Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
396,477 CVEs1,721 in CISA KEV17,395 with EPSS ≥ 10%25,049 with a public exploitUpdated 23 September 2026
25,049 results · page 171 of 501
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2011-2189 | net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote attackers to cause a denial of service (memory consumption) via requests… | EXPLOIT ✓HIGH 7.5EPSS 17.9% | 10 October 2011 |
| CVE-2010-4963 | SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the order_by parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.19% | 9 October 2011 |
| CVE-2010-4959 | SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the password parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.15% | 9 October 2011 |
| CVE-2010-4955 | SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3078. | EXPLOIT ✓HIGH 7.5EPSS 1.02% | 9 October 2011 |
| CVE-2010-4954 | SQL injection vulnerability in product_reviews_info.php in xt:Commerce Gambio 2008 allows remote attackers to execute arbitrary SQL commands via the products_id parameter. | EXPLOIT ✓HIGH 7.5EPSS 0.99% | 9 October 2011 |
| CVE-2010-4949 | Cross-site scripting (XSS) vulnerability in the (1) FreiChat component before 2.1.2 for Joomla! and the (2) FreiChatPure component before 1.2.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML by entering it in an unspecified… | EXPLOIT ✓MEDIUM 4.3EPSS 1.69% | 9 October 2011 |
| CVE-2010-4948 | PHP remote file inclusion vulnerability in libs/adodb/adodb.inc.php in PHP Free Photo Gallery script allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. | EXPLOITHIGH 7.5EPSS 2.04% | 9 October 2011 |
| CVE-2010-4947 | Cross-site scripting (XSS) vulnerability in advanced_search_result.php in ALLPC 2.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. | EXPLOITMEDIUM 4.3EPSS 1.20% | 9 October 2011 |
| CVE-2010-4946 | SQL injection vulnerability in product_info.php in ALLPC 2.5 allows remote attackers to execute arbitrary SQL commands via the products_id parameter. | EXPLOITHIGH 7.5EPSS 0.90% | 9 October 2011 |
| CVE-2010-4945 | SQL injection vulnerability in the CamelcityDB (com_camelcitydb2) component 2.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. | EXPLOITHIGH 7.5EPSS 1.31% | 9 October 2011 |
| CVE-2010-4944 | SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showExpertProfileDetailed action to index.php. | EXPLOITHIGH 7.5EPSS 0.91% | 9 October 2011 |
| CVE-2010-4943 | Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP code via a URL in the class_path parameter to (1) file.php or (2) com_del.php. | EXPLOITHIGH 7.5EPSS 2.04% | 9 October 2011 |
| CVE-2010-4942 | SQL injection vulnerability in location.php in the eCal module in E-Xoopport Samsara 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the lid parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.12% | 9 October 2011 |
| CVE-2010-4941 | SQL injection vulnerability in the Teams (com_teams) component 1_1028_100809_1711 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PlayerID parameter in a player save action to index.php. | EXPLOIT ✓HIGH 7.5EPSS 1.02% | 9 October 2011 |
| CVE-2010-4940 | SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.02% | 9 October 2011 |
| CVE-2010-4939 | PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter. | EXPLOITHIGH 7.5EPSS 2.04% | 9 October 2011 |
| CVE-2010-4938 | SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a categories action to index.php. | EXPLOIT ✓HIGH 7.5EPSS 0.90% | 9 October 2011 |
| CVE-2010-4937 | Multiple SQL injection vulnerabilities in the Amblog (com_amblog) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) articleid or (2) catid parameter to index.php. | EXPLOIT ✓HIGH 7.5EPSS 1.02% | 9 October 2011 |
| CVE-2010-4935 | SQL injection vulnerability in poll.php in Entrans 0.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sid parameter. | EXPLOIT ✓HIGH 7.5EPSS 0.90% | 9 October 2011 |
| CVE-2010-4934 | SQL injection vulnerability in video.php in Get Tube 4.51 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. | EXPLOITHIGH 7.5EPSS 0.90% | 9 October 2011 |
| CVE-2010-4933 | SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQL commands via the lid parameter. | EXPLOITHIGH 7.5EPSS 0.99% | 9 October 2011 |
| CVE-2010-4931 | Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary local files via a .. | EXPLOITHIGH 10.0EPSS 15.6% | 9 October 2011 |
| CVE-2010-4930 | Cross-site scripting (XSS) vulnerability in index.php in @mail Webmail before 6.2.0 allows remote attackers to inject arbitrary web script or HTML via the MailType parameter in a mail/auth/processlogin action. | EXPLOIT ✓MEDIUM 4.3EPSS 3.39% | 9 October 2011 |
| CVE-2010-4929 | SQL injection vulnerability in the Joostina (com_ezautos) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the firstCode parameter in a helpers action to index.php. | EXPLOIT ✓HIGH 7.5EPSS 0.91% | 9 October 2011 |
| CVE-2010-4928 | Cross-site scripting (XSS) vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML by placing it after a > (greater than) character. | EXPLOIT ✓MEDIUM 4.3EPSS 1.47% | 9 October 2011 |
