CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
408,363 CVEs
1,745 on KEV
17,306 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-15
152,697 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-5958 EXP | Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) que… | Patch early | 7.5 high | 1.7% | 2009-01-23 |
| CVE-2007-3313 EXP | Multiple SQL injection vulnerabilities in Jasmine CMS 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the login_username paramete… | Patch early | 7.5 high | 1.7% | 2007-06-21 |
| CVE-2006-2300 EXP | Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter to subList.as… | Patch early | 7.5 high | 1.7% | 2006-05-11 |
| CVE-2006-3926 EXP | Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) start parame… | Patch early | 7.5 high | 1.7% | 2006-07-31 |
| CVE-2019-10529 EXP | Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon Au… | Patch early | 8.1 high | 1.7% | 2019-11-06 |
| CVE-2026-51134 EXP | The C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml. | Patch early | 7.5 high | 1.7% | 2026-09-15 |
| CVE-2003-1375 EXP | Buffer overflow in wall for HP-UX 10.20 through 11.11 may allow local users to execute arbitrary code by calling wall with a large file as an argument… | Patch early | 7.2 high | 1.7% | 2003-12-31 |
| CVE-2015-6811 EXP | SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlier allows remote attackers to e… | Patch early | 7.5 high | 1.7% | 2015-09-04 |
| CVE-2025-4871 EXP | A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the compone… | Patch early | 7.3 high | 1.7% | 2025-05-18 |
| CVE-2024-50858 EXP | Multiple endpoints in GestioIP v3.5.7 are vulnerable to Cross-Site Request Forgery (CSRF). An attacker can execute actions via the admin's browser by… | Patch early | 8.8 high | 1.7% | 2025-01-14 |
| CVE-2009-5068 EXP | There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. On some configurations a SMF deployment is… | Patch early | 7.2 high | 1.7% | 2020-01-15 |
| CVE-2014-3119 EXP | Multiple SQL injection vulnerabilities in web2Project 3.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) s… | Patch early | 8.8 high | 1.7% | 2020-01-31 |
| CVE-2003-1435 EXP | SQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote attackers to execute arbitrary SQL commands via the days parameter to the search mod… | Patch early | 7.5 high | 1.7% | 2003-12-31 |
| CVE-2004-0806 EXP | cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in th… | Patch early | 7.2 high | 1.7% | 2004-12-31 |
| CVE-2007-6217 EXP | Multiple SQL injection vulnerabilities in login.asp in Irola My-Time (aka Timesheet) 3.5 allow remote attackers to execute arbitrary SQL commands via… | Patch early | 7.5 high | 1.7% | 2007-12-04 |
| CVE-2002-1492 EXP | Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, allow local users to gain root pri… | Patch early | 7.2 high | 1.7% | 2003-04-02 |
| CVE-2017-3813 EXP | A vulnerability in the Start Before Logon (SBL) module of Cisco AnyConnect Secure Mobility Client Software for Windows could allow an unauthenticated,… | Patch early | 7.8 high | 1.7% | 2017-02-09 |
| CVE-2014-9113 EXP | CCH Wolters Kluwer ProSystem fx Engagement (aka PFX Engagement) 7.1 and earlier uses weak permissions (Authenticated Users: Modify and Write) for the… | Patch early | 7.2 high | 1.7% | 2014-12-02 |
| CVE-2006-4300 EXP | SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id paramet… | Patch early | 7.5 high | 1.7% | 2006-08-23 |
| CVE-2012-4260 EXP | Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the (1) aktion or (2) callurl paramete… | Patch early | 7.5 high | 1.7% | 2012-08-13 |
| CVE-2012-6519 EXP | SQL injection vulnerability in modules/poll/index.php in DIY-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter… | Patch early | 7.5 high | 1.7% | 2013-01-24 |
| CVE-2007-6579 EXP | Multiple SQL injection vulnerabilities in Ip Reg 0.3 allow remote attackers to execute arbitrary SQL commands via the vlan_id parameter to (1) vlanvie… | Patch early | 7.5 high | 1.7% | 2007-12-28 |
| CVE-2015-4681 EXP | Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users to have unspecified impact via vectors related to weak passwords. | Patch early | 7.8 high | 1.7% | 2017-09-19 |
| CVE-2009-4698 EXP | Multiple SQL injection vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to execute arbitrary SQL commands via the… | Patch early | 7.5 high | 1.7% | 2010-03-15 |
| CVE-2007-2207 EXP | SQL injection vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and earlier allows remote attackers to execute arbitrary SQL commands v… | Patch early | 7.5 high | 1.7% | 2007-04-24 |
| CVE-2007-4208 EXP | SQL injection vulnerability in default.asp in Next Gen Portfolio Manager allows remote attackers to execute arbitrary SQL commands via the (1) Users_E… | Patch early | 7.5 high | 1.7% | 2007-08-08 |
| CVE-2011-0182 EXP | The i386_set_ldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privi… | Patch early | 7.2 high | 1.7% | 2011-03-23 |
| CVE-2010-5032 EXP | SQL injection vulnerability in the BF Quiz (com_bfquiztrial) component before 1.3.1 for Joomla! allows remote attackers to execute arbitrary SQL comma… | Patch early | 7.5 high | 1.7% | 2011-11-02 |
| CVE-2017-6331 EXP | Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that bypasses t… | Patch early | 7.1 high | 1.7% | 2017-11-06 |
| CVE-2004-1842 EXP | Cross-site request forgery (CSRF) vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administrative privileges via an img tag… | Patch early | 8.8 high | 1.7% | 2004-12-31 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt