CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,145 CVEs
1,739 on KEV
17,300 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-10
10,149 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-3202 EXP | Cross-site scripting (XSS) vulnerability in index.php in Xomol CMS 1.2 allows remote attackers to inject arbitrary web script or HTML via the current_… | Patch early | 4.3 medium | 1.5% | 2008-07-17 |
| CVE-2008-3510 EXP | Cross-site scripting (XSS) vulnerability in livehelp_js.php in Crafty Syntax Live Help (CSLH) 2.14.6 allows remote attackers to inject arbitrary web s… | Patch early | 4.3 medium | 1.5% | 2008-08-07 |
| CVE-2008-3566 EXP | Cross-site scripting (XSS) vulnerability in ZoneO-soft freeForum 1.7 allows remote attackers to inject arbitrary web script or HTML via the acuparam p… | Patch early | 4.3 medium | 1.5% | 2008-08-10 |
| CVE-2008-4140 EXP | Cross-site scripting (XSS) vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers to inject arbitrary web script or HTML via the query s… | Patch early | 4.3 medium | 1.5% | 2008-09-24 |
| CVE-2008-4761 EXP | Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote attackers t… | Patch early | 4.3 medium | 1.5% | 2008-10-28 |
| CVE-2008-6094 EXP | Cross-site scripting (XSS) vulnerability in user.do in Celoxis Technologies Celoxis allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2009-02-09 |
| CVE-2008-6200 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Swiki 1.5 allow remote attackers to inject arbitrary web script or HTML via (1) the query strin… | Patch early | 4.3 medium | 1.5% | 2009-02-20 |
| CVE-2008-6406 EXP | Cross-site scripting (XSS) vulnerability in admin.php in DataLife Engine (DLE) 7.2 allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2009-03-06 |
| CVE-2008-6439 EXP | Cross-site scripting (XSS) vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to inject arbitrary web script or HT… | Patch early | 4.3 medium | 1.5% | 2009-03-06 |
| CVE-2008-6476 EXP | Cross-site scripting (XSS) vulnerability in blog/search.aspx in BlogEngine.NET allows remote attackers to inject arbitrary web script or HTML via the… | Patch early | 4.3 medium | 1.5% | 2009-03-16 |
| CVE-2003-1522 EXP | Cross-site scripting (XSS) vulnerability in PSCS VPOP3 Web Mail server 2.0e and 2.0f allows remote attackers to inject arbitrary web script or HTML vi… | Patch early | 4.3 medium | 1.5% | 2003-12-31 |
| CVE-2014-100013 EXP | Multiple cross-site scripting (XSS) vulnerabilities in clientResponse 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Su… | Patch early | 4.3 medium | 1.5% | 2015-01-13 |
| CVE-2014-8774 EXP | Cross-site scripting (XSS) vulnerability in manager/index.php in MODX Revolution 2.x before 2.2.15 allows remote attackers to inject arbitrary web scr… | Patch early | 4.3 medium | 1.5% | 2014-12-03 |
| CVE-2014-9004 EXP | Cross-site scripting (XSS) vulnerability in vldPersonals before 2.7.1 allows remote attackers to inject arbitrary web script or HTML via the id parame… | Patch early | 4.3 medium | 1.5% | 2014-11-20 |
| CVE-2014-9516 EXP | Cross-site scripting (XSS) vulnerability in Social Microblogging PRO 1.5 allows remote attackers to inject arbitrary web script or HTML via the PATH_I… | Patch early | 4.3 medium | 1.5% | 2015-01-05 |
| CVE-2007-5411 EXP | Cross-site scripting (XSS) vulnerability in the Linksys SPA941 VoIP Phone with firmware 5.1.8 allows remote attackers to inject arbitrary web script o… | Patch early | 4.3 medium | 1.5% | 2007-10-12 |
| CVE-2007-5677 EXP | Cross-site scripting (XSS) vulnerability in shoutbox/blocco.php in Hackish BETA 1.1 allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2007-10-24 |
| CVE-2010-4772 EXP | Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web script or HTML via the id par… | Patch early | 4.3 medium | 1.5% | 2011-03-23 |
| CVE-2011-4812 EXP | Cross-site scripting (XSS) vulnerability in nowosci.php in BestShopPro allows remote attackers to inject arbitrary web script or HTML via the str para… | Patch early | 4.3 medium | 1.5% | 2011-12-14 |
| CVE-2011-5019 EXP | Cross-site scripting (XSS) vulnerability in setup/index.php in Textpattern CMS 4.4.1, when the product is incompletely installed, allows remote attack… | Patch early | 4.3 medium | 1.5% | 2012-01-05 |
| CVE-2012-0899 EXP | Cross-site scripting (XSS) vulnerability in referencement/sites_inscription.php in Annuaire PHP allows remote attackers to inject arbitrary web script… | Patch early | 4.3 medium | 1.5% | 2012-01-20 |
| CVE-2012-1069 EXP | Cross-site scripting (XSS) vulnerability in module/kb/search_word in the search module in lknSupport allows remote attackers to inject arbitrary web s… | Patch early | 4.3 medium | 1.5% | 2012-02-14 |
| CVE-2017-2671 EXP | The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure… | Patch early | 5.5 medium | 1.5% | 2017-04-05 |
| CVE-2009-0302 EXP | SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated users to execute arbitrary SQL… | Patch early | 4.6 medium | 1.5% | 2009-01-27 |
| CVE-2007-6141 EXP | Cross-site scripting (XSS) vulnerability in vBTube.php in vBTube 1.1 Beta allows remote attackers to inject arbitrary web script or HTML via the searc… | Patch early | 4.3 medium | 1.5% | 2007-11-27 |
| CVE-2008-0439 EXP | Cross-site scripting (XSS) vulnerability in templates/default/admincp/attachments_header.php in DeluxeBB 1.1 allows remote attackers to inject arbitra… | Patch early | 4.3 medium | 1.5% | 2008-01-23 |
| CVE-2008-1129 EXP | Cross-site scripting (XSS) vulnerability in admin/users/self.php in XRMS CRM allows remote attackers to inject arbitrary web script or HTML via the ms… | Patch early | 4.3 medium | 1.5% | 2008-03-04 |
| CVE-2008-1510 EXP | Cross-site scripting (XSS) vulnerability in system/workplace/admin/accounts/users_list.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject… | Patch early | 4.3 medium | 1.5% | 2008-03-25 |
| CVE-2008-1757 EXP | Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web scrip… | Patch early | 4.3 medium | 1.5% | 2008-04-12 |
| CVE-2008-1985 EXP | Cross-site scripting (XSS) vulnerability in base.php in DigitalHive 2.0 RC2 allows remote attackers to inject arbitrary web script or HTML via the mt… | Patch early | 4.3 medium | 1.5% | 2008-04-27 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt