CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
403,891 CVEs
1,739 on KEV
17,300 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-10
10,149 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-2561 EXP | Multiple cross-site scripting (XSS) vulnerabilities in 427BB 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO… | Patch early | 4.3 medium | 1.5% | 2008-06-06 |
| CVE-2008-2979 EXP | Multiple cross-site scripting (XSS) vulnerabilities in phpi/login.php in Ourvideo CMS 9.5 allow remote attackers to inject arbitrary web script or HTM… | Patch early | 4.3 medium | 1.5% | 2008-07-02 |
| CVE-2008-3088 EXP | Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attackers to inject arbitrary web scri… | Patch early | 4.3 medium | 1.5% | 2008-07-09 |
| CVE-2008-3391 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5 allow remote attackers to inject arbitrary web script or HTML via the mode pa… | Patch early | 4.3 medium | 1.5% | 2008-07-31 |
| CVE-2008-3505 EXP | Cross-site scripting (XSS) vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via the nr pa… | Patch early | 4.3 medium | 1.5% | 2008-08-06 |
| CVE-2008-4089 EXP | Cross-site scripting (XSS) vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to inject arbitrary web script or H… | Patch early | 4.3 medium | 1.5% | 2008-09-15 |
| CVE-2008-5059 EXP | Cross-site scripting (XSS) vulnerability in index.php in ModernBill 4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2008-11-13 |
| CVE-2008-5214 EXP | Cross-site scripting (XSS) vulnerability in service/calendrier.php in ClanLite 2.2006.05.20 allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2008-11-24 |
| CVE-2008-5271 EXP | Cross-site scripting (XSS) vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.5% | 2008-11-28 |
| CVE-2008-5290 EXP | Cross-site scripting (XSS) vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to inject arbitrary web script or H… | Patch early | 4.3 medium | 1.5% | 2008-12-01 |
| CVE-2008-5933 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in CMS ISWEB 3.0 allow remote attackers to inject arbitrary web script or HTML via (1… | Patch early | 4.3 medium | 1.5% | 2009-01-21 |
| CVE-2008-7134 EXP | Multiple cross-site scripting (XSS) vulnerabilities in the default URI in Chris LaPointe RedGalaxy Download Center 1.2 allow remote attackers to injec… | Patch early | 4.3 medium | 1.5% | 2009-09-01 |
| CVE-2012-5918 EXP | razorCMS 1.2 allows remote authenticated users to access administrator directories and files by creating and deleting a directory. | Patch early | 4.0 medium | 1.5% | 2012-11-19 |
| CVE-2007-4441 EXP | Buffer overflow in php_win32std.dll in the win32std extension for PHP 5.2.0 and earlier allows context-dependent attackers to execute arbitrary code v… | Patch early | 4.6 medium | 1.5% | 2007-08-21 |
| CVE-2007-2308 EXP | Cross-site scripting (XSS) vulnerability in cas.php in FloweRS 2.0 allows remote attackers to inject arbitrary web script or HTML via the rok paramete… | Patch early | 4.3 medium | 1.5% | 2007-04-26 |
| CVE-2007-2310 EXP | Cross-site scripting (XSS) vulnerability in plugins/spaw/img_popup.php in BloofoxCMS 0.2.2 allows remote attackers to inject arbitrary web script or H… | Patch early | 4.3 medium | 1.5% | 2007-04-26 |
| CVE-2007-4434 EXP | Cross-site scripting (XSS) vulnerability in textfilesearch.asp in the Text File Search ASP (Classic) edition allows remote attackers to inject arbitra… | Patch early | 4.3 medium | 1.5% | 2007-08-20 |
| CVE-2009-1897 EXP | The tun_chr_poll function in drivers/net/tun.c in the tun subsystem in the Linux kernel 2.6.30 and 2.6.30.1, when the -fno-delete-null-pointer-checks… | Patch early | 6.9 medium | 1.5% | 2009-07-20 |
| CVE-2009-2216 EXP | Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web script or H… | Patch early | 6.1 medium | 1.5% | 2009-06-25 |
| CVE-2007-5455 EXP | Cross-site scripting (XSS) vulnerability in wxis.exe in WWWISIS 7.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a c… | Patch early | 4.3 medium | 1.5% | 2007-10-14 |
| CVE-2007-5649 EXP | Cross-site scripting (XSS) vulnerability in lostpwd.php in Creative Digital Resources SocketMail 2.2.1 allows remote attackers to inject arbitrary web… | Patch early | 4.3 medium | 1.5% | 2007-10-23 |
| CVE-2010-4331 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel 2.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) defau… | Patch early | 4.3 medium | 1.5% | 2011-01-20 |
| CVE-2010-4852 EXP | Cross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote attackers to inject arbitrary web script or HTML via the reason p… | Patch early | 4.3 medium | 1.5% | 2011-09-27 |
| CVE-2010-4985 EXP | Cross-site scripting (XSS) vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to inject arbitrary web script or H… | Patch early | 4.3 medium | 1.5% | 2011-11-01 |
| CVE-2012-1213 EXP | Cross-site scripting (XSS) vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite (ZCS) 6.x before 6.0.15 and 7.x befor… | Patch early | 4.3 medium | 1.5% | 2012-02-24 |
| CVE-2011-0902 EXP | Multiple untrusted search path vulnerabilities in the Java Service in Sun Microsystems SunScreen Firewall on SunOS 5.9 allow local users to execute ar… | Patch early | 6.9 medium | 1.5% | 2011-02-07 |
| CVE-2007-4819 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Txx CMS 0.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vecto… | Patch early | 4.3 medium | 1.5% | 2007-09-11 |
| CVE-2007-6085 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or HTML via th… | Patch early | 4.3 medium | 1.5% | 2007-11-22 |
| CVE-2007-6297 EXP | Multiple cross-site scripting (XSS) vulnerabilities in PHPMyChat 0.14.5 allow remote attackers to inject arbitrary web script or HTML via the (1) LIMI… | Patch early | 4.3 medium | 1.5% | 2007-12-10 |
| CVE-2008-6503 EXP | Multiple cross-site scripting (XSS) vulnerabilities in PrestaShop 1.1.0.3 allow remote attackers to inject arbitrary web script or HTML via the PATH_I… | Patch early | 4.3 medium | 1.5% | 2009-03-20 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt