CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 06:40 UTC)

What this means for you

This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,437; Show in the list
Critical, last 7 days: 357; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product netapp:clustered_data_ontap. Show all products

59 CVEs, showing 51 to 59PreviousPage 2 of 2

CVE	Severity	Title	Published
CVE-2022-35260	Medium 6.5	curl can be told to parse a `.netrc` file for credentials. Assigned by hackerone	Dec 5, 2022
CVE-2022-32221	Critical 9.8	When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same han… Assigned by hackerone	Dec 5, 2022
CVE-2023-23915	Medium 6.5	A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Assigned by hackerone	Feb 23, 2023
CVE-2023-23916	Medium 6.5	An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can be compressed mult… Assigned by hackerone	Feb 23, 2023
CVE-2023-23914	Critical 9.1	A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Assigned by hackerone	Feb 23, 2023
CVE-2023-27537	Medium 5.9	A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". Assigned by hackerone	Mar 30, 2023
CVE-2023-27538	High 7.7	An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have pr… Assigned by hackerone	Mar 30, 2023
CVE-2023-27533	Critical 9.8	A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during serve… Assigned by hackerone	Mar 30, 2023
CVE-2023-2953	High 7.5	A vulnerability was found in openldap. Assigned by redhat	May 30, 2023

PreviousPage 2 of 2

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.