CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,146 CVEs
1,739 on KEV
17,300 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-11
10,149 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-4349 EXP | Multiple cross-site scripting (XSS) vulnerabilities in news.php in s0nic Paranews 3.4 allow remote attackers to inject arbitrary web script or HTML vi… | Patch early | 4.3 medium | 1.5% | 2008-09-30 |
| CVE-2008-5126 EXP | Cross-site scripting (XSS) vulnerability in search.php in BoutikOne CMS allows remote attackers to inject arbitrary web script or HTML via the search_… | Patch early | 4.3 medium | 1.5% | 2008-11-18 |
| CVE-2008-6173 EXP | Cross-site scripting (XSS) vulnerability in fullscreen.php in ClipShare Pro 4.0 allows remote attackers to inject arbitrary web script or HTML via the… | Patch early | 4.3 medium | 1.5% | 2009-02-19 |
| CVE-2008-6212 EXP | Cross-site scripting (XSS) vulnerability in admin.php in Php-Stats 0.1.9.1 allows remote attackers to inject arbitrary web script or HTML via the (1)… | Patch early | 4.3 medium | 1.5% | 2009-02-20 |
| CVE-2009-2107 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Webmedia Explorer (webmex) 5.09 and 5.10 allow remote attackers to inject arbitrar… | Patch early | 4.3 medium | 1.5% | 2009-06-17 |
| CVE-2009-2241 EXP | Cross-site scripting (XSS) vulnerability in search.asp in ASP Inline Corporate Calendar allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.5% | 2009-06-27 |
| CVE-2009-2594 EXP | Cross-site scripting (XSS) vulnerability in censura.php in Censura 1.16.04 allows remote attackers to inject arbitrary web script or HTML via the item… | Patch early | 4.3 medium | 1.5% | 2009-07-24 |
| CVE-2009-3440 EXP | Cross-site scripting (XSS) vulnerability in Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to inject arbitra… | Patch early | 4.3 medium | 1.5% | 2009-09-28 |
| CVE-2009-3485 EXP | Cross-site scripting (XSS) vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web… | Patch early | 4.3 medium | 1.5% | 2009-09-30 |
| CVE-2009-3496 EXP | Cross-site scripting (XSS) vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2009-09-30 |
| CVE-2009-3751 EXP | Cross-site scripting (XSS) vulnerability in home.php in Opial 1.0 allows remote attackers to inject arbitrary web script or HTML via the genres_parent… | Patch early | 4.3 medium | 1.5% | 2009-10-22 |
| CVE-2009-4253 EXP | Cross-site scripting (XSS) vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows remote attackers to inject arbitrary web script or HTML via the… | Patch early | 4.3 medium | 1.5% | 2009-12-10 |
| CVE-2009-4813 EXP | Cross-site scripting (XSS) vulnerability in myps.php in MyBB (aka MyBulletinBoard) 1.4.10 allows remote attackers to inject arbitrary web script or HT… | Patch early | 4.3 medium | 1.5% | 2010-04-27 |
| CVE-2010-1746 EXP | Multiple cross-site scripting (XSS) vulnerabilities in the Table JX (com_grid) component for Joomla! allow remote attackers to inject arbitrary web sc… | Patch early | 4.3 medium | 1.5% | 2010-05-06 |
| CVE-2010-2437 EXP | Cross-site scripting (XSS) vulnerability in class/tools.class.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to inject arbitrary… | Patch early | 4.3 medium | 1.5% | 2010-06-24 |
| CVE-2010-2457 EXP | Cross-site scripting (XSS) vulnerability in index.php in K-Search allows remote attackers to inject arbitrary web script or HTML via the term paramete… | Patch early | 4.3 medium | 1.5% | 2010-06-25 |
| CVE-2010-2463 EXP | Cross-site scripting (XSS) vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitrary web script or HTML via the p… | Patch early | 4.3 medium | 1.5% | 2010-06-25 |
| CVE-2010-2615 EXP | Multiple cross-site scripting (XSS) vulnerabilities in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allow remote attackers to inject arb… | Patch early | 4.3 medium | 1.5% | 2010-07-02 |
| CVE-2002-2318 EXP | Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2002-12-31 |
| CVE-2003-1400 EXP | Cross-site scripting (XSS) vulnerability in the Your_Account module for PHP-Nuke 5.0 through 6.0 allows remote attackers to inject arbitrary web scrip… | Patch early | 4.3 medium | 1.5% | 2003-12-31 |
| CVE-2003-1513 EXP | Multiple cross-site scripting (XSS) vulnerabilities in example scripts in Caucho Technology Resin 2.0 through 2.1.2 allow remote attackers to inject a… | Patch early | 4.3 medium | 1.5% | 2003-12-31 |
| CVE-2007-5648 EXP | Multiple cross-site scripting (XSS) vulnerabilities in rnote.php in rNote 0.9.7.5 allow remote attackers to inject arbitrary web script or HTML via th… | Patch early | 4.3 medium | 1.5% | 2007-10-23 |
| CVE-2017-15687 EXP | DOM Based Cross Site Scripting (XSS) exists in Logitech Media Server 7.7.1, 7.7.2, 7.7.3, 7.7.5, 7.7.6, 7.9.0, and 7.9.1 via a crafted URI. | Patch early | 6.1 medium | 1.5% | 2017-10-23 |
| CVE-2007-6157 EXP | Cross-site scripting (XSS) vulnerability in index.php in SimpleGallery 0.1.3 allows remote attackers to inject arbitrary web script or HTML via the al… | Patch early | 4.3 medium | 1.4% | 2007-11-29 |
| CVE-2008-1355 EXP | Cross-site scripting (XSS) vulnerability in index.php in Jeebles Technology Jeebles Directory 2.9.60 allows remote attackers to inject arbitrary web s… | Patch early | 4.3 medium | 1.4% | 2008-03-17 |
| CVE-2008-1955 EXP | Cross-site scripting (XSS) vulnerability in rep.php in Martin BOUCHER MyBoard 1.0.12 allows remote attackers to inject arbitrary web script or HTML vi… | Patch early | 4.3 medium | 1.4% | 2008-04-25 |
| CVE-2008-2413 EXP | Cross-site scripting (XSS) vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id… | Patch early | 4.3 medium | 1.4% | 2008-05-22 |
| CVE-2008-2493 EXP | Cross-site scripting (XSS) vulnerability in post3/Book.asp in Campus Bulletin Board 3.4 allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.4% | 2008-05-28 |
| CVE-2008-4670 EXP | Cross-site scripting (XSS) vulnerability in search.php in Ed Pudol Clickbank Portal allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.4% | 2008-10-22 |
| CVE-2008-5067 EXP | Cross-site scripting (XSS) vulnerability in search.php in Kmita Catalogue 2.x allows remote attackers to inject arbitrary web script or HTML via the q… | Patch early | 4.3 medium | 1.4% | 2008-11-13 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt