CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,069 CVEs
1,739 on KEV
17,300 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-10
10,149 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2012-1018 EXP | Cross-site scripting (XSS) vulnerability in includes/convert.php in D-Mack Media Currency Converter (mod_currencyconverter) module 1.0.0 for Joomla! a… | Patch early | 4.3 medium | 1.5% | 2012-02-08 |
| CVE-2012-1211 EXP | Cross-site scripting (XSS) vulnerability in pfile/kommentar.php in Powie pFile 1.02 allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2012-02-24 |
| CVE-2009-4364 EXP | Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog allows remote attackers to inject arbitrary web script or HTML via the cnam… | Patch early | 4.3 medium | 1.5% | 2009-12-21 |
| CVE-2010-1111 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Jokes Complete Website allow remote attackers to inject arbitrary web script or HTML via the (1… | Patch early | 4.3 medium | 1.5% | 2010-03-25 |
| CVE-2007-3653 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2008-07-09 |
| CVE-2008-1296 EXP | Multiple cross-site scripting (XSS) vulnerabilities in EncapsGallery 1.11.2 allow remote attackers to inject arbitrary web script or HTML via the file… | Patch early | 4.3 medium | 1.5% | 2008-03-12 |
| CVE-2008-2082 EXP | Cross-site scripting (XSS) vulnerability in index.php in Siteman 2.0.x2 allows remote attackers to inject arbitrary web script or HTML via the module… | Patch early | 4.3 medium | 1.5% | 2008-05-05 |
| CVE-2008-3679 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in IDevSpot PhpLinkExchange 1.01 allow remote attackers to inject arbitrary web scrip… | Patch early | 4.3 medium | 1.5% | 2008-08-14 |
| CVE-2008-6891 EXP | Multiple cross-site scripting (XSS) vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web script or HTML via the (1) foru… | Patch early | 4.3 medium | 1.5% | 2009-08-03 |
| CVE-2012-4051 EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interface in JAMF Casper Suite before… | Patch early | 6.8 medium | 1.5% | 2012-09-28 |
| CVE-2009-4461 EXP | Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO… | Patch early | 4.3 medium | 1.5% | 2009-12-30 |
| CVE-2010-0365 EXP | Cross-site scripting (XSS) vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows remote attackers to inject arbit… | Patch early | 4.3 medium | 1.5% | 2010-01-21 |
| CVE-2010-0371 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Hitmaaan Gallery 1.3 allow remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.5% | 2010-01-21 |
| CVE-2010-0607 EXP | Cross-site scripting (XSS) vulnerability in Forms/status_statistics_1 in the Sterlite SAM300 AX Router allows remote attackers to inject arbitrary web… | Patch early | 4.3 medium | 1.5% | 2010-02-11 |
| CVE-2010-0804 EXP | Cross-site scripting (XSS) vulnerability in index.php in iBoutique 4.0 allows remote attackers to inject arbitrary web script or HTML via the key para… | Patch early | 4.3 medium | 1.5% | 2010-03-02 |
| CVE-2009-4450 EXP | Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2009-12-29 |
| CVE-2009-4767 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.5% | 2010-04-20 |
| CVE-2010-2433 EXP | Multiple cross-site scripting (XSS) vulnerabilities in content/internalError.jsp in IBM WebSphere ILOG JRules 6.7 allow remote attackers to inject arb… | Patch early | 4.3 medium | 1.5% | 2010-06-24 |
| CVE-2010-2715 EXP | Cross-site scripting (XSS) vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arbitrary web script or HTML via t… | Patch early | 4.3 medium | 1.5% | 2010-07-13 |
| CVE-2007-5725 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Smart-Shop allow remote attackers to inject arbitrary web script or HTML via (1) the email para… | Patch early | 4.3 medium | 1.5% | 2007-10-30 |
| CVE-2007-5952 EXP | Cross-site scripting (XSS) vulnerability in admin/index.php in Helios Calendar 1.2.1 Beta allows remote attackers to inject arbitrary web script or HT… | Patch early | 4.3 medium | 1.5% | 2007-11-14 |
| CVE-2008-0125 EXP | Cross-site scripting (XSS) vulnerability in phpstats.php in Michael Wagner phpstats 0.1 alpha allows remote attackers to inject arbitrary web script o… | Patch early | 4.3 medium | 1.5% | 2008-03-24 |
| CVE-2008-0436 EXP | Cross-site scripting (XSS) vulnerability in profile-upload/upload.asp in PD9 Software MegaBBS 1.5.14b allows remote attackers to inject arbitrary web… | Patch early | 4.3 medium | 1.5% | 2008-01-23 |
| CVE-2008-0688 EXP | Cross-site scripting (XSS) vulnerability in catalog.php in Smartscript Domain Trader 2.0 allows remote attackers to inject arbitrary web script or HTM… | Patch early | 4.3 medium | 1.5% | 2008-02-12 |
| CVE-2008-1045 EXP | Cross-site scripting (XSS) vulnerability in the file tree navigation function in system/workplace/views/explorer/tree_files.jsp in Alkacon OpenCMS 7.0… | Patch early | 4.3 medium | 1.5% | 2008-02-27 |
| CVE-2008-1348 EXP | Cross-site scripting (XSS) vulnerability in index.php in the eWebsite eWeather (Weather) module for PHP-Nuke allows remote attackers to inject arbitra… | Patch early | 4.3 medium | 1.5% | 2008-03-17 |
| CVE-2008-1787 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Poplar Gedcom Viewer 2.0 allow remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2008-04-15 |
| CVE-2008-2117 EXP | Cross-site scripting (XSS) vulnerability in pages/news.page.inc in Project Alumni 1.0.9 allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.5% | 2008-05-08 |
| CVE-2008-2458 EXP | Cross-site scripting (XSS) vulnerability in index.php in Starsgames Control Panel 4.6.2 and earlier allows remote attackers to inject arbitrary web sc… | Patch early | 4.3 medium | 1.5% | 2008-05-27 |
| CVE-2008-3201 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Pagefusion 1.5 allow remote attackers to inject arbitrary web script or HTML via t… | Patch early | 4.3 medium | 1.5% | 2008-07-17 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt