CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
408,746 CVEs
1,746 on KEV
17,309 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-15
210,296 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2008-6551 EXP | Multiple directory traversal vulnerabilities in e-Vision CMS 2.0.2 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to include a… | Patch early | 5.1 medium | 1.9% | 2009-03-30 |
| CVE-2005-3685 EXP | Cross-site scripting (XSS) vulnerability in shopadmin.asp in VP-ASP Shopping Cart 5.50 allows remote attackers to inject arbitrary web script or HTML… | Patch early | 4.3 medium | 1.9% | 2005-11-19 |
| CVE-2005-4627 EXP | Cross-site scripting (XSS) vulnerability in index.php in (1) GmailSite 1.0 through 1.0.4 and (2) GFHost 0.1.1 through 0.4.2 allows remote attackers to… | Patch early | 4.3 medium | 1.9% | 2005-12-31 |
| CVE-2006-0251 EXP | Cross-site scripting (XSS) vulnerability in fom.cgi in Faq-O-Matic 2.711 allows remote attackers to inject arbitrary web script or HTML via the (1) _d… | Patch early | 4.3 medium | 1.9% | 2006-01-18 |
| CVE-2006-0880 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to inject arbitrary web script or HT… | Patch early | 4.3 medium | 1.9% | 2006-02-24 |
| CVE-2006-0974 EXP | Cross-site scripting (XSS) vulnerability in failure.asp in Battleaxe bttlxeForum 2.0 allows remote attackers to inject arbitrary web script or HTML vi… | Patch early | 4.3 medium | 1.9% | 2006-03-03 |
| CVE-2006-1070 EXP | Cross-site scripting (XSS) vulnerability in dv_gbook.php in DVguestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the f p… | Patch early | 4.3 medium | 1.9% | 2006-03-08 |
| CVE-2006-1071 EXP | Cross-site scripting (XSS) vulnerability in index.php in DVguestbook 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the page… | Patch early | 4.3 medium | 1.9% | 2006-03-08 |
| CVE-2006-1080 EXP | Cross-site scripting (XSS) vulnerability in login.php in Game-Panel 2.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML v… | Patch early | 4.3 medium | 1.9% | 2006-03-09 |
| CVE-2004-1790 EXP | Cross-site scripting (XSS) vulnerability in the web management interface in Edimax AR-6004 ADSL Routers allows remote attackers to inject arbitrary we… | Patch early | 4.3 medium | 1.9% | 2004-12-31 |
| CVE-2004-1954 EXP | Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote attackers to inject arbitrary web script or HTML via the jco… | Patch early | 4.3 medium | 1.9% | 2004-04-21 |
| CVE-2004-2494 EXP | Cross-site scripting (XSS) vulnerability in _error in Ability Mail Server 1.18 allows remote attackers to inject arbitrary web script or HTML via the… | Patch early | 4.3 medium | 1.9% | 2004-12-31 |
| CVE-2004-2514 EXP | Cross-site scripting (XSS) vulnerability in modules/private_messages/index.php in PowerPortal 1.x allows remote attackers to inject arbitrary web scri… | Patch early | 4.3 medium | 1.9% | 2004-12-31 |
| CVE-2005-0650 EXP | Multiple cross-site scripting (XSS) vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to inject arbitrary web script or HTML via (1) the pag… | Patch early | 4.3 medium | 1.9% | 2005-05-02 |
| CVE-2005-0802 EXP | Cross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 through 1.1b allows remote attackers to execute arbitrary web script or HTML vi… | Patch early | 4.3 medium | 1.9% | 2005-05-02 |
| CVE-2005-1095 EXP | Cross-site scripting (XSS) vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to inject arbitrary web script or… | Patch early | 4.3 medium | 1.9% | 2005-05-02 |
| CVE-2005-1886 EXP | Cross-site scripting (XSS) vulnerability in view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to inject arbitrary web script or HTML vi… | Patch early | 4.3 medium | 1.9% | 2005-06-09 |
| CVE-2002-1929 EXP | Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attackers to inject arbitrary web scrip… | Patch early | 4.3 medium | 1.9% | 2002-12-31 |
| CVE-2006-1414 EXP | Multiple cross-site scripting (XSS) vulnerabilities in toast.asp in Toast Forums 1.6 and earlier allow remote attackers to inject arbitrary web script… | Patch early | 4.3 medium | 1.9% | 2006-03-28 |
| CVE-2006-1496 EXP | Multiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via (1)… | Patch early | 4.3 medium | 1.9% | 2006-03-30 |
| CVE-2006-2079 EXP | Cross-site scripting (XSS) vulnerability in portfolio.php in Verosky Media Instant Photo Gallery, possibly before 1.0.2, allows remote attackers to in… | Patch early | 4.3 medium | 1.9% | 2006-04-27 |
| CVE-2007-6233 EXP | Directory traversal vulnerability in index.php in FTP Admin 0.1.0 allows remote authenticated users to include and execute arbitrary local files via a… | Patch early | 4.9 medium | 1.9% | 2007-12-04 |
| CVE-2005-4374 EXP | Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the… | Patch early | 4.3 medium | 1.9% | 2005-12-20 |
| CVE-2006-5528 EXP | Directory traversal vulnerability in mod.php in SchoolAlumni Portal 2.26 allows remote attackers to include and execute arbitrary local files via a ..… | Patch early | 5.0 medium | 1.9% | 2006-10-26 |
| CVE-2008-0207 EXP | Multiple cross-site scripting (XSS) vulnerabilities in PRO-Search 0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via t… | Patch early | 4.3 medium | 1.9% | 2008-01-10 |
| CVE-2010-1712 EXP | Multiple cross-site scripting (XSS) vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers to inject arbitrary web scrip… | Patch early | 4.3 medium | 1.9% | 2010-05-04 |
| CVE-2008-7156 EXP | EkinBoard 1.1.0 and earlier, when register_globals is enabled, allows remote attackers to bypass authorization and gain administrator privileges by se… | Patch early | 6.8 medium | 1.9% | 2009-09-02 |
| CVE-2002-1802 EXP | Cross-site scripting (XSS) vulnerability in Xoops 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag… | Patch early | 4.3 medium | 1.9% | 2002-12-31 |
| CVE-2008-4780 EXP | Directory traversal vulnerability in admin/centre.php in MyForum 1.3, when register_globals is enabled, allows remote attackers to include and execute… | Patch early | 6.8 medium | 1.9% | 2008-10-29 |
| CVE-2008-6025 EXP | Directory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows remote attackers to include and execute arbitrary local files vi… | Patch early | 6.8 medium | 1.9% | 2009-02-03 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt