CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 09:23 UTC)

What this means for you

This week: 5,436 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,436; Show in the list
Critical, last 7 days: 355; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product netapp:clustered_data_ontap_antivirus_connector. Show all products

18 CVEs, showing 1 to 18

CVE	Severity	Title	Published
CVE-2019-19956	High 7.5	xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs. Assigned by mitre	Dec 24, 2019
CVE-2020-24977	Medium 6.5	GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. Assigned by mitre	Sep 3, 2020
CVE-2021-3537	Medium 5.9	A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. Assigned by redhat	May 14, 2021
CVE-2021-3518	High 8.8	There's a flaw in libxml2 in versions before 2.9.11. Assigned by redhat	May 18, 2021
CVE-2021-3517	High 8.6	There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. Assigned by redhat	May 19, 2021
CVE-2021-3516	High 7.8	There's a flaw in libxml2's xmllint in versions before 2.9.11. Assigned by redhat	Jun 1, 2021
CVE-2021-3541	Medium 6.5	A flaw was found in libxml2. Assigned by redhat	Jul 9, 2021
CVE-2021-3711	Critical 9.8	SM2 Decryption Buffer Overflow Assigned by openssl	Aug 24, 2021
CVE-2022-23308	High 7.5	valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. Assigned by mitre	Feb 26, 2022
CVE-2022-0778	High 7.5	Infinite loop in BN_mod_sqrt() reachable when parsing certificates Assigned by openssl	Mar 15, 2022
CVE-2022-29824	Medium 6.5	In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf) and tree.c (xmlBuffer) don't check for integer overflows. Assigned by mitre	May 3, 2022
CVE-2022-1292	Critical 9.8	The c_rehash script allows command injection Assigned by openssl	May 3, 2022
CVE-2022-1343	Medium 5.3	OCSP_basic_verify may incorrectly verify the response signing certificate Assigned by openssl	May 3, 2022
CVE-2022-1434	Medium 5.9	Incorrect MAC key used in the RC4-MD5 ciphersuite Assigned by openssl	May 3, 2022
CVE-2022-1473	High 7.5	Resource leakage when decoding certificates and keys Assigned by openssl	May 3, 2022
CVE-2022-2097	Medium 5.3	AES OCB fails to encrypt some bytes Assigned by openssl	Jul 5, 2022
CVE-2022-40303	High 7.5	An issue was discovered in libxml2 before 2.10.3. Assigned by mitre	Nov 22, 2022
CVE-2022-40304	High 7.8	An issue was discovered in libxml2 before 2.10.3. Assigned by mitre	Nov 23, 2022

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.