CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 08:40 UTC)

What this means for you

This week: 5,436 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,436; Show in the list
Critical, last 7 days: 355; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product netapp:ontap_select_deploy_administration_utility. Show all products

83 CVEs, showing 51 to 83PreviousPage 2 of 2

CVE	Severity	Title	Published
CVE-2021-41617	High 7.0	sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Assigned by mitre	Sep 26, 2021
CVE-2022-0391	High 7.5	A flaw was found in Python, specifically within the urllib.parse module. Assigned by redhat	Feb 9, 2022
CVE-2022-0563	Medium 5.5	A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. Assigned by redhat	Feb 21, 2022
CVE-2022-24407	High 8.8	In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement. Assigned by mitre	Feb 23, 2022
CVE-2022-23308	High 7.5	valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. Assigned by mitre	Feb 26, 2022
CVE-2021-3737	High 7.5	A flaw was found in python. Assigned by redhat	Mar 4, 2022
CVE-2021-3733	Medium 6.5	There's a flaw in urllib's AbstractBasicAuthHandler class. Assigned by redhat	Mar 7, 2022
CVE-2022-26488	High 7.0	In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. Assigned by mitre	Mar 7, 2022
CVE-2018-25032	High 7.5	zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. Assigned by mitre	Mar 25, 2022
CVE-2015-20107	High 7.8	In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. Assigned by mitre	Apr 13, 2022
CVE-2022-29824	Medium 6.5	In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf) and tree.c (xmlBuffer) don't check for integer overflows. Assigned by mitre	May 3, 2022
CVE-2022-2068	Critical 9.8	The c_rehash script allows command injection Assigned by openssl	Jun 21, 2022
CVE-2022-2097	Medium 5.3	AES OCB fails to encrypt some bytes Assigned by openssl	Jul 5, 2022
CVE-2022-35737	High 7.5	SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API. Assigned by mitre	Aug 3, 2022
CVE-2022-37434	Critical 9.8	zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. Assigned by mitre	Aug 5, 2022
CVE-2021-4189	Medium 5.3	A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. Assigned by redhat	Aug 24, 2022
CVE-2021-3999	High 7.8	A flaw was found in glibc. Assigned by redhat	Aug 24, 2022
CVE-2021-3998	High 7.5	A flaw was found in glibc. Assigned by redhat	Aug 24, 2022
CVE-2020-35527	Critical 9.8	In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause. Assigned by redhat	Sep 1, 2022
CVE-2022-45061	High 7.5	An issue was discovered in Python before 3.11.1. Assigned by mitre	Nov 9, 2022
CVE-2022-40303	High 7.5	An issue was discovered in libxml2 before 2.10.3. Assigned by mitre	Nov 22, 2022
CVE-2023-25136	Medium 6.5	OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. Assigned by mitre	Feb 3, 2023
CVE-2023-0361	High 7.4	A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. Assigned by redhat	Feb 15, 2023
CVE-2023-24329	High 7.5	An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters. Assigned by mitre	Feb 17, 2023
CVE-2023-20900	High 7.1	A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual ma… Assigned by vmware	Aug 31, 2023
CVE-2023-4911 Known exploited	High 7.8	Glibc: buffer overflow in ld.so leading to privilege escalation Assigned by redhat	Oct 3, 2023
CVE-2024-2004	Low 3.5	Usage of disabled protocol Assigned by curl	Mar 27, 2024
CVE-2024-2398	High 8.6	HTTP/2 push headers memory-leak Assigned by curl	Mar 27, 2024
CVE-2024-2379	Medium 6.3	QUIC certificate check bypass with wolfSSL Assigned by curl	Mar 27, 2024
CVE-2024-6387	High 8.1	Openssh: regresshion - race condition in ssh allows rce/dos Assigned by redhat	Jul 1, 2024
CVE-2024-8096	Medium 6.5	OCSP stapling bypass with GnuTLS Assigned by curl	Sep 11, 2024
CVE-2024-11053	Low 3.4	netrc and redirect credential leak Assigned by curl	Dec 11, 2024
CVE-2025-0167	Low 3.4	netrc and default credential leak Assigned by curl	Feb 5, 2025

PreviousPage 2 of 2

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.