CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,145 CVEs
1,739 on KEV
17,300 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-10
171,136 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-3505 EXP | Cross-site scripting (XSS) vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via the nr pa… | Patch early | 4.3 medium | 1.5% | 2008-08-06 |
| CVE-2008-4089 EXP | Cross-site scripting (XSS) vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to inject arbitrary web script or H… | Patch early | 4.3 medium | 1.5% | 2008-09-15 |
| CVE-2009-2778 EXP | Cross-site scripting (XSS) vulnerability in visitor/view.php in GarageSales Script allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2009-08-14 |
| CVE-2009-4743 EXP | Multiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inj… | Patch early | 4.3 medium | 1.5% | 2010-03-26 |
| CVE-2012-5918 EXP | razorCMS 1.2 allows remote authenticated users to access administrator directories and files by creating and deleting a directory. | Patch early | 4.0 medium | 1.5% | 2012-11-19 |
| CVE-2007-4441 EXP | Buffer overflow in php_win32std.dll in the win32std extension for PHP 5.2.0 and earlier allows context-dependent attackers to execute arbitrary code v… | Patch early | 4.6 medium | 1.5% | 2007-08-21 |
| CVE-2007-4434 EXP | Cross-site scripting (XSS) vulnerability in textfilesearch.asp in the Text File Search ASP (Classic) edition allows remote attackers to inject arbitra… | Patch early | 4.3 medium | 1.5% | 2007-08-20 |
| CVE-2007-2308 EXP | Cross-site scripting (XSS) vulnerability in cas.php in FloweRS 2.0 allows remote attackers to inject arbitrary web script or HTML via the rok paramete… | Patch early | 4.3 medium | 1.5% | 2007-04-26 |
| CVE-2007-2310 EXP | Cross-site scripting (XSS) vulnerability in plugins/spaw/img_popup.php in BloofoxCMS 0.2.2 allows remote attackers to inject arbitrary web script or H… | Patch early | 4.3 medium | 1.5% | 2007-04-26 |
| CVE-2009-1897 EXP | The tun_chr_poll function in drivers/net/tun.c in the tun subsystem in the Linux kernel 2.6.30 and 2.6.30.1, when the -fno-delete-null-pointer-checks… | Patch early | 6.9 medium | 1.5% | 2009-07-20 |
| CVE-2009-2216 EXP | Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web script or H… | Patch early | 6.1 medium | 1.5% | 2009-06-25 |
| CVE-2007-5455 EXP | Cross-site scripting (XSS) vulnerability in wxis.exe in WWWISIS 7.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a c… | Patch early | 4.3 medium | 1.5% | 2007-10-14 |
| CVE-2007-5649 EXP | Cross-site scripting (XSS) vulnerability in lostpwd.php in Creative Digital Resources SocketMail 2.2.1 allows remote attackers to inject arbitrary web… | Patch early | 4.3 medium | 1.5% | 2007-10-23 |
| CVE-2012-1213 EXP | Cross-site scripting (XSS) vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite (ZCS) 6.x before 6.0.15 and 7.x befor… | Patch early | 4.3 medium | 1.5% | 2012-02-24 |
| CVE-2010-4331 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel 2.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) defau… | Patch early | 4.3 medium | 1.5% | 2011-01-20 |
| CVE-2010-4852 EXP | Cross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote attackers to inject arbitrary web script or HTML via the reason p… | Patch early | 4.3 medium | 1.5% | 2011-09-27 |
| CVE-2010-4985 EXP | Cross-site scripting (XSS) vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to inject arbitrary web script or H… | Patch early | 4.3 medium | 1.5% | 2011-11-01 |
| CVE-2011-0902 EXP | Multiple untrusted search path vulnerabilities in the Java Service in Sun Microsystems SunScreen Firewall on SunOS 5.9 allow local users to execute ar… | Patch early | 6.9 medium | 1.5% | 2011-02-07 |
| CVE-2007-4819 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Txx CMS 0.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vecto… | Patch early | 4.3 medium | 1.5% | 2007-09-11 |
| CVE-2007-6085 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or HTML via th… | Patch early | 4.3 medium | 1.5% | 2007-11-22 |
| CVE-2007-6297 EXP | Multiple cross-site scripting (XSS) vulnerabilities in PHPMyChat 0.14.5 allow remote attackers to inject arbitrary web script or HTML via the (1) LIMI… | Patch early | 4.3 medium | 1.5% | 2007-12-10 |
| CVE-2008-6503 EXP | Multiple cross-site scripting (XSS) vulnerabilities in PrestaShop 1.1.0.3 allow remote attackers to inject arbitrary web script or HTML via the PATH_I… | Patch early | 4.3 medium | 1.5% | 2009-03-20 |
| CVE-2008-3511 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2008-08-07 |
| CVE-2003-0124 EXP | man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, which causes the my_xsprintf function to ret… | Patch early | 4.6 medium | 1.5% | 2003-03-18 |
| CVE-2008-0268 EXP | Cross-site scripting (XSS) vulnerability in view.php in eTicket 1.5.5.2 allows remote attackers to inject arbitrary web script or HTML via the s param… | Patch early | 4.3 medium | 1.5% | 2008-01-15 |
| CVE-2009-3509 EXP | Cross-site scripting (XSS) vulnerability in admin/admin_index.php in CJ Dynamic Poll PRO 2.0 allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2009-10-01 |
| CVE-2009-1845 EXP | Cross-site scripting (XSS) vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attackers to inject arbitrary web sc… | Patch early | 4.3 medium | 1.5% | 2009-06-01 |
| CVE-2008-6644 EXP | Cross-site scripting (XSS) vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows remote attackers to inject arbitrary web script or HTM… | Patch early | 4.3 medium | 1.5% | 2009-04-07 |
| CVE-2008-7242 EXP | Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2009-09-17 |
| CVE-2009-0338 EXP | Cross-site scripting (XSS) vulnerability in inc_webblogmanager.asp in DMXReady Blog Manager allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2009-01-29 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt