CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
408,216 CVEs
1,745 on KEV
17,306 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-15
152,667 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2006-0775 EXP | Multiple SQL injection vulnerabilities in show.php in BirthSys 3.1 allow remote attackers to execute arbitrary SQL commands via the $month variable.… | Patch early | 7.5 high | 1.9% | 2006-02-19 |
| CVE-2006-1081 EXP | SQL injection vulnerability in forgotten_password.php in Jonathan Beckett PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL comman… | Patch early | 7.5 high | 1.9% | 2006-03-09 |
| CVE-2004-2000 EXP | SQL injection vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to execute arbitrary SQL via the (1) orderby o… | Patch early | 7.5 high | 1.9% | 2004-05-05 |
| CVE-2007-3789 EXP | SQL injection vulnerability in admin/index.php in Inmostore 4.0 allows remote attackers to execute arbitrary SQL commands via the Password field. NOT… | Patch early | 7.5 high | 1.9% | 2007-07-15 |
| CVE-2006-4284 EXP | SQL injection vulnerability in comments.asp in LBlog 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.9% | 2006-08-22 |
| CVE-2005-0252 EXP | SQL injection vulnerability in BibORB 1.3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the (1) User… | Patch early | 7.5 high | 1.9% | 2005-05-02 |
| CVE-2006-5885 EXP | SQL injection vulnerability in Products.asp in NuStore 1.0 allows remote attackers to execute arbitrary SQL commands via the SubCatagoryID parameter. | Patch early | 7.5 high | 1.9% | 2006-11-14 |
| CVE-2006-0234 EXP | SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) ye… | Patch early | 7.5 high | 1.9% | 2006-01-18 |
| CVE-2006-4042 EXP | Multiple SQL injection vulnerabilities in trackback.php in myWebland myBloggie 2.1.4 and earlier allow remote attackers to execute arbitrary SQL comma… | Patch early | 7.5 high | 1.9% | 2006-08-09 |
| CVE-2006-6859 EXP | SQL injection vulnerability in coupon_detail.asp in Website Designs For Less Click N' Print Coupons 2005.01 and earlier allows remote attackers to exe… | Patch early | 10.0 high | 1.9% | 2006-12-31 |
| CVE-2017-1085 EXP | In FreeBSD before 11.2-RELEASE, an application which calls setrlimit() to increase RLIMIT_STACK may turn a read-only memory region below the stack int… | Patch early | 7.8 high | 1.9% | 2018-09-12 |
| CVE-2010-2134 EXP | Multiple SQL injection vulnerabilities in login.php in Project Man 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1… | Patch early | 7.5 high | 1.8% | 2010-06-02 |
| CVE-2006-0759 EXP | Multiple SQL injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the contactgroupid… | Patch early | 7.5 high | 1.8% | 2006-02-18 |
| CVE-2006-0199 EXP | SQL injection vulnerability in news.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the hi… | Patch early | 7.5 high | 1.8% | 2006-01-13 |
| CVE-2004-0343 EXP | Multiple SQL injection vulnerabilities in YaBB SE 1.5.4 through 1.5.5b allow remote attackers to execute arbitrary SQL via (1) the msg parameter in Mo… | Patch early | 10.0 high | 1.8% | 2004-11-23 |
| CVE-2007-6583 EXP | SQL injection vulnerability in admin/ops/findip/ajax/search.php in 1024 CMS 1.3.1 allows remote attackers to execute arbitrary SQL commands via the ip… | Patch early | 7.5 high | 1.8% | 2007-12-28 |
| CVE-2010-0723 EXP | SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.8% | 2010-02-26 |
| CVE-2009-3349 EXP | SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a cat action to th… | Patch early | 7.5 high | 1.8% | 2009-09-24 |
| CVE-2000-0955 EXP | Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows t… | Patch early | 7.5 high | 1.8% | 2000-12-19 |
| CVE-2009-0431 EXP | SQL injection vulnerability in Default.asp in LinksPro Standard Edition allows remote attackers to execute arbitrary SQL commands via the OrderDirecti… | Patch early | 7.5 high | 1.8% | 2009-02-05 |
| CVE-2009-1499 EXP | SQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the arti… | Patch early | 7.5 high | 1.8% | 2009-05-01 |
| CVE-2017-14344 EXP | This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to e… | Patch early | 7.8 high | 1.8% | 2017-09-12 |
| CVE-2007-0554 EXP | SQL injection vulnerability in print.asp in Guo Xu Guos Posting System (GPS) 1.2 allows remote attackers to execute arbitrary SQL commands via the id… | Patch early | 7.5 high | 1.8% | 2007-01-29 |
| CVE-2010-1949 EXP | SQL injection vulnerability in the Online News Paper Manager (com_jnewspaper) component 1.0 for Joomla! allows remote attackers to execute arbitrary S… | Patch early | 7.5 high | 1.8% | 2010-05-19 |
| CVE-2010-4507 EXP | Multiple cross-site request forgery (CSRF) vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 and R1786, with firmware 1.9.9.… | Patch early | 9.3 high | 1.8% | 2010-12-30 |
| CVE-2006-0160 EXP | SQL injection vulnerability in add_post.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL commands via the (1) parent, (2) roo… | Patch early | 7.5 high | 1.8% | 2006-01-10 |
| CVE-2017-1000379 EXP | The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing a… | Patch early | 7.8 high | 1.8% | 2017-06-19 |
| CVE-2009-4936 EXP | Multiple SQL injection vulnerabilities in Small Pirate (SPirate) 2.1 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter… | Patch early | 7.5 high | 1.8% | 2010-07-22 |
| CVE-2006-4279 EXP | SQL injection vulnerability in topic_post.php in XennoBB 2.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the icon_topi… | Patch early | 7.5 high | 1.8% | 2006-08-21 |
| CVE-2006-6355 EXP | SQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers to execute arbitrary SQL commands via the iCity parameter. N… | Patch early | 10.0 high | 1.8% | 2006-12-07 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt