CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
404,237 CVEs
1,739 on KEV
17,300 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-11
171,158 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-6396 EXP | Cross-site scripting (XSS) vulnerability in account.php in Celerondude Uploader 6.1 allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2009-03-04 |
| CVE-2008-7057 EXP | Cross-site scripting (XSS) vulnerability in merchandise.php in BandSite CMS 1.1.4 allows remote attackers to inject arbitrary HTML or web script via t… | Patch early | 4.3 medium | 1.5% | 2009-08-24 |
| CVE-2009-0335 EXP | Cross-site scripting (XSS) vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to inject arbitrary web script or HTML via the v… | Patch early | 4.3 medium | 1.5% | 2009-01-29 |
| CVE-2009-4382 EXP | Cross-site scripting (XSS) vulnerability in module.php in PHPFABER CMS, possibly 1.3.36, allows remote attackers to inject arbitrary web script or HTM… | Patch early | 4.3 medium | 1.5% | 2009-12-22 |
| CVE-2009-4934 EXP | Cross-site scripting (XSS) vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrary web script or HTML via the s… | Patch early | 4.3 medium | 1.5% | 2010-07-12 |
| CVE-2010-0470 EXP | Cross-site scripting (XSS) vulnerability in scvrtsrv.cmd in Comtrend CT-507IT ADSL Router allows remote attackers to inject arbitrary web script or HT… | Patch early | 4.3 medium | 1.5% | 2010-02-02 |
| CVE-2010-0675 EXP | Cross-site scripting (XSS) vulnerability in index.php in BGSvetionik BGS CMS 2.2.1 allows remote attackers to inject arbitrary web script or HTML via… | Patch early | 4.3 medium | 1.5% | 2010-02-22 |
| CVE-2010-0706 EXP | Cross-site scripting (XSS) vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows remote attackers to inject arbit… | Patch early | 4.3 medium | 1.5% | 2010-02-25 |
| CVE-2010-1091 EXP | Multiple cross-site scripting (XSS) vulnerabilities in contact.php in phpMySite allow remote attackers to inject arbitrary web script or HTML via the… | Patch early | 4.3 medium | 1.5% | 2010-03-24 |
| CVE-2010-2256 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web scr… | Patch early | 4.3 medium | 1.5% | 2010-06-09 |
| CVE-2010-3425 EXP | Cross-site scripting (XSS) vulnerability in UserControls/Popups/frmHelp.aspx in SmarterStats 5.3, 5.3.3819, and possibly other 5.3 versions, allows re… | Patch early | 4.3 medium | 1.5% | 2010-09-16 |
| CVE-2008-6974 EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attackers to hijack the authenticati… | Patch early | 6.8 medium | 1.5% | 2009-08-14 |
| CVE-2008-5126 EXP | Cross-site scripting (XSS) vulnerability in search.php in BoutikOne CMS allows remote attackers to inject arbitrary web script or HTML via the search_… | Patch early | 4.3 medium | 1.5% | 2008-11-18 |
| CVE-2008-6173 EXP | Cross-site scripting (XSS) vulnerability in fullscreen.php in ClipShare Pro 4.0 allows remote attackers to inject arbitrary web script or HTML via the… | Patch early | 4.3 medium | 1.5% | 2009-02-19 |
| CVE-2008-6212 EXP | Cross-site scripting (XSS) vulnerability in admin.php in Php-Stats 0.1.9.1 allows remote attackers to inject arbitrary web script or HTML via the (1)… | Patch early | 4.3 medium | 1.5% | 2009-02-20 |
| CVE-2010-1746 EXP | Multiple cross-site scripting (XSS) vulnerabilities in the Table JX (com_grid) component for Joomla! allow remote attackers to inject arbitrary web sc… | Patch early | 4.3 medium | 1.5% | 2010-05-06 |
| CVE-2010-2437 EXP | Cross-site scripting (XSS) vulnerability in class/tools.class.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to inject arbitrary… | Patch early | 4.3 medium | 1.5% | 2010-06-24 |
| CVE-2010-2457 EXP | Cross-site scripting (XSS) vulnerability in index.php in K-Search allows remote attackers to inject arbitrary web script or HTML via the term paramete… | Patch early | 4.3 medium | 1.5% | 2010-06-25 |
| CVE-2010-2463 EXP | Cross-site scripting (XSS) vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitrary web script or HTML via the p… | Patch early | 4.3 medium | 1.5% | 2010-06-25 |
| CVE-2010-2615 EXP | Multiple cross-site scripting (XSS) vulnerabilities in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allow remote attackers to inject arb… | Patch early | 4.3 medium | 1.5% | 2010-07-02 |
| CVE-2008-0400 EXP | Cross-site scripting (XSS) vulnerability in header.tpl.php in the modern template for Singapore 0.10.1 allows remote attackers to inject arbitrary web… | Patch early | 4.3 medium | 1.5% | 2008-01-23 |
| CVE-2008-0749 EXP | Cross-site scripting (XSS) vulnerability in index.php in Calimero.CMS 3.3 allows remote attackers to inject arbitrary web script or HTML via the id pa… | Patch early | 4.3 medium | 1.5% | 2008-02-13 |
| CVE-2008-1326 EXP | Cross-site scripting (XSS) vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web script or HTML via the query para… | Patch early | 4.3 medium | 1.5% | 2008-03-13 |
| CVE-2008-1499 EXP | Cross-site scripting (XSS) vulnerability in frontend/x/manpage.html in cPanel 11.18.3 and 11.21.0-BETA allows remote attackers to inject arbitrary web… | Patch early | 4.3 medium | 1.5% | 2008-03-25 |
| CVE-2008-1983 EXP | Cross-site scripting (XSS) vulnerability in Advanced Electron Forum (AEF) 1.0.6 allows remote attackers to inject arbitrary web script or HTML via the… | Patch early | 4.3 medium | 1.5% | 2008-04-27 |
| CVE-2008-2030 EXP | Cross-site scripting (XSS) vulnerability in installControl.php3 in F5 FirePass 4100 SSL VPN 5.4.2-5.5.2 and 6.0-6.2 allows remote attackers to inject… | Patch early | 4.3 medium | 1.5% | 2008-04-30 |
| CVE-2008-2162 EXP | Cross-site scripting (XSS) vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host… | Patch early | 4.3 medium | 1.5% | 2008-05-12 |
| CVE-2008-2507 EXP | Cross-site scripting (XSS) vulnerability in Calcium40.pl in Brown Bear Software Calcium 3.10 and 4.0.4 allows remote attackers to inject arbitrary web… | Patch early | 4.3 medium | 1.5% | 2008-05-29 |
| CVE-2008-4051 EXP | Cross-site scripting (XSS) vulnerability in surveyresults.asp in Smart Survey 1.0 allows remote attackers to inject arbitrary web script or HTML via t… | Patch early | 4.3 medium | 1.5% | 2008-09-11 |
| CVE-2008-4053 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Bluemoon PopnupBLOG module 3.20 and 3.30 for XOOPS allow remote attackers to i… | Patch early | 4.3 medium | 1.5% | 2008-09-11 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt