CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
403,922 CVEs
1,739 on KEV
17,301 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-10
10,149 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-2911 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Contenido 4.8.4 allow remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2008-06-30 |
| CVE-2015-2145 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to inject arbitrary web script o… | Patch early | 4.8 medium | 1.5% | 2017-10-06 |
| CVE-2012-1217 EXP | Multiple cross-site scripting (XSS) vulnerabilities in STHS v2 Web Portal 2.2 allow remote attackers to inject arbitrary web script or HTML via the te… | Patch early | 4.3 medium | 1.5% | 2012-02-21 |
| CVE-2007-6455 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitrary web script or HTML via the… | Patch early | 4.3 medium | 1.5% | 2007-12-20 |
| CVE-2008-1345 EXP | Cross-site scripting (XSS) vulnerability in plugins/calendar/calendar_backend.php in MyioSoft EasyCalendar 4.0tr and earlier allows remote attackers t… | Patch early | 4.3 medium | 1.5% | 2008-03-17 |
| CVE-2008-1347 EXP | Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allow remote attack… | Patch early | 4.3 medium | 1.5% | 2008-03-17 |
| CVE-2008-2680 EXP | Multiple cross-site scripting (XSS) vulnerabilities in _db/compact.asp in Realm CMS 2.3 and earlier allow remote attackers to inject arbitrary web scr… | Patch early | 4.3 medium | 1.5% | 2008-06-12 |
| CVE-2008-2842 EXP | Cross-site scripting (XSS) vulnerability in edit/showmedia.asp in doITLive CMS 2.50 and earlier allows remote attackers to inject arbitrary web script… | Patch early | 4.3 medium | 1.5% | 2008-06-25 |
| CVE-2008-3779 EXP | Cross-site scripting (XSS) vulnerability in search/index.php in Five Star Review Script allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.5% | 2008-08-26 |
| CVE-2008-5323 EXP | Cross-site scripting (XSS) vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary web script or HTML via the s pa… | Patch early | 4.3 medium | 1.5% | 2008-12-03 |
| CVE-2008-5976 EXP | Multiple cross-site scripting (XSS) vulnerabilities in siteadmin/forgot.php in PHP JOBWEBSITE PRO allow remote attackers to inject arbitrary web scrip… | Patch early | 4.3 medium | 1.5% | 2009-01-27 |
| CVE-2008-6370 EXP | Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2009-03-02 |
| CVE-2008-6501 EXP | Cross-site scripting (XSS) vulnerability in profiles/index.php in Pro Chat Rooms 3.0.2 allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.5% | 2009-03-20 |
| CVE-2008-6727 EXP | Cross-site scripting (XSS) vulnerability in Ultimate PHP Board (UPB) 2.2.2, 2.2.1, and earlier 2.x versions allows remote attackers to inject arbitrar… | Patch early | 4.3 medium | 1.5% | 2009-04-20 |
| CVE-2002-2246 EXP | Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote attackers to inject arbitrary web script or HTML via the HTTP… | Patch early | 4.3 medium | 1.5% | 2002-12-31 |
| CVE-2002-2339 EXP | Cross-site scripting (XSS) vulnerability in configure.asp in Script-Shed GuestBook 1.0 allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.5% | 2002-12-31 |
| CVE-2010-0319 EXP | Cross-site scripting (XSS) vulnerability in index.php in Docmint 1.0 and 2.1 allows remote attackers to inject arbitrary web script or HTML via the id… | Patch early | 4.3 medium | 1.5% | 2010-01-15 |
| CVE-2010-0321 EXP | Cross-site scripting (XSS) vulnerability in jobs/index.php in Jamit Job Board 3.0 allows remote attackers to inject arbitrary web script or HTML via t… | Patch early | 4.3 medium | 1.5% | 2010-01-15 |
| CVE-2010-0376 EXP | Cross-site scripting (XSS) vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to inject arbit… | Patch early | 4.3 medium | 1.5% | 2010-01-21 |
| CVE-2010-1662 EXP | Cross-site scripting (XSS) vulnerability in acpmoderate.php in PHP-Quick-Arcade (PHPQA) 3.0.21 allows remote attackers to inject arbitrary web script… | Patch early | 4.3 medium | 1.5% | 2010-05-03 |
| CVE-2010-2040 EXP | Cross-site scripting (XSS) vulnerability in search.php in V-EVA Shopzilla Affiliate Script PHP allows remote attackers to inject arbitrary web script… | Patch early | 4.3 medium | 1.5% | 2010-05-25 |
| CVE-2010-2669 EXP | Cross-site scripting (XSS) vulnerability in admin/editors/text/editor-body.php in Orbis CMS 1.0.2 allows remote attackers to inject arbitrary web scri… | Patch early | 4.3 medium | 1.5% | 2010-07-08 |
| CVE-2010-2844 EXP | Cross-site scripting (XSS) vulnerability in news_show.php in Newanz NewsOffice 2.0.18 allows remote attackers to inject arbitrary web script or HTML v… | Patch early | 4.3 medium | 1.5% | 2010-07-25 |
| CVE-2010-3457 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2010-09-17 |
| CVE-2009-2884 EXP | Cross-site scripting (XSS) vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attackers to inject arbitrary web scri… | Patch early | 4.3 medium | 1.5% | 2009-08-20 |
| CVE-2009-2889 EXP | Cross-site scripting (XSS) vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to inject arbitrary web script or HTML via th… | Patch early | 4.3 medium | 1.5% | 2009-08-20 |
| CVE-2009-3187 EXP | Cross-site scripting (XSS) vulnerability in gamelist.php in Stand Alone Arcade 1.1 allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2009-09-15 |
| CVE-2009-3189 EXP | Cross-site scripting (XSS) vulnerability in search.php in DigiOz Guestbook 1.7.2 allows remote attackers to inject arbitrary web script or HTML via th… | Patch early | 4.3 medium | 1.5% | 2009-09-15 |
| CVE-2009-3194 EXP | Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech SearchFeed Script allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2009-09-15 |
| CVE-2009-3196 EXP | Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech PHP Video Script allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2009-09-15 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt