-21 |
| CVE-2022-0088 EXP | Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3. | Patch early | 7.4 high | 2% | 2022-04-03 |
| CVE-2010-2847 EXP | Multiple SQL injection vulnerabilities in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! allow remote attackers to execute… | Patch early | 7.5 high | 2% | 2010-07-25 |
| CVE-2008-3291 EXP | SQL injection vulnerability in index.php in AproxEngine (aka Aprox CMS Engine) 5.1.0.4 allows remote attackers to execute arbitrary SQL commands via t… | Patch early | 7.5 high | 2% | 2008-07-24 |
| CVE-2006-0417 EXP | SQL injection vulnerability in login.php in miniBloggie 1.0 and earlier, when gpc_magic_quotes is disabled, allows remote attackers to execute arbitra… | Patch early | 7.5 high | 2% | 2006-01-25 |
| CVE-2011-1546 EXP | Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to execute arbitrary SQL commands via… | Patch early | 7.5 high | 2% | 2011-04-04 |
| CVE-2015-3222 EXP | syscheck/seechanges.c in OSSEC 2.7 through 2.8.1 on NIX systems allows local users to execute arbitrary code as root. | Patch early | 7.0 high | 2% | 2017-09-07 |
| CVE-2010-1713 EXP | SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands via the sid parameter in a News… | Patch early | 7.5 high | 2% | 2010-05-04 |
| CVE-2010-1740 EXP | SQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute arbitrary SQL commands via the lng parameter. | Patch early | 7.5 high | 2% | 2010-05-06 |
| CVE-2010-2124 EXP | SQL injection vulnerability in firma.php in Bartels Schone ConPresso 4.0.7 allows remote attackers to execute arbitrary SQL commands via the id parame… | Patch early | 7.5 high | 2% | 2010-06-01 |
| CVE-2010-2135 EXP | Multiple SQL injection vulnerabilities in login.php in HazelPress Lite 0.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via… | Patch early | 7.5 high | 2% | 2010-06-02 |
| CVE-2010-2907 EXP | SQL injection vulnerability in the Huru Helpdesk (com_huruhelpdesk) component for Joomla! allows remote attackers to execute arbitrary SQL commands vi… | Patch early | 7.5 high | 2% | 2010-07-28 |
| CVE-2008-6525 EXP | SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers to execute arbitrary SQL command… | Patch early | 7.5 high | 2% | 2009-03-25 |
| CVE-2008-7085 EXP | Multiple SQL injection vulnerabilities in TheHockeyStop HockeySTATS Online 2.0 Basic and Advanced allow remote attackers to execute arbitrary SQL comm… | Patch early | 7.5 high | 2% | 2009-08-26 |
| CVE-2008-3245 EXP | SQL injection vulnerability in phpHoo3.php in phpHoo3 4.3.9, 4.3.10, 4.4.8, and 5.2.6 allows remote attackers to execute arbitrary SQL commands via th… | Patch early | 7.5 high | 2% | 2008-07-21 |
| CVE-2008-3256 EXP | SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier, allows remote attackers to exe… | Patch early | 7.5 high | 2% | 2008-07-22 |
| CVE-2008-4332 EXP | SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers to execute arbitrary SQL comma… | Patch early | 7.5 high | 2% | 2008-09-30 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt