CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
403,932 CVEs
1,739 on KEV
17,300 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-10
10,149 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2009-3311 EXP | Cross-site scripting (XSS) vulnerability in index.php in RSSMediaScript allows remote attackers to inject arbitrary web script or HTML via the page pa… | Patch early | 4.3 medium | 1.5% | 2009-09-23 |
| CVE-2009-3355 EXP | Cross-site scripting (XSS) vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows remote attackers to inject arbitrary web script or HTM… | Patch early | 4.3 medium | 1.5% | 2009-09-24 |
| CVE-2009-3598 EXP | Cross-site scripting (XSS) vulnerability in survey_result.php in eCardMAX FormXP 2007 allows remote attackers to inject arbitrary web script or HTML v… | Patch early | 4.3 medium | 1.5% | 2009-10-08 |
| CVE-2009-3599 EXP | Cross-site scripting (XSS) vulnerability in single_winner1.php in HUBScript 1.0 allows remote attackers to inject arbitrary web script or HTML via the… | Patch early | 4.3 medium | 1.5% | 2009-10-08 |
| CVE-2009-4464 EXP | Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2009-12-30 |
| CVE-2009-4684 EXP | Cross-site scripting (XSS) vulnerability in index.php in EZodiak allows remote attackers to inject arbitrary web script or HTML via the sign parameter… | Patch early | 4.3 medium | 1.5% | 2010-03-10 |
| CVE-2009-4685 EXP | Cross-site scripting (XSS) vulnerability in celebrities.php in PHP Scripts Now Astrology allows remote attackers to inject arbitrary web script or HTM… | Patch early | 4.3 medium | 1.5% | 2010-03-10 |
| CVE-2009-4686 EXP | Cross-site scripting (XSS) vulnerability in account.php in phplemon AdQuick 2.2.1 allows remote attackers to inject arbitrary web script or HTML via t… | Patch early | 4.3 medium | 1.5% | 2010-03-10 |
| CVE-2009-4714 EXP | Cross-site scripting (XSS) vulnerability in the quiz module for XOOPS Celepar allows remote attackers to inject arbitrary web script or HTML via the P… | Patch early | 4.3 medium | 1.5% | 2010-03-15 |
| CVE-2009-4782 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Theeta CMS, possibly 0.01, allow remote attackers to inject arbitrary web script or HTML via th… | Patch early | 4.3 medium | 1.5% | 2010-04-21 |
| CVE-2009-4856 EXP | Cross-site scripting (XSS) vulnerability in subitems.php in PHP Easy Shopping Cart 3.1R allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.5% | 2010-05-11 |
| CVE-2009-2437 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Rentventory 1.0.1 allow remote attackers to inject arbitrary web script or HTML vi… | Patch early | 4.3 medium | 1.5% | 2009-07-13 |
| CVE-2009-2441 EXP | Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script or HTML vi… | Patch early | 4.3 medium | 1.5% | 2009-07-13 |
| CVE-2009-2442 EXP | Cross-site scripting (XSS) vulnerability in public/index.php in Linea21 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the s… | Patch early | 4.3 medium | 1.5% | 2009-07-13 |
| CVE-2014-9439 EXP | Cross-site scripting (XSS) vulnerability in Easy File Sharing Web Server 6.8 allows remote attackers to inject arbitrary web script or HTML via the us… | Patch early | 4.3 medium | 1.5% | 2015-01-02 |
| CVE-2007-1919 EXP | Cross-site scripting (XSS) vulnerability in index.php in Arizona Dream Livre d'or (livor) 2.5 allows remote attackers to inject arbitrary web script o… | Patch early | 4.3 medium | 1.5% | 2007-04-10 |
| CVE-2009-3719 EXP | Cross-site scripting (XSS) vulnerability in comment.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2009-10-16 |
| CVE-2009-4575 EXP | Cross-site scripting (XSS) vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 RC2 for Joomla! allows remote attackers to inject arbitrary… | Patch early | 4.3 medium | 1.5% | 2010-01-06 |
| CVE-2009-4692 EXP | Cross-site scripting (XSS) vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject arbitrary web script or HTML v… | Patch early | 4.3 medium | 1.5% | 2010-03-10 |
| CVE-2009-4697 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in RadNICS Gold 5 allow remote attackers to inject arbitrary web script or HTML via t… | Patch early | 4.3 medium | 1.5% | 2010-03-10 |
| CVE-2009-4713 EXP | Multiple cross-site scripting (XSS) vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to inject arbitrary web scri… | Patch early | 4.3 medium | 1.5% | 2010-03-15 |
| CVE-2009-4814 EXP | Cross-site scripting (XSS) vulnerability in Wolfram Research webMathematica allows remote attackers to inject arbitrary web script or HTML via the URI… | Patch early | 4.3 medium | 1.5% | 2010-04-27 |
| CVE-2010-4514 EXP | Cross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote attackers to inject arbitrary w… | Patch early | 4.3 medium | 1.5% | 2010-12-09 |
| CVE-2007-6669 EXP | Cross-site scripting (XSS) vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the str… | Patch early | 4.3 medium | 1.5% | 2008-01-08 |
| CVE-2008-1956 EXP | Cross-site scripting (XSS) vulnerability in index.php in Wikepage Opus 13 2007.2 allows remote attackers to inject arbitrary web script or HTML via th… | Patch early | 4.3 medium | 1.5% | 2008-04-25 |
| CVE-2008-2126 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Tux CMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) q paramet… | Patch early | 4.3 medium | 1.5% | 2008-05-09 |
| CVE-2008-4737 EXP | Cross-site scripting (XSS) vulnerability in wholite.cgi in WhoDomLite 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the dom… | Patch early | 4.3 medium | 1.5% | 2008-10-24 |
| CVE-2008-5891 EXP | Cross-site scripting (XSS) vulnerability in the profile editing functionality in Injader before 2.1.2 allows remote attackers to inject arbitrary web… | Patch early | 4.3 medium | 1.5% | 2009-01-12 |
| CVE-2008-6620 EXP | Multiple cross-site scripting (XSS) vulnerabilities in javascript/editor/editor/filemanager/browser/mcpuk/connectors/php/connector.php in GraFX miniCW… | Patch early | 4.3 medium | 1.5% | 2009-04-06 |
| CVE-2008-6764 EXP | Cross-site scripting (XSS) vulnerability in login.php in Silentum LoginSys 1.0.0 allows remote attackers to inject arbitrary web script or HTML via th… | Patch early | 4.3 medium | 1.5% | 2009-04-28 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt