CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
408,640 CVEs
1,746 on KEV
17,309 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-15
152,790 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2007-6106 EXP | SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands via the se… | Patch early | 7.5 high | 1.4% | 2007-11-23 |
| CVE-2007-4069 EXP | SQL injection vulnerability in show_cat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary SQL commands via the cat_id pa… | Patch early | 7.5 high | 1.4% | 2007-07-30 |
| CVE-2008-1465 EXP | SQL injection vulnerability in the Detodas Restaurante (com_restaurante) 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitr… | Patch early | 9.3 high | 1.4% | 2008-03-24 |
| CVE-2017-5671 EXP | Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/… | Patch early | 8.8 high | 1.4% | 2017-03-29 |
| CVE-1999-1497 EXP | Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail account… | Patch early | 7.2 high | 1.4% | 1999-12-21 |
| CVE-2005-0414 EXP | SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post action for i… | Patch early | 7.5 high | 1.4% | 2005-04-27 |
| CVE-2005-1594 EXP | SQL injection vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to execute arbitrary SQL commands via the id parame… | Patch early | 7.5 high | 1.4% | 2005-05-16 |
| CVE-2000-0994 EXP | Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via t… | Patch early | 7.2 high | 1.4% | 2000-12-19 |
| CVE-1999-0036 EXP | IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files. | Patch early | 8.4 high | 1.4% | 1997-05-26 |
| CVE-2005-3043 EXP | SQL injection vulnerability in AddItem.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idOption_Dropdown_2 p… | Patch early | 7.5 high | 1.4% | 2005-09-22 |
| CVE-2001-1076 EXP | Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1) SOR or (2) CFIME environment v… | Patch early | 7.2 high | 1.4% | 2001-07-05 |
| CVE-2005-3963 EXP | SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL commands via the dc_xd parameter… | Patch early | 7.5 high | 1.4% | 2005-12-02 |
| CVE-2005-4143 EXP | SQL injection vulnerability in Lyris ListManager 5.0 through 8.9a allows remote attackers to execute arbitrary SQL commands via SQL code after a numer… | Patch early | 7.5 high | 1.4% | 2005-12-10 |
| CVE-2006-1805 EXP | SQL injection vulnerability in member.php in PowerClan 1.14 allows remote attackers to execute arbitrary SQL commands via the memberid parameter. | Patch early | 7.5 high | 1.4% | 2006-04-18 |
| CVE-2007-4171 EXP | SQL injection vulnerability in komentar.php in the Forum Module for auraCMS (Modul Forum Sederhana) allows remote attackers to execute arbitrary SQL c… | Patch early | 7.5 high | 1.4% | 2007-08-07 |
| CVE-1999-0069 EXP | Solaris ufsrestore buffer overflow. | Patch early | 8.4 high | 1.4% | 1998-04-29 |
| CVE-2006-6209 EXP | Multiple SQL injection vulnerabilities in MidiCart ASP Shopping Cart and ASP Plus Shopping Cart allow remote attackers to execute arbitrary SQL comman… | Patch early | 7.5 high | 1.4% | 2006-12-01 |
| CVE-2016-1583 EXP | The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denia… | Patch early | 7.8 high | 1.4% | 2016-06-27 |
| CVE-2003-1050 EXP | Multiple buffer overflows in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via long command line arguments to (1) db2… | Patch early | 7.2 high | 1.4% | 2004-09-28 |
| CVE-2008-6429 EXP | SQL injection vulnerability in the PrayerCenter (com_prayercenter) component 1.4.9 and earlier for Joomla! allows remote attackers to execute arbitrar… | Patch early | 7.5 high | 1.4% | 2009-03-06 |
| CVE-2018-5969 EXP | Cross Site Request Forgery (CSRF) exists in Photography CMS 1.0 via clients/resources/ajax/ajax_new_admin.php, as demonstrated by adding an admin acco… | Patch early | 8.8 high | 1.4% | 2018-01-24 |
| CVE-2013-5697 EXP | SQL injection vulnerability in mod_accounting.c in the mod_accounting module 0.5 and earlier for Apache allows remote attackers to execute arbitrary S… | Patch early | 7.5 high | 1.4% | 2013-09-30 |
| CVE-2016-8972 EXP | IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the bellmail client. IBM APARs: IV… | Patch early | 7.8 high | 1.4% | 2017-02-15 |
| CVE-2015-5996 EXP | Cross-site request forgery (CSRF) vulnerability on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 allows remote attackers to hijack… | Patch early | 8.8 high | 1.4% | 2015-12-31 |
| CVE-2008-6992 EXP | GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE… | Patch early | 7.5 high | 1.4% | 2009-08-19 |
| CVE-2007-2523 EXP | CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descriptor) for the Task Service shared… | Patch early | 7.2 high | 1.4% | 2007-05-11 |
| CVE-2006-0318 EXP | SQL injection vulnerability in index.php in BlogPHP 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands… | Patch early | 7.5 high | 1.4% | 2006-01-19 |
| CVE-2014-3757 EXP | SQL injection vulnerability in sorter.php in the phpManufaktur kitForm extension 0.43 and earlier for the KeepInTouch (KIT) module allows remote attac… | Patch early | 7.5 high | 1.4% | 2014-05-15 |
| CVE-2009-1049 EXP | SQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to execute arbitrary SQL commands via the id parameter. | Patch early | 7.5 high | 1.4% | 2009-03-24 |
| CVE-2018-18435 EXP | KioWare Server version 4.9.6 and older installs by default to "C:\kioware_com" with weak folder permissions granting any user full permission "Everyon… | Patch early | 7.8 high | 1.4% | 2019-03-21 |
← previous page 334 of 334
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt