CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
403,729 CVEs
1,739 on KEV
17,300 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-09
10,149 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2005-2980 EXP | Cross-site scripting (XSS) vulnerability in index.php in phpoutsourcing Noah's classifieds 1.3 allows remote attackers to inject arbitrary web script… | Patch early | 4.3 medium | 1.8% | 2005-09-20 |
| CVE-2005-3127 EXP | Cross-site scripting (XSS) vulnerability in index.php in lucidCMS 1.0.11 allows remote attackers to inject arbitrary web script or HTML via the query… | Patch early | 4.3 medium | 1.8% | 2005-10-04 |
| CVE-2005-3368 EXP | Cross-site scripting (XSS) vulnerability in the Search_Enhanced module in PHP-Nuke 7.9 allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.8% | 2005-10-30 |
| CVE-2005-3422 EXP | Cross-site scripting (XSS) vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web script or HTML via the error p… | Patch early | 4.3 medium | 1.8% | 2005-11-01 |
| CVE-2005-3742 EXP | Cross-site scripting (XSS) vulnerability in popup.php in Advanced Poll 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTM… | Patch early | 4.3 medium | 1.8% | 2005-11-22 |
| CVE-2005-3972 EXP | Cross-site scripting (XSS) vulnerability in extremesearch.php in Extreme Search Corporate Edition 6.0 and earlier allows remote attackers to inject ar… | Patch early | 4.3 medium | 1.8% | 2005-12-03 |
| CVE-2005-4032 EXP | Cross-site scripting (XSS) vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.8% | 2005-12-06 |
| CVE-2005-4047 EXP | Cross-site scripting (XSS) vulnerability in kb.asp in IISWorks ASPKnowledgeBase 2.0 allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.8% | 2005-12-07 |
| CVE-2005-4091 EXP | Cross-site scripting (XSS) vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote attackers to inject arbitrary web script or HTML via th… | Patch early | 4.3 medium | 1.8% | 2005-12-08 |
| CVE-2005-4136 EXP | Cross-site scripting (XSS) vulnerability in login.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web script or HTML via the customer… | Patch early | 4.3 medium | 1.8% | 2005-12-09 |
| CVE-2005-4166 EXP | Cross-site scripting (XSS) vulnerability in password.asp in DUWare DUportal Pro 3.4.3 allows remote attackers to inject arbitrary web script or HTML v… | Patch early | 4.3 medium | 1.8% | 2005-12-11 |
| CVE-2005-4239 EXP | Cross-site scripting (XSS) vulnerability in Search/DisplayResults.php in PHP JackKnife 2.21 and earlier allows remote attackers to inject arbitrary we… | Patch early | 4.3 medium | 1.8% | 2005-12-14 |
| CVE-2005-4241 EXP | Cross-site scripting (XSS) vulnerability in the category page in VCD-db 0.98 and earlier allows remote attackers to inject arbitrary web script or HTM… | Patch early | 4.3 medium | 1.8% | 2005-12-14 |
| CVE-2005-4255 EXP | Cross-site scripting (XSS) vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary web script or HTML via a hex-e… | Patch early | 4.3 medium | 1.8% | 2005-12-15 |
| CVE-2005-4285 EXP | Cross-site scripting (XSS) vulnerability in pdestore.cgi in Dick Copits PDEstore 1.8 and earlier allows remote attackers to inject arbitrary web scrip… | Patch early | 4.3 medium | 1.8% | 2005-12-16 |
| CVE-2005-4290 EXP | Cross-site scripting (XSS) vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.8% | 2005-12-16 |
| CVE-2005-4291 EXP | Cross-site scripting (XSS) vulnerability in cart.cgi in ECTOOLS Onlineshop 1.0 and earlier allows remote attackers to inject arbitrary web script or H… | Patch early | 4.3 medium | 1.8% | 2005-12-16 |
| CVE-2005-4314 EXP | Cross-site scripting (XSS) vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers to inject arbitrary web script… | Patch early | 4.3 medium | 1.8% | 2005-12-17 |
| CVE-2005-4328 EXP | Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.8% | 2005-12-17 |
| CVE-2005-4488 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.tpl in Redakto WCMS 3.2 and earlier allow remote attackers to inject arbitrary web script… | Patch early | 4.3 medium | 1.8% | 2005-12-22 |
| CVE-2006-0715 EXP | Cross-site scripting (XSS) vulnerability in sNews 1.3 allows remote attackers to inject arbitrary web script or HTML via the comment field. | Patch early | 4.3 medium | 1.8% | 2006-02-15 |
| CVE-2006-0792 EXP | Cross-site scripting (XSS) vulnerability in preferences.personal.php in V-webmail 1.6.2 allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.8% | 2006-02-19 |
| CVE-2006-1021 EXP | Cross-site scripting (XSS) vulnerability in sol_menu.php in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management System) 3 allows remote attackers… | Patch early | 4.3 medium | 1.8% | 2006-03-07 |
| CVE-2006-1131 EXP | Cross-site scripting (XSS) vulnerability in read.php in bitweaver CMS 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the com… | Patch early | 4.3 medium | 1.8% | 2006-03-10 |
| CVE-2019-9553 EXP | Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933. | Patch early | 6.1 medium | 1.8% | 2019-12-31 |
| CVE-2011-1062 EXP | Multiple cross-site scripting (XSS) vulnerabilities in include/html/header.php in TaskFreak! 0.6.4 allow remote attackers to inject arbitrary web scri… | Patch early | 4.3 medium | 1.8% | 2011-02-23 |
| CVE-2008-6848 EXP | Cross-site scripting (XSS) vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to inject arbitrary web script or HTML via the cate… | Patch early | 4.3 medium | 1.8% | 2009-07-07 |
| CVE-2008-6977 EXP | Cross-site scripting (XSS) vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows remote attackers to inject arbitrary web script or HTM… | Patch early | 4.3 medium | 1.8% | 2009-08-19 |
| CVE-2018-12094 EXP | Cross-site scripting (XSS) vulnerability in news.php in Dimofinf CMS Version 3.0.0 allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 5.4 medium | 1.8% | 2018-06-11 |
| CVE-2015-7566 EXP | The clie_5_attach function in drivers/usb/serial/visor.c in the Linux kernel through 4.4.1 allows physically proximate attackers to cause a denial of… | Patch early | 4.6 medium | 1.8% | 2016-02-08 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt