CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
408,348 CVEs
1,745 on KEV
17,306 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-15
152,687 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2007-0132 EXP | SQL injection vulnerability in compare_product.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the id parame… | Patch early | 7.5 high | 1.8% | 2007-01-09 |
| CVE-2006-2650 EXP | SQL injection vulnerability in cosmicshop/search.php in CosmicShoppingCart allows remote attackers to execute arbitrary SQL commands via the max param… | Patch early | 7.5 high | 1.8% | 2006-05-30 |
| CVE-2006-2858 EXP | SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the msgid par… | Patch early | 7.5 high | 1.8% | 2006-06-06 |
| CVE-2007-3515 EXP | SQL injection vulnerability in view_event.php in TotalCalendar 2.402 and earlier allows remote attackers to execute arbitrary SQL commands via the id… | Patch early | 10.0 high | 1.8% | 2007-07-03 |
| CVE-2007-3824 EXP | SQL injection vulnerability in katgoster.asp in MzK Blog (tr) allows remote attackers to execute arbitrary SQL commands via the katID parameter. | Patch early | 10.0 high | 1.8% | 2007-07-17 |
| CVE-2017-14075 EXP | This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to e… | Patch early | 7.8 high | 1.8% | 2017-09-11 |
| CVE-2017-14153 EXP | This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to e… | Patch early | 7.8 high | 1.8% | 2017-09-11 |
| CVE-2006-4478 EXP | SQL injection vulnerability in headeruserdata.php in Visual Shapers ezContents 2.0.3 allows remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.8% | 2006-08-31 |
| CVE-2024-25003 EXP | KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the hostname, occurs due to insufficient bounds checking and in… | Patch early | 7.8 high | 1.8% | 2024-02-09 |
| CVE-2007-0093 EXP | SQL injection vulnerability in page.php in Simple Web Content Management System allows remote attackers to execute arbitrary SQL commands via the id p… | Patch early | 7.5 high | 1.8% | 2007-01-05 |
| CVE-2023-45131 EXP | Discourse is an open source platform for community discussion. New chat messages can be read by making an unauthenticated POST request to MessageBus.… | Patch early | 7.5 high | 1.8% | 2023-10-16 |
| CVE-2024-56901 EXP | A Cross-Site Request Forgery (CSRF) vulnerability in Geovision GV-ASWeb application with the version 6.1.1.0 or less that allows attackers to arbitrar… | Patch early | 8.8 high | 1.8% | 2025-02-03 |
| CVE-2007-0623 EXP | SQL injection vulnerability in index.php in MAXdev MDPro 1.0.76 allows remote attackers to execute arbitrary SQL commands via the startrow parameter. | Patch early | 7.5 high | 1.8% | 2007-01-31 |
| CVE-2015-2143 EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to hijack the authenticat… | Patch early | 8.8 high | 1.8% | 2017-10-06 |
| CVE-2007-2824 EXP | SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute arbitrary SQL commands via the p… | Patch early | 10.0 high | 1.8% | 2007-05-22 |
| CVE-2017-8422 EXP | KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper a… | Patch early | 7.8 high | 1.8% | 2017-05-17 |
| CVE-2011-5140 EXP | Multiple SQL injection vulnerabilities in the blog module 1.0 for DiY-CMS allow remote attackers to execute arbitrary SQL commands via the (1) start p… | Patch early | 7.5 high | 1.8% | 2012-08-31 |
| CVE-2010-4738 EXP | Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL… | Patch early | 7.5 high | 1.8% | 2011-02-16 |
| CVE-2020-2944 EXP | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). Supported versions that are affected are 10 and… | Patch early | 8.8 high | 1.8% | 2020-04-15 |
| CVE-2007-1725 EXP | SQL injection vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to execute arbitrary SQL commands via the filename of an u… | Patch early | 9.3 high | 1.8% | 2007-03-28 |
| CVE-2006-1710 EXP | SQL injection vulnerability in admin.php in Design Nation DNGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) email… | Patch early | 7.6 high | 1.8% | 2006-04-11 |
| CVE-2007-0970 EXP | Multiple SQL injection vulnerabilities in WebTester 5.0.20060927 and earlier allow remote attackers to execute arbitrary SQL commands via the testID p… | Patch early | 7.5 high | 1.8% | 2007-02-16 |
| CVE-2011-3394 EXP | SQL injection vulnerability in findagent.php in MYRE Real Estate Software allows remote attackers to execute arbitrary SQL commands via the page param… | Patch early | 7.5 high | 1.8% | 2011-09-15 |
| CVE-2007-1026 EXP | SQL injection vulnerability in view.php in XLAtunes 0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter… | Patch early | 7.5 high | 1.8% | 2007-02-21 |
| CVE-2006-4978 EXP | Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) th… | Patch early | 7.5 high | 1.8% | 2006-09-25 |
| CVE-2006-5881 EXP | SQL injection vulnerability in cl_CatListing.asp in Dynamic Dataworx NuCommunity 1.0 allows remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.8% | 2006-11-14 |
| CVE-2006-5887 EXP | SQL injection vulnerability in CampusNewsDetails.asp in Dynamic Dataworx NuSchool 1.0 allows remote attackers to execute arbitrary SQL commands via th… | Patch early | 7.5 high | 1.8% | 2006-11-14 |
| CVE-2009-3417 EXP | SQL injection vulnerability in the IDoBlog (com_idoblog) component 1.1 build 30 for Joomla! allows remote attackers to execute arbitrary SQL commands… | Patch early | 7.5 high | 1.8% | 2009-09-25 |
| CVE-2010-2691 EXP | Multiple SQL injection vulnerabilities in 2daybiz Custom T-Shirt Design Script allow remote attackers to execute arbitrary SQL commands via the (1) sb… | Patch early | 7.5 high | 1.8% | 2010-07-12 |
| CVE-2025-47987 EXP | Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally. | Patch early | 7.8 high | 1.8% | 2025-07-08 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt