Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
398,853 CVEs1,728 in CISA KEV17,267 with EPSS ≥ 10%25,049 with a public exploitUpdated 28 September 2026
25,049 results · page 361 of 501
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2007-0161 | The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICE_CHANGE_CONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by… | EXPLOIT ✓MEDIUM 4.1EPSS 0.74% | 10 January 2007 |
| CVE-2007-0031 | Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a BIFF8 spreadsheet with a PALETTE record that contains a large number of… | EXPLOIT ✓HIGH 9.3EPSS 41.9% | 9 January 2007 |
| CVE-2007-0024 | Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000 SP4, XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted web… | EXPLOIT ×2 ✓HIGH 9.3EPSS 44.0% | 9 January 2007 |
| CVE-2007-0148 | Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via format string specifiers in the Javascript alert function. | EXPLOIT ✓MEDIUM 6.8EPSS 6.27% | 9 January 2007 |
| CVE-2007-0144 | Cross-site scripting (XSS) vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the ordernum parameter. | EXPLOIT ✓MEDIUM 6.8EPSS 1.87% | 9 January 2007 |
| CVE-2007-0143 | Multiple PHP remote file inclusion vulnerabilities in NUNE News Script 2.0pre2 allow remote attackers to execute arbitrary PHP code via a URL in the custom_admin_path parameter to (1) index.php or (2) archives.php. | EXPLOIT ✓MEDIUM 6.8EPSS 3.30% | 9 January 2007 |
| CVE-2007-0142 | SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the CatID parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.24% | 9 January 2007 |
| CVE-2007-0140 | SQL injection vulnerability in down.asp in Kolayindir Download (Yenionline) allows remote attackers to execute arbitrary SQL commands via the id parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.28% | 9 January 2007 |
| CVE-2007-0138 | formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with (1) AbfrageForm or (2) EingabeForm, allows remote attackers to cause a denial of service (daemon crash) via multiple requests containing many /../ sequences in the Name… | EXPLOIT ✓MEDIUM 5.0EPSS 2.84% | 9 January 2007 |
| CVE-2007-0135 | PHP remote file inclusion vulnerability in inc/init.inc.php in Aratix 0.2.2 beta 11 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the current_path parameter. | EXPLOIT ✓MEDIUM 6.8EPSS 2.79% | 9 January 2007 |
| CVE-2007-0134 | Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the action parameter, which is supplied to an eval function call in (1) cart.php and (2) page.php. | EXPLOIT ✓HIGH 7.5EPSS 11.4% | 9 January 2007 |
| CVE-2007-0133 | Multiple SQL injection vulnerabilities in display_review.php in iGeneric iG Shop 1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) user_login_cookie parameter. | EXPLOIT ✓HIGH 7.5EPSS 0.97% | 9 January 2007 |
| CVE-2007-0132 | SQL injection vulnerability in compare_product.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the id parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.81% | 9 January 2007 |
| CVE-2007-0130 | SQL injection vulnerability in user.php in iGeneric iG Calendar 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.31% | 9 January 2007 |
| CVE-2007-0129 | SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatID parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.08% | 9 January 2007 |
| CVE-2007-0128 | SQL injection vulnerability in info_book.asp in Digirez 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the book_id parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.11% | 9 January 2007 |
| CVE-2007-0126 | Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker. | EXPLOIT ✓HIGH 9.3EPSS 11.0% | 9 January 2007 |
| CVE-2007-0122 | Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via (1) the cat parameter to albmgr.php, and possibly (2) the gid parameter to usermgr.php;… | EXPLOIT ✓MEDIUM 6.5EPSS 3.12% | 9 January 2007 |