| CVE-2010-4927 | SQL injection vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a country action to index.php. | EXPLOIT ✓HIGH 7.5EPSS 0.99% | 9 October 2011 |
| CVE-2010-4926 | SQL injection vulnerability in the TimeTrack (com_timetrack) component 1.2.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the ct_id parameter in a timetrack action to index.php. | EXPLOIT ✓HIGH 7.5EPSS 1.19% | 9 October 2011 |
| CVE-2010-4925 | SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute arbitrary SQL commands via the id parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.15% | 9 October 2011 |
| CVE-2010-4924 | PHP remote file inclusion vulnerability in logic/controller.class.php in clearBudget 0.9.8 allows remote attackers to execute arbitrary PHP code via a URL in the actionPath parameter. | EXPLOITHIGH 7.5EPSS 2.32% | 9 October 2011 |
| CVE-2010-4922 | Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL commands via the i parameter in an edit action to (1) contentAE.asp or (2) templatesAE.asp. | EXPLOIT ✓HIGH 7.5EPSS 1.15% | 9 October 2011 |
| CVE-2010-4921 | SQL injection vulnerability in inc_pollingboothmanager.asp in DMXReady Polling Booth Manager allows remote attackers to execute arbitrary SQL commands via the QuestionID parameter in a results action. | EXPLOIT ✓HIGH 7.5EPSS 1.19% | 8 October 2011 |
| CVE-2010-4920 | SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers to execute arbitrary SQL commands via the ad_ID parameter. | EXPLOIT ✓HIGH 7.5EPSS 0.98% | 8 October 2011 |
| CVE-2010-4919 | SQL injection vulnerability in detail.asp in Micronetsoft RV Dealer Website 1.0 allows remote attackers to execute arbitrary SQL commands via the vehicletypeID parameter. | EXPLOIT ✓HIGH 7.5EPSS 0.98% | 8 October 2011 |
| CVE-2010-4918 | PHP remote file inclusion vulnerability in iJoomla Magazine (com_magazine) component 3.0.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the config parameter to magazine.functions.php. | EXPLOITHIGH 7.5EPSS 2.34% | 8 October 2011 |
| CVE-2010-4917 | SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL commands via the words parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.15% | 8 October 2011 |
| CVE-2010-4916 | Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) ArticleID or (2) LibraryID parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.15% | 8 October 2011 |
| CVE-2010-4915 | SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL commands via the BookmarkID parameter in an EditBookmark action. | EXPLOIT ✓HIGH 7.5EPSS 1.15% | 8 October 2011 |
| CVE-2010-4914 | PHP remote file inclusion vulnerability in tools/phpmailer/class.phpmailer.php in PHP Classifieds 7.3 allows remote attackers to execute arbitrary PHP code via a URL in the lang_path parameter. | EXPLOITHIGH 7.5EPSS 2.05% | 8 October 2011 |
| CVE-2010-4913 | Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter. | EXPLOIT ✓MEDIUM 4.3EPSS 1.53% | 8 October 2011 |
| CVE-2010-4912 | SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands via the shopid parameter in a view action. | EXPLOIT ✓HIGH 7.5EPSS 0.99% | 8 October 2011 |
| CVE-2010-4911 | SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL commands via the sid parameter. | EXPLOIT ✓HIGH 7.5EPSS 0.99% | 8 October 2011 |
| CVE-2010-4910 | SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action. | EXPLOIT ✓HIGH 7.5EPSS 1.15% | 8 October 2011 |
| CVE-2010-4909 | Multiple cross-site scripting (XSS) vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) q parameter to search.php or the (2) image parameter to image.php. | EXPLOIT ×2 ✓MEDIUM 4.3EPSS 1.51% | 8 October 2011 |
| CVE-2010-4907 | Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote attackers to inject arbitrary web script or HTML via the user parameter. | EXPLOIT ✓MEDIUM 4.3EPSS 1.73% | 8 October 2011 |
| CVE-2010-4906 | SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute arbitrary SQL commands via the a parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.14% | 8 October 2011 |
| CVE-2010-4905 | SQL injection vulnerability in article_details.php in Softbiz Article Directory Script allows remote attackers to execute arbitrary SQL commands via the sbiz_id parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.02% | 8 October 2011 |
| CVE-2010-4904 | SQL injection vulnerability in the Aardvertiser (com_aardvertiser) component 2.1 and 2.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat_name parameter in a view action to index.php. | EXPLOIT ✓HIGH 7.5EPSS 0.99% | 8 October 2011 |
| CVE-2010-4902 | Multiple SQL injection vulnerabilities in the Clantools (com_clantools) component 1.2.3 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) squad or (2) showgame parameter to index.php. | EXPLOIT ×2HIGH 7.5EPSS 1.16% | 8 October 2011 |
| CVE-2010-4901 | Multiple cross-site scripting (XSS) vulnerabilities in char_map.php in MySource Matrix 3.28.3 allow remote attackers to inject arbitrary web script or HTML via the (1) height or (2) width parameter. | EXPLOIT ✓MEDIUM 4.3EPSS 1.73% | 8 October 2011 |
| CVE-2010-4899 | SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.15% | 8 October 2011 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.