CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,169 CVEs
1,739 on KEV
17,300 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-11
171,154 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-3679 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in IDevSpot PhpLinkExchange 1.01 allow remote attackers to inject arbitrary web scrip… | Patch early | 4.3 medium | 1.5% | 2008-08-14 |
| CVE-2007-3653 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2008-07-09 |
| CVE-2012-4051 EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interface in JAMF Casper Suite before… | Patch early | 6.8 medium | 1.5% | 2012-09-28 |
| CVE-2009-4461 EXP | Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO… | Patch early | 4.3 medium | 1.5% | 2009-12-30 |
| CVE-2010-0365 EXP | Cross-site scripting (XSS) vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows remote attackers to inject arbit… | Patch early | 4.3 medium | 1.5% | 2010-01-21 |
| CVE-2010-0371 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Hitmaaan Gallery 1.3 allow remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.5% | 2010-01-21 |
| CVE-2010-0607 EXP | Cross-site scripting (XSS) vulnerability in Forms/status_statistics_1 in the Sterlite SAM300 AX Router allows remote attackers to inject arbitrary web… | Patch early | 4.3 medium | 1.5% | 2010-02-11 |
| CVE-2010-0804 EXP | Cross-site scripting (XSS) vulnerability in index.php in iBoutique 4.0 allows remote attackers to inject arbitrary web script or HTML via the key para… | Patch early | 4.3 medium | 1.5% | 2010-03-02 |
| CVE-2009-4450 EXP | Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2009-12-29 |
| CVE-2009-4767 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.5% | 2010-04-20 |
| CVE-2008-0436 EXP | Cross-site scripting (XSS) vulnerability in profile-upload/upload.asp in PD9 Software MegaBBS 1.5.14b allows remote attackers to inject arbitrary web… | Patch early | 4.3 medium | 1.5% | 2008-01-23 |
| CVE-2008-0688 EXP | Cross-site scripting (XSS) vulnerability in catalog.php in Smartscript Domain Trader 2.0 allows remote attackers to inject arbitrary web script or HTM… | Patch early | 4.3 medium | 1.5% | 2008-02-12 |
| CVE-2008-1045 EXP | Cross-site scripting (XSS) vulnerability in the file tree navigation function in system/workplace/views/explorer/tree_files.jsp in Alkacon OpenCMS 7.0… | Patch early | 4.3 medium | 1.5% | 2008-02-27 |
| CVE-2008-1348 EXP | Cross-site scripting (XSS) vulnerability in index.php in the eWebsite eWeather (Weather) module for PHP-Nuke allows remote attackers to inject arbitra… | Patch early | 4.3 medium | 1.5% | 2008-03-17 |
| CVE-2008-1787 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Poplar Gedcom Viewer 2.0 allow remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.5% | 2008-04-15 |
| CVE-2008-2117 EXP | Cross-site scripting (XSS) vulnerability in pages/news.page.inc in Project Alumni 1.0.9 allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.5% | 2008-05-08 |
| CVE-2008-2458 EXP | Cross-site scripting (XSS) vulnerability in index.php in Starsgames Control Panel 4.6.2 and earlier allows remote attackers to inject arbitrary web sc… | Patch early | 4.3 medium | 1.5% | 2008-05-27 |
| CVE-2008-3201 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Pagefusion 1.5 allow remote attackers to inject arbitrary web script or HTML via t… | Patch early | 4.3 medium | 1.5% | 2008-07-17 |
| CVE-2008-3202 EXP | Cross-site scripting (XSS) vulnerability in index.php in Xomol CMS 1.2 allows remote attackers to inject arbitrary web script or HTML via the current_… | Patch early | 4.3 medium | 1.5% | 2008-07-17 |
| CVE-2008-3510 EXP | Cross-site scripting (XSS) vulnerability in livehelp_js.php in Crafty Syntax Live Help (CSLH) 2.14.6 allows remote attackers to inject arbitrary web s… | Patch early | 4.3 medium | 1.5% | 2008-08-07 |
| CVE-2008-3566 EXP | Cross-site scripting (XSS) vulnerability in ZoneO-soft freeForum 1.7 allows remote attackers to inject arbitrary web script or HTML via the acuparam p… | Patch early | 4.3 medium | 1.5% | 2008-08-10 |
| CVE-2008-4140 EXP | Cross-site scripting (XSS) vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers to inject arbitrary web script or HTML via the query s… | Patch early | 4.3 medium | 1.5% | 2008-09-24 |
| CVE-2008-4761 EXP | Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote attackers t… | Patch early | 4.3 medium | 1.5% | 2008-10-28 |
| CVE-2010-2433 EXP | Multiple cross-site scripting (XSS) vulnerabilities in content/internalError.jsp in IBM WebSphere ILOG JRules 6.7 allow remote attackers to inject arb… | Patch early | 4.3 medium | 1.5% | 2010-06-24 |
| CVE-2010-2715 EXP | Cross-site scripting (XSS) vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arbitrary web script or HTML via t… | Patch early | 4.3 medium | 1.5% | 2010-07-13 |
| CVE-2008-6094 EXP | Cross-site scripting (XSS) vulnerability in user.do in Celoxis Technologies Celoxis allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2009-02-09 |
| CVE-2008-6200 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Swiki 1.5 allow remote attackers to inject arbitrary web script or HTML via (1) the query strin… | Patch early | 4.3 medium | 1.5% | 2009-02-20 |
| CVE-2008-6406 EXP | Cross-site scripting (XSS) vulnerability in admin.php in DataLife Engine (DLE) 7.2 allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2009-03-06 |
| CVE-2008-6439 EXP | Cross-site scripting (XSS) vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to inject arbitrary web script or HT… | Patch early | 4.3 medium | 1.5% | 2009-03-06 |
| CVE-2008-6476 EXP | Cross-site scripting (XSS) vulnerability in blog/search.aspx in BlogEngine.NET allows remote attackers to inject arbitrary web script or HTML via the… | Patch early | 4.3 medium | 1.5% | 2009-03-16 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt