CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,164 CVEs
1,739 on KEV
17,300 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-11
171,150 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2009-4359 EXP | Cross-site scripting (XSS) vulnerability in folder.php in the SmartMedia 0.85 Beta module for XOOPS allows remote attackers to inject arbitrary web sc… | Patch early | 4.3 medium | 1.5% | 2009-12-20 |
| CVE-2014-8307 EXP | Multiple cross-site scripting (XSS) vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow remote attackers to inject arb… | Patch early | 4.3 medium | 1.5% | 2014-10-16 |
| CVE-2019-11017 EXP | On D-Link DI-524 V2.06RU devices, multiple Stored and Reflected XSS vulnerabilities were found in the Web Configuration: /spap.htm, /smap.htm, and /cg… | Patch early | 4.8 medium | 1.5% | 2019-04-18 |
| CVE-2010-4882 EXP | Cross-site scripting (XSS) vulnerability in autocms.php in Auto CMS 1.6 allows remote attackers to inject arbitrary web script or HTML via the sitetit… | Patch early | 4.3 medium | 1.5% | 2011-10-07 |
| CVE-2008-1918 EXP | SQL injection vulnerability in submit.php in PHP-Fusion 6.01.14 and 6.00.307, when magic_quotes_gpc is disabled and the database table prefix is known… | Patch early | 6.0 medium | 1.5% | 2008-04-23 |
| CVE-2008-2994 EXP | Multiple cross-site scripting (XSS) vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web script or HTML via the (1) ann… | Patch early | 4.3 medium | 1.5% | 2008-07-03 |
| CVE-2008-5164 EXP | Multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrary web script or HTML via the (… | Patch early | 4.3 medium | 1.5% | 2008-11-19 |
| CVE-2007-4146 EXP | Cross-site scripting (XSS) vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.5% | 2007-08-03 |
| CVE-2007-2892 EXP | Cross-site scripting (XSS) vulnerability in news.asp in ASP-Nuke 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the id param… | Patch early | 4.3 medium | 1.5% | 2007-05-30 |
| CVE-2007-3049 EXP | Cross-site scripting (XSS) vulnerability in index.php in Buttercup web file manager (BWFM) May 2007 allows remote attackers to inject arbitrary web sc… | Patch early | 4.3 medium | 1.5% | 2007-06-06 |
| CVE-2005-4620 EXP | Buffer overflow in WinRAR 3.50 and earlier allows local users to execute arbitrary code via a long command-line argument. NOTE: because this program… | Patch early | 4.6 medium | 1.5% | 2005-12-31 |
| CVE-2007-5647 EXP | Multiple cross-site scripting (XSS) vulnerabilities in SocketKB 1.1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) art_id… | Patch early | 4.3 medium | 1.5% | 2007-10-23 |
| CVE-2009-0107 EXP | Cross-site scripting (XSS) vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to inject arbitrary web script o… | Patch early | 4.3 medium | 1.5% | 2009-01-09 |
| CVE-2009-0467 EXP | Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrar… | Patch early | 4.3 medium | 1.5% | 2009-02-10 |
| CVE-2009-0526 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject arbitrary web script or HTML vi… | Patch early | 4.3 medium | 1.5% | 2009-02-11 |
| CVE-2009-0529 EXP | Cross-site scripting (XSS) vulnerability in index.php in SnippetMaster Webpage Editor 2.2.2 allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2009-02-11 |
| CVE-2009-0594 EXP | Cross-site scripting (XSS) vulnerability in index.php in phpSkelSite 1.4 allows remote attackers to inject arbitrary web script or HTML via the PATH_I… | Patch early | 4.3 medium | 1.5% | 2009-02-16 |
| CVE-2009-0763 EXP | Cross-site scripting (XSS) vulnerability in default.php in Kipper 2.01 allows remote attackers to inject arbitrary web script or HTML via the charm pa… | Patch early | 4.3 medium | 1.5% | 2009-03-06 |
| CVE-2009-1367 EXP | Cross-site scripting (XSS) vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web script or HTML via the query p… | Patch early | 4.3 medium | 1.5% | 2009-04-22 |
| CVE-2009-1654 EXP | Cross-site scripting (XSS) vulnerability in questiondetail.php in Easy Scripts Answer and Question Script allows remote attackers to inject arbitrary… | Patch early | 4.3 medium | 1.5% | 2009-05-16 |
| CVE-2009-1809 EXP | Multiple cross-site scripting (XSS) vulnerabilities in myColex 1.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the year pa… | Patch early | 4.3 medium | 1.5% | 2009-05-29 |
| CVE-2009-1811 EXP | Multiple cross-site scripting (XSS) vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to inject arbitrary web script or HTML via (1)… | Patch early | 4.3 medium | 1.5% | 2009-05-29 |
| CVE-2009-1820 EXP | Cross-site scripting (XSS) vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to inject arbitrary web script… | Patch early | 4.3 medium | 1.5% | 2009-05-29 |
| CVE-2009-2141 EXP | Multiple cross-site scripting (XSS) vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to inject arbitrary web script or HTML via (1) the re… | Patch early | 4.3 medium | 1.5% | 2009-06-22 |
| CVE-2009-2571 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8 allow remote attackers to inject arbitrary web script o… | Patch early | 4.3 medium | 1.5% | 2009-07-22 |
| CVE-2009-2586 EXP | Cross-site scripting (XSS) vulnerability in articles.php in EDGEPHP EZArticles allows remote attackers to inject arbitrary web script or HTML via the… | Patch early | 4.3 medium | 1.5% | 2009-07-24 |
| CVE-2009-2893 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote attackers to inject arbitrary web… | Patch early | 4.3 medium | 1.5% | 2009-08-20 |
| CVE-2009-3152 EXP | Multiple cross-site scripting (XSS) vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Professional allow remote attackers to i… | Patch early | 4.3 medium | 1.5% | 2009-09-10 |
| CVE-2009-3202 EXP | Cross-site scripting (XSS) vulnerability in search.php in ULoKI PHP Forum 2.1 allows remote attackers to inject arbitrary web script or HTML via the t… | Patch early | 4.3 medium | 1.5% | 2009-09-16 |
| CVE-2009-3320 EXP | Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows remote attackers to inject arbitrary web script or H… | Patch early | 4.3 medium | 1.5% | 2009-09-23 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt