CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,145 CVEs
1,739 on KEV
17,300 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-10
171,136 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-0574 EXP | Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.01.02 allows remote attackers to inject arbitrary web script or HTML via the sort… | Patch early | 4.3 medium | 1.5% | 2008-02-05 |
| CVE-2008-1300 EXP | Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.j… | Patch early | 4.3 medium | 1.5% | 2008-03-12 |
| CVE-2008-1458 EXP | Cross-site scripting (XSS) vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the q parame… | Patch early | 4.3 medium | 1.5% | 2008-03-24 |
| CVE-2008-2196 EXP | Cross-site scripting (XSS) vulnerability in admin.php in LifeType 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the newBlog… | Patch early | 4.3 medium | 1.5% | 2008-05-14 |
| CVE-2009-3186 EXP | Multiple cross-site scripting (XSS) vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web script or HTML via the (1) t para… | Patch early | 4.3 medium | 1.5% | 2009-09-15 |
| CVE-2009-3225 EXP | Multiple cross-site scripting (XSS) vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Affiliate Network Classifieds, a… | Patch early | 4.3 medium | 1.5% | 2009-09-16 |
| CVE-2010-0468 EXP | Cross-site scripting (XSS) vulnerability in utilities/longproc.cfm in PaperThin CommonSpot Content Server allows remote attackers to inject arbitrary… | Patch early | 4.3 medium | 1.5% | 2010-02-02 |
| CVE-2010-4246 EXP | Multiple cross-site scripting (XSS) vulnerabilities in graph.php in pfSense 1.2.3 and 2 beta 4 allow remote attackers to inject arbitrary web script o… | Patch early | 4.3 medium | 1.5% | 2010-12-07 |
| CVE-2010-4366 EXP | Multiple cross-site scripting (XSS) vulnerabilities in forum_new_topic.php in Chameleon Social Networking allow remote attackers to inject arbitrary w… | Patch early | 4.3 medium | 1.5% | 2010-12-01 |
| CVE-2007-3694 EXP | Cross-site scripting (XSS) vulnerability in login.php in Miro Project Broadcast Machine 0.9.9.9 allows remote attackers to inject arbitrary web script… | Patch early | 4.3 medium | 1.5% | 2007-11-14 |
| CVE-2007-5428 EXP | Cross-site scripting (XSS) vulnerability in UMI CMS allows remote attackers to inject arbitrary web script or HTML via the search_string parameter to… | Patch early | 4.3 medium | 1.5% | 2007-10-12 |
| CVE-2007-5478 EXP | Cross-site scripting (XSS) vulnerability in projects in Nabh Stringbeans Portal (sbportal) 3.2 allows remote attackers to inject arbitrary web script… | Patch early | 4.3 medium | 1.5% | 2007-10-16 |
| CVE-2008-0146 EXP | Cross-site scripting (XSS) vulnerability in the error page in W3-mSQL allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO… | Patch early | 4.3 medium | 1.5% | 2008-01-08 |
| CVE-2005-4879 EXP | Multiple cross-site scripting (XSS) vulnerabilities in jax_guestbook.php in Jax Guestbook 3.1 and 3.31 allow remote attackers to inject arbitrary web… | Patch early | 4.3 medium | 1.5% | 2009-03-31 |
| CVE-2002-2376 EXP | Cross-site scripting (XSS) vulnerability in E-Guest_sign.pl in E-Guest 1.1 allows remote attackers to inject arbitrary SSI directives, web script, and… | Patch early | 4.3 medium | 1.5% | 2002-12-31 |
| CVE-2010-4909 EXP | Multiple cross-site scripting (XSS) vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1)… | Patch early | 4.3 medium | 1.5% | 2011-10-08 |
| CVE-2023-31699 EXP | ChurchCRM v4.5.4 is vulnerable to Reflected Cross-Site Scripting (XSS) via image file. | Patch early | 4.8 medium | 1.5% | 2023-05-17 |
| CVE-2008-5264 EXP | Cross-site scripting (XSS) vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4.2 and earlier allows remote attackers to inject arbit… | Patch early | 4.3 medium | 1.5% | 2008-11-28 |
| CVE-2008-6700 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbitrary web script or HTML via the… | Patch early | 4.3 medium | 1.5% | 2009-04-10 |
| CVE-2008-6757 EXP | Cross-site scripting (XSS) vulnerability in manuals_search.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to inject arbitrary web s… | Patch early | 4.3 medium | 1.5% | 2009-04-28 |
| CVE-2008-6915 EXP | Cross-site scripting (XSS) vulnerability in view_prop_details.php in Zeeways ZEEPROPERTY 1.0 allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2009-08-07 |
| CVE-2009-0710 EXP | Multiple cross-site scripting (XSS) vulnerabilities in PHPFootball 1.6 allow remote attackers to inject arbitrary web script or HTML via (1) the user… | Patch early | 4.3 medium | 1.5% | 2009-02-23 |
| CVE-2009-1593 EXP | Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "negative model," which allows rem… | Patch early | 4.3 medium | 1.5% | 2009-05-21 |
| CVE-2009-2391 EXP | Cross-site scripting (XSS) vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to inject arbitrary web script… | Patch early | 4.3 medium | 1.5% | 2009-07-09 |
| CVE-2009-3530 EXP | Cross-site scripting (XSS) vulnerability in storefront.php in RadScripts RadBids Gold 4 allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.5% | 2009-10-02 |
| CVE-2008-0679 EXP | Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search par… | Patch early | 4.3 medium | 1.5% | 2008-02-12 |
| CVE-2008-1173 EXP | Cross-site scripting (XSS) vulnerability in account-inbox.php in TorrentTrader Classic 1.08 allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2008-03-06 |
| CVE-2008-1967 EXP | Cross-site scripting (XSS) vulnerability in CFLogon/CFLogon.asp in Cezanne 6.5.1 and 7 allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.5% | 2008-04-27 |
| CVE-2008-2677 EXP | Cross-site scripting (XSS) vulnerability in edit1.php in Telephone Directory 2008 allows remote attackers to inject arbitrary web script or HTML via t… | Patch early | 4.3 medium | 1.5% | 2008-06-12 |
| CVE-2008-2973 EXP | Multiple cross-site scripting (XSS) vulnerabilities in chathead.php in MM Chat 1.5 allow remote attackers to inject arbitrary web script or HTML via t… | Patch early | 4.3 medium | 1.5% | 2008-07-02 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt