CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,164 CVEs
1,739 on KEV
17,300 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-11
10,149 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-1848 EXP | Cross-site scripting (XSS) vulnerability in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to… | Patch early | 4.3 medium | 1.4% | 2008-04-16 |
| CVE-2008-2295 EXP | Cross-site scripting (XSS) vulnerability in rg_search.php in Rgboard 3.0.12, and possibly earlier versions, allows remote attackers to inject arbitrar… | Patch early | 4.3 medium | 1.4% | 2008-05-18 |
| CVE-2008-2505 EXP | Cross-site scripting (XSS) vulnerability in result.php in Simpel Side Weblosning 1 through 4 allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.4% | 2008-05-29 |
| CVE-2008-2533 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to inject arbitrary web script o… | Patch early | 4.3 medium | 1.4% | 2008-06-03 |
| CVE-2008-2646 EXP | Multiple cross-site scripting (XSS) vulnerabilities in meBiblio 0.4.7 allow remote attackers to inject arbitrary web script or HTML via the (1) sql pa… | Patch early | 4.3 medium | 1.4% | 2008-06-10 |
| CVE-2008-2694 EXP | Cross-site scripting (XSS) vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web script or HTML via the keyword… | Patch early | 4.3 medium | 1.4% | 2008-06-13 |
| CVE-2008-2839 EXP | Cross-site scripting (XSS) vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbitrary web script or HTML via the… | Patch early | 4.3 medium | 1.4% | 2008-06-24 |
| CVE-2008-2855 EXP | Cross-site scripting (XSS) vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to inject arbitrary web script or HTML via the id param… | Patch early | 4.3 medium | 1.4% | 2008-06-25 |
| CVE-2008-2962 EXP | Multiple cross-site scripting (XSS) vulnerabilities in MyBlog allow remote attackers to inject arbitrary web script or HTML via the (1) s and (2) sort… | Patch early | 4.3 medium | 1.4% | 2008-07-02 |
| CVE-2008-2965 EXP | Cross-site scripting (XSS) vulnerability in viewforum.php in JaxUltraBB (JUBB) 2.0 and earlier allows remote attackers to inject arbitrary web script… | Patch early | 4.3 medium | 1.4% | 2008-07-02 |
| CVE-2008-2975 EXP | Cross-site scripting (XSS) vulnerability in admin/objects/obj_image.php in TinX/cms 1.1 allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.4% | 2008-07-02 |
| CVE-2008-2984 EXP | Cross-site scripting (XSS) vulnerability in backend/umleitung.php in CMReams CMS 1.3.1.1 Beta 2 allows remote attackers to inject arbitrary web script… | Patch early | 4.3 medium | 1.4% | 2008-07-02 |
| CVE-2008-2997 EXP | Cross-site scripting (XSS) vulnerability in index.php in Gravity Board X (GBX) 2.0 Beta allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.4% | 2008-07-03 |
| CVE-2008-3771 EXP | Cross-site scripting (XSS) vulnerability in members.php in Pars4u Videosharing 1 allows remote attackers to inject arbitrary web script or HTML via th… | Patch early | 4.3 medium | 1.4% | 2008-08-22 |
| CVE-2008-4333 EXP | Cross-site scripting (XSS) vulnerability in PHP infoBoard V.7 Plus allows remote attackers to inject arbitrary web script or HTML via the isname param… | Patch early | 4.3 medium | 1.4% | 2008-09-30 |
| CVE-2008-4336 EXP | Cross-site scripting (XSS) vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.4% | 2008-09-30 |
| CVE-2008-4370 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the (… | Patch early | 4.3 medium | 1.4% | 2008-10-01 |
| CVE-2008-4432 EXP | Cross-site scripting (XSS) vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attackers to inject arbitrary web scr… | Patch early | 4.3 medium | 1.4% | 2008-10-03 |
| CVE-2008-4447 EXP | Cross-site scripting (XSS) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to inject arbitrary web… | Patch early | 4.3 medium | 1.4% | 2008-10-06 |
| CVE-2008-4774 EXP | Cross-site scripting (XSS) vulnerability in main/main.php in QuestCMS allows remote attackers to inject arbitrary web script or HTML via the cx parame… | Patch early | 4.3 medium | 1.4% | 2008-10-28 |
| CVE-2008-5202 EXP | Cross-site scripting (XSS) vulnerability in index.php in OTManager CMS 24a allows remote attackers to inject arbitrary web script or HTML via the cont… | Patch early | 4.3 medium | 1.4% | 2008-11-21 |
| CVE-2008-5203 EXP | Cross-site scripting (XSS) vulnerability in external_vote.php in PowerAward 1.1.0 RC1 allows remote attackers to inject arbitrary web script or HTML v… | Patch early | 4.3 medium | 1.4% | 2008-11-21 |
| CVE-2008-5729 EXP | Multiple cross-site scripting (XSS) vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.4% | 2008-12-26 |
| CVE-2008-6168 EXP | Cross-site scripting (XSS) vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML v… | Patch early | 4.3 medium | 1.4% | 2009-02-19 |
| CVE-2008-6500 EXP | Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the q… | Patch early | 4.3 medium | 1.4% | 2009-03-20 |
| CVE-2008-6683 EXP | Cross-site scripting (XSS) vulnerability in listtest.php in Apartment Search Script allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.4% | 2009-04-10 |
| CVE-2008-6715 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Pre ADS Portal 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML vi… | Patch early | 4.3 medium | 1.4% | 2009-04-13 |
| CVE-2008-6847 EXP | Cross-site scripting (XSS) vulnerability in Employee/emp_login.asp in Pre ASP Job Board allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.4% | 2009-07-02 |
| CVE-2008-6906 EXP | Cross-site scripting (XSS) vulnerability in index.php in BabbleBoard 1.1.6 allows remote attackers to inject arbitrary web script or HTML via the user… | Patch early | 4.3 medium | 1.4% | 2009-08-06 |
| CVE-2008-7072 EXP | Cross-site scripting (XSS) vulnerability in index.php in Chipmunk Topsites allows remote attackers to inject arbitrary web script or HTML via the star… | Patch early | 4.3 medium | 1.4% | 2009-08-25 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt