CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 10:20 UTC)

What this means for you

This week: 5,469 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,469; Show in the list
Critical, last 7 days: 357; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product netapp:h410c_firmware. Show all products

65 CVEs, showing 51 to 65PreviousPage 2 of 2

CVE	Severity	Title	Published
CVE-2022-47520	High 7.1	An issue was discovered in the Linux kernel before 6.0.11. Assigned by mitre	Dec 18, 2022
CVE-2023-0386 Known exploited	High 7.8	A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capabl… Assigned by redhat	Mar 22, 2023
CVE-2023-1077	High 7.0	In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition woul… Assigned by redhat	Mar 27, 2023
CVE-2023-2269	Medium 4.4	A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub… Assigned by redhat	Apr 25, 2023
CVE-2023-2898	Medium 4.7	There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. Assigned by redhat	May 26, 2023
CVE-2023-2953	High 7.5	A vulnerability was found in openldap. Assigned by redhat	May 30, 2023
CVE-2023-3212	Medium 4.4	A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. Assigned by redhat	Jun 23, 2023
CVE-2023-4813	Medium 5.9	Glibc: potential use-after-free in gaih_inet() Assigned by redhat	Sep 12, 2023
CVE-2023-4911 Known exploited	High 7.8	Glibc: buffer overflow in ld.so leading to privilege escalation Assigned by redhat	Oct 3, 2023
CVE-2024-1086 Known exploited	High 7.8	Use-after-free in Linux kernel's netfilter: nf_tables component Assigned by Google	Jan 31, 2024
CVE-2024-28757	High 7.5	libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate). Assigned by mitre	Mar 10, 2024
CVE-2024-50602	Medium 5.9	An issue was discovered in libexpat before 2.6.4. Assigned by mitre	Oct 27, 2024
CVE-2025-0167	Low 3.4	netrc and default credential leak Assigned by curl	Feb 5, 2025
CVE-2025-0665	High 7.0	eventfd double close Assigned by curl	Feb 5, 2025
CVE-2024-54085 Known exploited	Critical 10.0	Redfish Authentication Bypass Assigned by AMI	Mar 11, 2025

PreviousPage 2 of 2

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.