| CVE-2007-0121 | Cross-site scripting (XSS) vulnerability in search.asp in RI Blog 1.3 allows remote attackers to inject arbitrary web script or HTML via the q parameter. | EXPLOIT ✓MEDIUM 6.8EPSS 2.20% | 9 January 2007 |
| CVE-2007-0120 | Acunetix Web Vulnerability Scanner (WVS) 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of service (application crash) via multiple HTTP requests containing invalid Content-Length values. | EXPLOIT ✓LOW 1.9EPSS 1.75% | 9 January 2007 |
| CVE-2007-0119 | Multiple cross-site scripting (XSS) vulnerabilities in EditTag 1.2 allow remote attackers to inject arbitrary web script or HTML via the plain parameter to (1) mkpw_mp.cgi, (2) mkpw.pl, or (3) mkpw.cgi. | EXPLOIT ×3 ✓MEDIUM 6.8EPSS 2.13% | 9 January 2007 |
| CVE-2007-0118 | Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary files via an absolute pathname in the file parameter to (1) edittag.cgi, (2) edittag.pl, (3) edittag_mp.cgi, or (4) edittag_mp.pl. | EXPLOIT ×4 ✓MEDIUM 4.3EPSS 2.88% | 9 January 2007 |
| CVE-2007-0117 | DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Materials (BOM) files, which allows attackers to gain privileges via a BOM file under /Library/Receipts/, which triggers arbitrary file… | EXPLOIT ×2 ✓HIGH 10.0EPSS 5.39% | 9 January 2007 |
| CVE-2007-0113 | Buffer overflow in Packeteer PacketShaper PacketWise 8.x allows remote authenticated users to cause a denial of service (reset or reboot) via (1) a long traffic class argument to the "class show" command or (2) a long POLICY parameter value in… | EXPLOIT ✓MEDIUM 6.8EPSS 3.84% | 9 January 2007 |
| CVE-2007-0112 | SQL injection vulnerability in cats.asp in createauction allows remote attackers to execute arbitrary SQL commands via the catid parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.06% | 9 January 2007 |
| CVE-2007-0110 | Cross-site scripting (XSS) vulnerability in nidp/idff/sso in Novell Access Manager Identity Server before 3.0.0-1013 allows remote attackers to inject arbitrary web script or HTML via the IssueInstant parameter, which is not properly handled in the… | EXPLOIT ✓MEDIUM 6.8EPSS 2.02% | 9 January 2007 |
| CVE-2007-0107 | WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query, which allows remote attackers to bypass SQL injection protection schemes and execute arbitrary SQL commands via multibyte charsets,… | EXPLOIT ✓MEDIUM 6.8EPSS 7.59% | 9 January 2007 |
| CVE-2007-0103 | The Adobe PDF specification 1.3, as implemented by Adobe Acrobat before 8.0.0, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a… | EXPLOIT ✓MEDIUM 6.8EPSS 15.5% | 9 January 2007 |
| CVE-2007-0098 | Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. | EXPLOIT ✓MEDIUM 6.8EPSS 2.15% | 5 January 2007 |
| CVE-2007-0093 | SQL injection vulnerability in page.php in Simple Web Content Management System allows remote attackers to execute arbitrary SQL commands via the id parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.80% | 5 January 2007 |
| CVE-2007-0092 | SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL commands via the product_id parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.12% | 5 January 2007 |
| CVE-2007-0091 | newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for newsCMS.mdb. | EXPLOIT ✓HIGH 7.5EPSS 2.56% | 5 January 2007 |
| CVE-2007-0085 | Unspecified vulnerability in sys/dev/pci/vga_pci.c in the VGA graphics driver for wscons in OpenBSD 3.9 and 4.0, when the kernel is compiled with the PCIAGP option and a non-AGP device is being used, allows local users to gain privileges via unspecified… | EXPLOIT ✓MEDIUM 6.0EPSS 0.56% | 5 January 2007 |
| CVE-2007-0082 | users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows remote authenticated users to upload and execute arbitrary PHP scripts. | EXPLOIT ✓MEDIUM 6.5EPSS 2.08% | 5 January 2007 |
| CVE-2007-0081 | Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory. | EXPLOIT ✓MEDIUM 6.8EPSS 0.66% | 5 January 2007 |
| CVE-2007-0059 | Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie (.MOV) with an HREF Track (HREFTrack) that contains an automatic action… | EXPLOIT ✓MEDIUM 6.8EPSS 5.68% | 5 January 2007 |
| CVE-2007-0056 | Multiple cross-site scripting (XSS) vulnerabilities in AShop Deluxe 4.5 and AShop Administration Panel allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to (a) ashop/catalogue.php and (b) ashop/basket.php, the (2)… | EXPLOIT ×6 ✓MEDIUM 6.8EPSS 2.66% | 4 January 2007 |
| CVE-2007-0055 | Directory traversal vulnerability in formbankcgi.exe/AbfrageForm in Formbankserver 1.9 allows remote attackers to read arbitrary files via directory traversal sequences in the Name parameter. | EXPLOIT ✓MEDIUM 5.0EPSS 3.00% | 4 January 2007 |
| CVE-2007-0054 | Cross-site scripting (XSS) vulnerability in gbrowse.php in Belchior Foundry vCard PRO allows remote attackers to inject arbitrary web script or HTML via the sortby parameter. | EXPLOIT ✓MEDIUM 6.8EPSS 1.70% | 4 January 2007 |
| CVE-2007-0053 | SQL injection vulnerability in detail.asp in ASP SiteWare autoDealer 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the iPro parameter. | EXPLOIT ×2 ✓HIGH 7.5EPSS 1.27% | 4 January 2007 |
| CVE-2007-0052 | SQL injection vulnerability in haberdetay.asp in Vizayn Haber allows remote attackers to execute arbitrary SQL commands via the id parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.24% | 4 January 2007 |
| CVE-2007-0051 | Format string vulnerability in Apple iPhoto 6.0.5 (316), and other versions before 6.0.6, allows remote user-assisted attackers to execute arbitrary code via a crafted photocast with format string specifiers in the title of an RSS iPhoto feed. | EXPLOIT ✓MEDIUM 6.8EPSS 9.10% | 4 January 2007 |
| CVE-2007-0049 | Geckovich TaskTracker Pro 1.5 and earlier allows remote attackers to add administrative or other accounts via an Add action with a modified GroupID in a direct request to Customize.asp. | EXPLOIT ✓HIGH 7.5EPSS 2.54% | 4 January 2007 |
| CVE-2007-0046 | Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to execute arbitrary code by causing an error via a javascript: URI call to document.write in the (1) FDF, (2) XML, or… | EXPLOIT ✓HIGH 7.5EPSS 55.9% | 3 January 2007 |
| CVE-2007-0044 | Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a URL in the (1) FDF, (2) xml, and (3) xfdf AJAX… | EXPLOIT ✓MEDIUM 4.3EPSS 55.9% | 3 January 2007 |
| CVE-2007-0017 | Multiple format string vulnerabilities in (1) the cdio_log_handler function in modules/access/cdda/access.c in the CDDA (libcdda_plugin) plugin, and the (2) cdio_log_handler and (3) vcd_log_handler functions in modules/access/vcdx/access.c in the VCDX… | EXPLOIT ×2 ✓MEDIUM 6.8EPSS 12.1% | 3 January 2007 |
| CVE-2007-0016 | Stack-based buffer overflow in MoviePlay 4.76 allows remote attackers to execute arbitrary code via a long filename in a LST file. | EXPLOIT ✓HIGH 7.5EPSS 5.14% | 3 January 2007 |
| CVE-2007-0015 | Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a long rtsp:// URI. | EXPLOIT ×3 ✓MEDIUM 6.8EPSS 48.7% | 1 January 2007 |
| CVE-2006-7231 | SQL injection vulnerability in display.asp in Civica Software Civica allows remote attackers to execute arbitrary SQL commands via the Entry parameter. | EXPLOIT ✓HIGH 7.5EPSS 0.91% | 31 December 2006 |
| CVE-2006-6917 | Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote attackers to execute arbitrary code in the Tape Engine (tapeeng.exe) via a crafted RPC request with (1) opnum 38, which is not… | EXPLOIT ✓HIGH 10.0EPSS 29.5% | 31 December 2006 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.