CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,069 CVEs
1,739 on KEV
17,300 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-10
171,136 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2010-4913 EXP | Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2011-10-08 |
| CVE-2010-4971 EXP | Cross-site scripting (XSS) vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attackers to inject arbitrary web sc… | Patch early | 4.3 medium | 1.5% | 2011-11-02 |
| CVE-2010-5051 EXP | Cross-site scripting (XSS) vulnerability in admin/core/admin_func.php in razorCMS 1.0 stable allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2011-11-23 |
| CVE-2012-0900 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Beehive Forum 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_… | Patch early | 4.3 medium | 1.5% | 2012-01-20 |
| CVE-2012-1021 EXP | Cross-site scripting (XSS) vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2012-02-08 |
| CVE-2007-3134 EXP | Multiple cross-site scripting (XSS) vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remote attackers to inject arbitrar… | Patch early | 4.3 medium | 1.5% | 2007-06-08 |
| CVE-2011-4572 EXP | Cross-site scripting (XSS) vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 al… | Patch early | 4.3 medium | 1.5% | 2011-11-29 |
| CVE-2008-2566 EXP | Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to inject arbitrary web script or HTM… | Patch early | 4.3 medium | 1.5% | 2008-06-06 |
| CVE-2010-4837 EXP | Cross-site scripting (XSS) vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote attackers to inject arbitrary web sc… | Patch early | 4.3 medium | 1.5% | 2011-09-14 |
| CVE-2009-3153 EXP | Multiple cross-site scripting (XSS) vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arbitrary web script or HTML via t… | Patch early | 4.3 medium | 1.5% | 2009-09-10 |
| CVE-2009-3195 EXP | Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to inject arbitrary web script o… | Patch early | 4.3 medium | 1.5% | 2009-09-15 |
| CVE-2009-3539 EXP | Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Ultra Classifieds Pro allow remote attackers to inject arbitrary web script or HT… | Patch early | 4.3 medium | 1.5% | 2009-10-02 |
| CVE-2009-4366 EXP | Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog 1.0 allows remote attackers to inject arbitrary web script or HTML via the… | Patch early | 4.3 medium | 1.5% | 2009-12-21 |
| CVE-2010-0936 EXP | Cross-site scripting (XSS) vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282_dlinkA4_p8_20071213 allows remote attackers to inject a… | Patch early | 4.3 medium | 1.5% | 2010-03-08 |
| CVE-2008-1470 EXP | Incomplete blacklist vulnerability in IISWebAgentIF.dll in the WebID RSA Authentication Agent 5.3, and possibly earlier, allows remote attackers to co… | Patch early | 4.3 medium | 1.5% | 2008-03-24 |
| CVE-2008-6629 EXP | Cross-site scripting (XSS) vulnerability in detail.php in WEBBDOMAIN Multi Languages WebShop Online 1.02 allows remote attackers to inject arbitrary w… | Patch early | 4.3 medium | 1.5% | 2009-04-06 |
| CVE-2009-1228 EXP | Cross-site scripting (XSS) vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject arbitrary web script or HTML v… | Patch early | 4.3 medium | 1.5% | 2009-04-02 |
| CVE-2007-6474 EXP | Multiple cross-site scripting (XSS) vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to inject arbitrary web script or HTML via the newdir pa… | Patch early | 4.3 medium | 1.5% | 2007-12-20 |
| CVE-2006-5924 EXP | Cross-site scripting (XSS) vulnerability in index.php in Efficient IP iPmanager (IPm) 2.3 allows remote attackers to inject arbitrary web script or HT… | Patch early | 5.8 medium | 1.5% | 2006-11-15 |
| CVE-2008-0186 EXP | Cross-site scripting (XSS) vulnerability in index.php in NetRisk 1.9.7 and possibly earlier allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2008-01-09 |
| CVE-2008-5059 EXP | Cross-site scripting (XSS) vulnerability in index.php in ModernBill 4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2008-11-13 |
| CVE-2008-5214 EXP | Cross-site scripting (XSS) vulnerability in service/calendrier.php in ClanLite 2.2006.05.20 allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2008-11-24 |
| CVE-2008-5271 EXP | Cross-site scripting (XSS) vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.5% | 2008-11-28 |
| CVE-2008-5290 EXP | Cross-site scripting (XSS) vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to inject arbitrary web script or H… | Patch early | 4.3 medium | 1.5% | 2008-12-01 |
| CVE-2008-5933 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in CMS ISWEB 3.0 allow remote attackers to inject arbitrary web script or HTML via (1… | Patch early | 4.3 medium | 1.5% | 2009-01-21 |
| CVE-2008-7134 EXP | Multiple cross-site scripting (XSS) vulnerabilities in the default URI in Chris LaPointe RedGalaxy Download Center 1.2 allow remote attackers to injec… | Patch early | 4.3 medium | 1.5% | 2009-09-01 |
| CVE-2008-2561 EXP | Multiple cross-site scripting (XSS) vulnerabilities in 427BB 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO… | Patch early | 4.3 medium | 1.5% | 2008-06-06 |
| CVE-2008-2979 EXP | Multiple cross-site scripting (XSS) vulnerabilities in phpi/login.php in Ourvideo CMS 9.5 allow remote attackers to inject arbitrary web script or HTM… | Patch early | 4.3 medium | 1.5% | 2008-07-02 |
| CVE-2008-3088 EXP | Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attackers to inject arbitrary web scri… | Patch early | 4.3 medium | 1.5% | 2008-07-09 |
| CVE-2008-3391 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5 allow remote attackers to inject arbitrary web script or HTML via the mode pa… | Patch early | 4.3 medium | 1.5% | 2008-07-31 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt