CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
403,905 CVEs
1,739 on KEV
17,300 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-10
10,149 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-3511 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2008-08-07 |
| CVE-2003-0124 EXP | man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, which causes the my_xsprintf function to ret… | Patch early | 4.6 medium | 1.5% | 2003-03-18 |
| CVE-2008-0268 EXP | Cross-site scripting (XSS) vulnerability in view.php in eTicket 1.5.5.2 allows remote attackers to inject arbitrary web script or HTML via the s param… | Patch early | 4.3 medium | 1.5% | 2008-01-15 |
| CVE-2009-1845 EXP | Cross-site scripting (XSS) vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attackers to inject arbitrary web sc… | Patch early | 4.3 medium | 1.5% | 2009-06-01 |
| CVE-2009-3509 EXP | Cross-site scripting (XSS) vulnerability in admin/admin_index.php in CJ Dynamic Poll PRO 2.0 allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2009-10-01 |
| CVE-2009-3186 EXP | Multiple cross-site scripting (XSS) vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web script or HTML via the (1) t para… | Patch early | 4.3 medium | 1.5% | 2009-09-15 |
| CVE-2009-3225 EXP | Multiple cross-site scripting (XSS) vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Affiliate Network Classifieds, a… | Patch early | 4.3 medium | 1.5% | 2009-09-16 |
| CVE-2010-0468 EXP | Cross-site scripting (XSS) vulnerability in utilities/longproc.cfm in PaperThin CommonSpot Content Server allows remote attackers to inject arbitrary… | Patch early | 4.3 medium | 1.5% | 2010-02-02 |
| CVE-2010-4246 EXP | Multiple cross-site scripting (XSS) vulnerabilities in graph.php in pfSense 1.2.3 and 2 beta 4 allow remote attackers to inject arbitrary web script o… | Patch early | 4.3 medium | 1.5% | 2010-12-07 |
| CVE-2010-4366 EXP | Multiple cross-site scripting (XSS) vulnerabilities in forum_new_topic.php in Chameleon Social Networking allow remote attackers to inject arbitrary w… | Patch early | 4.3 medium | 1.5% | 2010-12-01 |
| CVE-2002-2376 EXP | Cross-site scripting (XSS) vulnerability in E-Guest_sign.pl in E-Guest 1.1 allows remote attackers to inject arbitrary SSI directives, web script, and… | Patch early | 4.3 medium | 1.5% | 2002-12-31 |
| CVE-2005-4879 EXP | Multiple cross-site scripting (XSS) vulnerabilities in jax_guestbook.php in Jax Guestbook 3.1 and 3.31 allow remote attackers to inject arbitrary web… | Patch early | 4.3 medium | 1.5% | 2009-03-31 |
| CVE-2008-0146 EXP | Cross-site scripting (XSS) vulnerability in the error page in W3-mSQL allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO… | Patch early | 4.3 medium | 1.5% | 2008-01-08 |
| CVE-2008-0574 EXP | Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.01.02 allows remote attackers to inject arbitrary web script or HTML via the sort… | Patch early | 4.3 medium | 1.5% | 2008-02-05 |
| CVE-2008-1300 EXP | Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.j… | Patch early | 4.3 medium | 1.5% | 2008-03-12 |
| CVE-2008-1458 EXP | Cross-site scripting (XSS) vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the q parame… | Patch early | 4.3 medium | 1.5% | 2008-03-24 |
| CVE-2008-2196 EXP | Cross-site scripting (XSS) vulnerability in admin.php in LifeType 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the newBlog… | Patch early | 4.3 medium | 1.5% | 2008-05-14 |
| CVE-2008-6644 EXP | Cross-site scripting (XSS) vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows remote attackers to inject arbitrary web script or HTM… | Patch early | 4.3 medium | 1.5% | 2009-04-07 |
| CVE-2008-7242 EXP | Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2009-09-17 |
| CVE-2009-0338 EXP | Cross-site scripting (XSS) vulnerability in inc_webblogmanager.asp in DMXReady Blog Manager allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2009-01-29 |
| CVE-2007-3694 EXP | Cross-site scripting (XSS) vulnerability in login.php in Miro Project Broadcast Machine 0.9.9.9 allows remote attackers to inject arbitrary web script… | Patch early | 4.3 medium | 1.5% | 2007-11-14 |
| CVE-2007-5428 EXP | Cross-site scripting (XSS) vulnerability in UMI CMS allows remote attackers to inject arbitrary web script or HTML via the search_string parameter to… | Patch early | 4.3 medium | 1.5% | 2007-10-12 |
| CVE-2007-5478 EXP | Cross-site scripting (XSS) vulnerability in projects in Nabh Stringbeans Portal (sbportal) 3.2 allows remote attackers to inject arbitrary web script… | Patch early | 4.3 medium | 1.5% | 2007-10-16 |
| CVE-2010-4909 EXP | Multiple cross-site scripting (XSS) vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1)… | Patch early | 4.3 medium | 1.5% | 2011-10-08 |
| CVE-2023-31699 EXP | ChurchCRM v4.5.4 is vulnerable to Reflected Cross-Site Scripting (XSS) via image file. | Patch early | 4.8 medium | 1.5% | 2023-05-17 |
| CVE-2009-3530 EXP | Cross-site scripting (XSS) vulnerability in storefront.php in RadScripts RadBids Gold 4 allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.5% | 2009-10-02 |
| CVE-2007-3064 EXP | Cross-site scripting (XSS) vulnerability in diary.php in My Databook allows remote attackers to inject arbitrary web script or HTML via the year param… | Patch early | 4.3 medium | 1.5% | 2007-06-06 |
| CVE-2007-5010 EXP | Cross-site scripting (XSS) vulnerability in WebBatch allows remote attackers to inject arbitrary web script or HTML via the URL to webbatch.exe. | Patch early | 4.3 medium | 1.5% | 2007-09-20 |
| CVE-2007-5052 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Vigile CMS 1.8 allow remote attackers to inject arbitrary web script or HTML via a… | Patch early | 4.3 medium | 1.5% | 2007-09-24 |
| CVE-2007-6136 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in M2Scripts MySpace Scripts Poll Creator allow remote attackers to inject arbitrary… | Patch early | 4.3 medium | 1.5% | 2007-11-27 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt