CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-20 02:23 UTC)

What this means for you

This week: 5,215 CVEs published, 334 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,215; Show in the list
Critical, last 7 days: 334; Show in the list
Healthcare-tagged, last 7 days: 5; Show in the list
Known exploited (CISA KEV): 1,748; Show in the list

101,517 CVEs, showing 1151 to 1200PreviousPage 24 of 2,031Next

CVE	Severity	Title	Published
CVE-2019-17594	Medium 5.3	There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012. Assigned by mitre	Oct 14, 2019
CVE-2019-17195 Healthcare	Critical 9.8	Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authenti… Assigned by mitre	Oct 15, 2019
CVE-2019-3010 Known exploited	High 8.8	Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). Assigned by oracle	Oct 16, 2019
CVE-2019-17498	High 8.1	In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a s… Assigned by mitre	Oct 21, 2019
CVE-2019-17409 Healthcare	Medium 6.1	Reflected XSS exists in interface/forms/eye_mag/view.php in OpenEMR 5.x before 5.0.2.1 ia the id parameter. Assigned by mitre	Oct 21, 2019
CVE-2019-16862 Healthcare	Medium 6.1	Reflected XSS in interface/forms/eye_mag/view.php in OpenEMR 5.x before 5.0.2.1 allows a remote attacker to execute arbitrary code in the context of a user's session via the pid parameter. Assigned by mitre	Oct 21, 2019
CVE-2019-18224	Critical 9.8	idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string. Assigned by mitre	Oct 21, 2019
CVE-2019-16404 Healthcare	High 8.8	Authenticated SQL Injection in interface/forms/eye_mag/js/eye_base.php in OpenEMR through 5.0.2 allows a user to extract arbitrary data from the openemr database via a non-parameterized INSERT INTO s… Assigned by mitre	Oct 21, 2019
CVE-2019-12290	High 7.5	GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. Assigned by mitre	Oct 22, 2019
CVE-2019-18348	Medium 5.4	An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. Assigned by mitre	Oct 23, 2019
CVE-2019-13546 Healthcare	Medium 6.8	In IntelliSpace Perinatal, Versions K and prior, a vulnerability within the IntelliSpace Perinatal application environment could enable an unauthorized attacker with physical access to a locked appli… Assigned by icscert	Oct 25, 2019
CVE-2019-11043 Known exploited	High 8.7	Underflow in PHP-FPM can lead to RCE Assigned by php	Oct 28, 2019
CVE-2019-18187 Known exploited	High 8.8	Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip file to a specific folder on… Assigned by trendmicro	Oct 28, 2019
CVE-2019-5010	High 7.5	An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6.	Oct 31, 2019
CVE-2019-18806	Medium 5.5	A memory leak in the ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel before 5.3.5 allows local users to cause a denial of service (memory consumption) b… Assigned by mitre	Nov 7, 2019
CVE-2019-10219 Healthcare	Medium 6.5	A vulnerability was found in Hibernate-Validator. Assigned by redhat	Nov 8, 2019
CVE-2019-13557 Healthcare	Medium 5.3	In Tasy EMR, Tasy WebPortal Versions 3.02.1757 and prior, there is an information exposure vulnerability which may allow a remote attacker to access system and configuration information. Assigned by icscert	Nov 8, 2019
CVE-2019-13543 Healthcare	Medium 5.8	Medtronic Valleylab FT10 and FX8 Use of Hard-coded Credentials Assigned by icscert	Nov 8, 2019
CVE-2019-13539 Healthcare	High 7.0	Medtronic Valleylab FT10 and FX8 Reversible One-way Hash Assigned by icscert	Nov 8, 2019
CVE-2019-13535 Healthcare	Medium 4.6	Medtronic Valleylab FT10 and LS10 Protection Mechanism Failure Assigned by icscert	Nov 8, 2019
CVE-2019-13531 Healthcare	Medium 4.8	Medtronic Valleylab FT10 and LS10 Improper Authentication Assigned by icscert	Nov 8, 2019
CVE-2019-1388 Known exploited	High 7.8	An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerabilit… Assigned by microsoft	Nov 12, 2019
CVE-2019-1385 Known exploited	High 7.8	An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability,… Assigned by microsoft	Nov 12, 2019
CVE-2019-1405 Known exploited	High 7.8	An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerab… Assigned by microsoft	Nov 12, 2019
CVE-2019-1429 Known exploited	High 7.5	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. Assigned by microsoft	Nov 12, 2019
CVE-2019-14566	High 7.8	Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service vi… Assigned by intel	Nov 14, 2019
CVE-2019-14565	High 7.8	Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclos… Assigned by intel	Nov 14, 2019
CVE-2019-11136	Medium 6.7	Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privi… Assigned by intel	Nov 14, 2019
CVE-2019-11137	High 8.2	Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors… Assigned by intel	Nov 14, 2019
CVE-2019-0123	High 7.8	Insufficient memory protection in Intel(R) 6th Generation Core Processors and greater, supporting SGX, may allow a privileged user to potentially enable escalation of privilege via local access. Assigned by intel	Nov 14, 2019
CVE-2019-0124	High 7.8	Insufficient memory protection in Intel(R) 6th Generation Core Processors and greater, supporting TXT, may allow a privileged user to potentially enable escalation of privilege via local access. Assigned by intel	Nov 14, 2019
CVE-2019-19054	Medium 4.7	A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by tri… Assigned by mitre	Nov 18, 2019
CVE-2019-19066	Medium 4.7	A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering b… Assigned by mitre	Nov 18, 2019
CVE-2019-19080	Medium 5.9	Four memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allow attackers to cause a denial of service (memor… Assigned by mitre	Nov 18, 2019
CVE-2019-19081	Medium 5.9	A memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allows attackers to cause a denial of service (memory… Assigned by mitre	Nov 18, 2019
CVE-2019-19082	Medium 4.7	Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption). Assigned by mitre	Nov 18, 2019
CVE-2019-19083	Medium 4.7	Memory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption). Assigned by mitre	Nov 18, 2019
CVE-2019-19126	Low 3.3	On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing… Assigned by mitre	Nov 19, 2019
CVE-2019-6693 Known exploited	Medium 6.5	Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup file to decipher the sensitive data, via knowledge… Assigned by fortinet	Nov 21, 2019
CVE-2019-19006 Known exploited	Critical 9.8	Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control. Assigned by mitre	Nov 21, 2019
CVE-2019-13720 Known exploited	High 8.8	Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome	Nov 25, 2019
CVE-2019-19242	Medium 5.9	SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c. Assigned by mitre	Nov 25, 2019
CVE-2019-19244	High 7.5	sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage. Assigned by mitre	Nov 25, 2019
CVE-2019-5825 Known exploited	Medium 6.5	Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome	Nov 25, 2019
CVE-2019-18241 Healthcare	Medium 6.5	In Philips IntelliBridge EC40 and EC80, IntelliBridge EC40 Hub all versions, and IntelliBridge EC80 Hub all versions, the SSH server running on the affected products is configured to allow weak ciphe… Assigned by icscert	Nov 25, 2019
CVE-2019-15271 Known exploited	High 8.8	Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability Assigned by cisco	Nov 26, 2019
CVE-2019-18276	High 7.8	An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. Assigned by mitre	Nov 28, 2019
CVE-2019-19462	Medium 5.5	relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result. Assigned by mitre	Nov 30, 2019
CVE-2013-4235	Medium 4.7	shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees Assigned by redhat	Dec 3, 2019
CVE-2019-19530	Medium 4.6	In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef. Assigned by mitre	Dec 3, 2019

PreviousPage 24 of 2,031Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.