Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,565All CVEsplus 18,890 rejected
- 380Last 24 hours3,008 in the last 7 days
- 17,096Last 30 days1,578 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 21 | 21 | 0 | 0 | 44 | 44 |
| Title | ||
|---|---|---|
| CVE-2018-25404 | The Open ISES Project 3.30A SQL Injection via add_facnote.phpOpen ISES · Open ISES Project | High8.8 |
| CVE-2018-25403 | The Open ISES Project 3.30A SQL Injection via city_graph.phpOpen ISES · Open ISES Project | High8.8 |
| CVE-2018-25402 | The Open ISES Project 3.30A SQL Injection via inc_types_graph.phpOpen ISES · Open ISES Project | High8.8 |
| CVE-2018-25401 | The Open ISES Project 3.30A SQL Injection via sever_graph.phpOpen ISES · Open ISES Project | High8.8 |
| CVE-2018-25400 | The Open ISES Project 3.30A SQL Injection via form_post.phpOpen ISES · Open ISES Project | High8.8 |
| CVE-2018-25399 | The Open ISES Project 3.30A SQL Injection via nearby.phpOpen ISES · Open ISES Project | High8.8 |
| CVE-2018-25398 | The Open ISES Project 3.30A SQL Injection via main.phpOpen ISES · Open ISES Project | High8.8 |
| CVE-2026-48249 | Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.phpOpen ISES · Tickets | High8.2 |
| CVE-2026-48248 | Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.phpOpen ISES · Tickets | High8.2 |
| CVE-2026-48247 | Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.phpOpen ISES · Tickets | High8.2 |
| CVE-2026-48246 | Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.phpOpen ISES · Tickets | High8.2 |
| CVE-2026-48245 | Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.phpOpen ISES · Tickets | Medium6.9 |
| CVE-2026-48244 | Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.phpOpen ISES · Tickets | Medium6.9 |
| CVE-2026-48243 | Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.phpOpen ISES · Tickets | Medium6.9 |
| CVE-2026-48242 | Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.phpOpen ISES · Tickets | Critical9.2 |
| CVE-2026-48241 | Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.phpOpen ISES · Tickets | Critical9.2 |
| CVE-2026-48240 | Open ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id ParametersOpen ISES · Tickets | High7.1 |
| CVE-2026-48239 | Open ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id ParameterOpen ISES · Tickets | High7.1 |
| CVE-2026-48238 | Open ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id ParameterOpen ISES · Tickets | High7.1 |
| CVE-2026-48237 | Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id ParametersOpen ISES · Tickets | High7.1 |
| CVE-2026-48236 | Open ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple ParametersOpen ISES · Tickets | High7.1 |
| CVE-2026-48235 | Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker DataOpen ISES · Tickets | High8.8 |
| CVE-2026-48234 | Open ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir ParametersOpen ISES · Tickets | High7.1 |
| CVE-2026-48233 | Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset ParameterOpen ISES · Tickets | High7.1 |
| CVE-2026-48232 | Open ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset ParameterOpen ISES · Tickets | High7.1 |
| CVE-2026-48231 | Open ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple ParametersOpen ISES · Tickets | High7.1 |
| CVE-2026-48230 | Open ISES Tickets < 3.44.2 Reflected XSS via ticketsmdb_import.php Multiple POST ParametersOpen ISES · Tickets | Medium5.1 |
| CVE-2026-48229 | Open ISES Tickets < 3.44.2 Reflected XSS via routes_i.php ticket_id ParameterOpen ISES · Tickets | Medium5.1 |
| CVE-2026-48228 | Open ISES Tickets < 3.44.2 Reflected XSS via patient_w.php id and ticket_id ParametersOpen ISES · Tickets | Medium5.1 |
| CVE-2026-48227 | Open ISES Tickets < 3.44.2 Reflected XSS via patient.php id and ticket_id ParametersOpen ISES · Tickets | Medium5.1 |
| CVE-2026-48226 | Open ISES Tickets < 3.44.2 Reflected XSS via os_watch.php ref and mode_orig ParametersOpen ISES · Tickets | Medium5.1 |
| CVE-2026-48225 | Open ISES Tickets < 3.44.2 Reflected XSS via landb.php _type ParameterOpen ISES · Tickets | Medium5.1 |
| CVE-2026-48224 | Open ISES Tickets < 3.44.2 Reflected XSS via ics214.php frm_add_str ParameterOpen ISES · Tickets | Medium5.1 |
| CVE-2026-48223 | Open ISES Tickets < 3.44.2 Reflected XSS via ics213rr.php frm_add_str ParameterOpen ISES · Tickets | Medium5.1 |
| CVE-2026-48222 | Open ISES Tickets < 3.44.2 Reflected XSS via ics213.php frm_add_str ParameterOpen ISES · Tickets | Medium5.1 |
| CVE-2026-48221 | Open ISES Tickets < 3.44.2 Reflected XSS via ics205a.php frm_add_str ParameterOpen ISES · Tickets | Medium5.1 |
| CVE-2026-48220 | Open ISES Tickets < 3.44.2 Reflected XSS via ics205.php frm_add_str ParameterOpen ISES · Tickets | Medium5.1 |
| CVE-2026-48219 | Open ISES Tickets < 3.44.2 Reflected XSS via ics202.php frm_add_str ParameterOpen ISES · Tickets | Medium5.1 |
| CVE-2026-48218 | Open ISES Tickets < 3.44.2 Reflected XSS via icons/buttons/landb.php frm_name and frm_id ParametersOpen ISES · Tickets | Medium5.1 |
| CVE-2026-48217 | Open ISES Tickets < 3.44.2 Reflected XSS via delete_module.php Multiple POST ParametersOpen ISES · Tickets | Medium5.1 |
| CVE-2026-48216 | Open ISES Tickets < 3.44.2 Reflected XSS via db_loader.php Multiple POST ParametersOpen ISES · Tickets | Medium5.1 |
| CVE-2026-48215 | Open ISES Tickets < 3.44.2 Reflected XSS via circle.php frm_id ParameterOpen ISES · Tickets | Medium5.1 |
| CVE-2026-48214 | Open ISES Tickets < 3.44.2 Reflected XSS via add_nm.php ticket_id ParameterOpen ISES · Tickets | Medium5.1 |
| CVE-2026-48213 | Open ISES Tickets < 3.44.2 Reflected XSS via add.php ticket_id ParameterOpen ISES · Tickets | Medium5.1 |