CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
407,366 CVEs
1,741 on KEV
17,302 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-14
172,342 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2009-2554 EXP | SQL injection vulnerability in the search method in jobline.class.php in Jobline (com_jobline) 1.1.2.2, 1.3.1, and possibly earlier versions, a compon… | Patch early | 6.8 medium | 0.9% | 2009-07-20 |
| CVE-2009-2608 EXP | Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to… | Patch early | 6.8 medium | 0.9% | 2009-07-27 |
| CVE-2009-4805 EXP | Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands… | Patch early | 6.8 medium | 0.9% | 2010-04-23 |
| CVE-2009-4925 EXP | Multiple SQL injection vulnerabilities in Portale e-commerce Creasito (aka creasito e-commerce content manager) 1.3.16, when magic_quotes_gpc is disab… | Patch early | 6.8 medium | 0.9% | 2010-07-12 |
| CVE-2009-4982 EXP | SQL injection vulnerability in the select function in Irokez CMS 0.7.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrar… | Patch early | 6.8 medium | 0.9% | 2010-08-25 |
| CVE-2008-3561 EXP | SQL injection vulnerability in s03.php in Powergap Shopsystem, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL com… | Patch early | 6.8 medium | 0.9% | 2008-08-10 |
| CVE-2008-4701 EXP | SQL injection vulnerability in admin.php in Libera CMS 1.12, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL comma… | Patch early | 6.8 medium | 0.9% | 2008-10-22 |
| CVE-2008-6572 EXP | SQL injection vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to execute arbitrary SQL commands via the keyword… | Patch early | 6.8 medium | 0.9% | 2009-03-31 |
| CVE-2000-1199 EXP | PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain acce… | Patch early | 4.6 medium | 0.9% | 2001-08-31 |
| CVE-2007-1255 EXP | Unrestricted file upload vulnerability in admin.bbcode.php in Connectix Boards 0.7 and earlier allows remote authenticated administrators to execute a… | Patch early | 6.0 medium | 0.9% | 2007-03-03 |
| CVE-2009-1237 EXP | Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a denial of service (kernel memory… | Patch early | 4.9 medium | 0.9% | 2009-04-02 |
| CVE-2010-3858 EXP | The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does not properly restrict the stack… | Patch early | 4.9 medium | 0.9% | 2010-11-30 |
| CVE-2010-4243 EXP | fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguments and… | Patch early | 4.9 medium | 0.9% | 2011-01-22 |
| CVE-2008-5075 EXP | Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 (aka Uploader PRO), when magic_quotes_gpc is disabled, allow remote attackers to execute… | Patch early | 6.8 medium | 0.9% | 2008-11-14 |
| CVE-2008-5267 EXP | SQL injection vulnerability in answer.php in Experts 1.0.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL comman… | Patch early | 6.8 medium | 0.9% | 2008-11-28 |
| CVE-2008-5628 EXP | SQL injection vulnerability in index.php in CMS little 0.0.1 allows remote attackers to execute arbitrary SQL commands via the term parameter. | Patch early | 6.8 medium | 0.9% | 2008-12-17 |
| CVE-2008-6091 EXP | SQL injection vulnerability in plugins.php in BMForum 5.6, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL command… | Patch early | 6.8 medium | 0.9% | 2009-02-09 |
| CVE-2008-6093 EXP | SQL injection vulnerability in index.php in Noname CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL comman… | Patch early | 6.8 medium | 0.9% | 2009-02-09 |
| CVE-2008-6100 EXP | Multiple SQL injection vulnerabilities in Discussion Forums 2k 3.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL… | Patch early | 6.8 medium | 0.9% | 2009-02-10 |
| CVE-2008-7114 EXP | SQL injection vulnerability in members_search.php in iFusion Services iFdate 2.0.3 and earlier allows remote attackers to execute arbitrary SQL comman… | Patch early | 6.8 medium | 0.9% | 2009-08-28 |
| CVE-2008-0453 EXP | SQL injection vulnerability in list.php in Easysitenetwork Recipe allows remote attackers to execute arbitrary SQL commands via the categoryid paramet… | Patch early | 6.8 medium | 0.9% | 2008-01-25 |
| CVE-2008-1398 EXP | SQL injection vulnerability in online.php in AuraCMS 2.0 through 2.2.1 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-F… | Patch early | 6.8 medium | 0.9% | 2008-03-20 |
| CVE-2008-1462 EXP | SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid paramet… | Patch early | 6.8 medium | 0.9% | 2008-03-24 |
| CVE-2008-1789 EXP | SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter. | Patch early | 6.8 medium | 0.9% | 2008-04-15 |
| CVE-2008-2963 EXP | Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to (a) index.php,… | Patch early | 6.8 medium | 0.9% | 2008-07-02 |
| CVE-2008-3131 EXP | SQL injection vulnerability in chatbox.php in pSys 0.7.0 Alpha, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL co… | Patch early | 6.8 medium | 0.9% | 2008-07-10 |
| CVE-2008-3452 EXP | SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the loc_id parameter… | Patch early | 6.8 medium | 0.9% | 2008-08-04 |
| CVE-2008-4093 EXP | SQL injection vulnerability in memberstats.php in YourOwnBux 3.1 and 3.2 beta, when magic_quotes_gpc is disabled, allows remote attackers to execute a… | Patch early | 6.8 medium | 0.9% | 2008-09-15 |
| CVE-2008-4666 EXP | SQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to execute arbitrary SQL commands via the Category param… | Patch early | 6.8 medium | 0.9% | 2008-10-22 |
| CVE-2008-4711 EXP | SQL injection vulnerability in Joovili 3.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands v… | Patch early | 6.8 medium | 0.9% | 2008-10-23 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt