CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,146 CVEs
1,739 on KEV
17,300 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-11
171,136 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-3184 EXP | Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.10 PL2 and earlier, and 3.7.2 and earlier 3.7.x versions, allow remote attackers… | Patch early | 4.3 medium | 1.5% | 2008-07-15 |
| CVE-2008-3483 EXP | Cross-site scripting (XSS) vulnerability in ScrewTurn Wiki 2.0.29 and 2.0.30 allows remote attackers to inject arbitrary web script or HTML via error… | Patch early | 4.3 medium | 1.5% | 2008-08-05 |
| CVE-2008-3917 EXP | Cross-site scripting (XSS) vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to inject arbitrary web script or HTML via the field… | Patch early | 4.3 medium | 1.5% | 2008-09-04 |
| CVE-2008-4379 EXP | Cross-site scripting (XSS) vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to inject arbitrary we… | Patch early | 4.3 medium | 1.5% | 2008-10-01 |
| CVE-2008-4438 EXP | Cross-site scripting (XSS) vulnerability in search.php in Datafeed Studio 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the… | Patch early | 4.3 medium | 1.5% | 2008-10-03 |
| CVE-2008-4591 EXP | Multiple cross-site scripting (XSS) vulnerabilities in admin/include/isadmin.inc.php in PhpWebGallery 1.3.4 allow remote attackers to inject arbitrary… | Patch early | 4.3 medium | 1.5% | 2008-10-16 |
| CVE-2008-4756 EXP | Cross-site scripting (XSS) vulnerability in add_prest_date.php in PHP-Daily allows remote attackers to inject arbitrary web script or HTML via the dat… | Patch early | 4.3 medium | 1.5% | 2008-10-28 |
| CVE-2007-5010 EXP | Cross-site scripting (XSS) vulnerability in WebBatch allows remote attackers to inject arbitrary web script or HTML via the URL to webbatch.exe. | Patch early | 4.3 medium | 1.5% | 2007-09-20 |
| CVE-2007-5052 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Vigile CMS 1.8 allow remote attackers to inject arbitrary web script or HTML via a… | Patch early | 4.3 medium | 1.5% | 2007-09-24 |
| CVE-2007-6136 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in M2Scripts MySpace Scripts Poll Creator allow remote attackers to inject arbitrary… | Patch early | 4.3 medium | 1.5% | 2007-11-27 |
| CVE-2007-6162 EXP | Cross-site scripting (XSS) vulnerability in index.php in FMDeluxe 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the id para… | Patch early | 4.3 medium | 1.5% | 2007-11-29 |
| CVE-2007-3064 EXP | Cross-site scripting (XSS) vulnerability in diary.php in My Databook allows remote attackers to inject arbitrary web script or HTML via the year param… | Patch early | 4.3 medium | 1.5% | 2007-06-06 |
| CVE-2004-2701 EXP | Cross-site scripting (XSS) vulnerability in signin.aspx for AspDotNetStorefront 3.3 allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2004-12-31 |
| CVE-2025-51403 EXP | A stored cross-site scripting (XSS) vulnerability in the department assignment editing module of of Live Helper Chat v4.60 allows attackers to execute… | Patch early | 6.5 medium | 1.5% | 2025-07-21 |
| CVE-2009-4869 EXP | Cross-site scripting (XSS) vulnerability in index.php in Nasim Guest Book 1.2 allows remote attackers to inject arbitrary web script or HTML via the p… | Patch early | 4.3 medium | 1.5% | 2010-05-11 |
| CVE-2019-13977 EXP | index.php in Ovidentia 8.4.3 has XSS via tg=groups, tg=maildoms&idx=create&userid=0&bgrp=y, tg=delegat, tg=site&idx=create, tg=site&item=4, tg=admdir&… | Patch early | 5.4 medium | 1.5% | 2019-07-19 |
| CVE-2008-2783 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition, and Kronolith allow remote attackers to inject arbi… | Patch early | 4.3 medium | 1.5% | 2008-06-19 |
| CVE-2013-1410 EXP | Perforce P4web 2011.1 and 2012.1 has multiple XSS vulnerabilities | Patch early | 6.1 medium | 1.5% | 2020-02-12 |
| CVE-2014-4645 EXP | Cross-site scripting (XSS) vulnerability in dhcpinfo.html in D-link DSL-2760U-E1 allows remote attackers to inject arbitrary web script or HTML via a… | Patch early | 4.3 medium | 1.5% | 2014-06-25 |
| CVE-2010-4877 EXP | Cross-site scripting (XSS) vulnerability in index.php in OneCMS 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the view para… | Patch early | 4.3 medium | 1.5% | 2011-10-07 |
| CVE-2014-5088 EXP | Cross-site scripting (XSS) vulnerability in Status2k allows remote attackers to inject arbitrary web script or HTML via the username to login.php. | Patch early | 4.3 medium | 1.5% | 2014-08-06 |
| CVE-2009-3513 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Pilot Group (PG) eTraining allow remote attackers to inject arbitrary web script or HTML via (1… | Patch early | 4.3 medium | 1.5% | 2009-10-01 |
| CVE-2008-1873 EXP | Cross-site scripting (XSS) vulnerability in the private message feature in Nuke ET 3.2 and 3.4, when using Internet Explorer, allows remote authentica… | Patch early | 4.3 medium | 1.5% | 2008-04-17 |
| CVE-2008-2911 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Contenido 4.8.4 allow remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2008-06-30 |
| CVE-2015-2145 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to inject arbitrary web script o… | Patch early | 4.8 medium | 1.5% | 2017-10-06 |
| CVE-2012-1217 EXP | Multiple cross-site scripting (XSS) vulnerabilities in STHS v2 Web Portal 2.2 allow remote attackers to inject arbitrary web script or HTML via the te… | Patch early | 4.3 medium | 1.5% | 2012-02-21 |
| CVE-2007-6455 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitrary web script or HTML via the… | Patch early | 4.3 medium | 1.5% | 2007-12-20 |
| CVE-2002-2246 EXP | Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote attackers to inject arbitrary web script or HTML via the HTTP… | Patch early | 4.3 medium | 1.5% | 2002-12-31 |
| CVE-2002-2339 EXP | Cross-site scripting (XSS) vulnerability in configure.asp in Script-Shed GuestBook 1.0 allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.5% | 2002-12-31 |
| CVE-2008-1345 EXP | Cross-site scripting (XSS) vulnerability in plugins/calendar/calendar_backend.php in MyioSoft EasyCalendar 4.0tr and earlier allows remote attackers t… | Patch early | 4.3 medium | 1.5% | 2008-03-17 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt