CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 07:30 UTC)

What this means for you

This week: 5,443 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,443; Show in the list
Critical, last 7 days: 355; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product netapp:ontap_select_deploy_administration_utility. Show all products

83 CVEs, showing 1 to 50Page 1 of 2Next

CVE	Severity	Title	Published
CVE-2016-5195 Known exploited	High 7.0	Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-… Assigned by Chrome	Nov 10, 2016
CVE-2019-9169	Critical 9.8	In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match. Assigned by mitre	Feb 26, 2019
CVE-2019-3859	Medium 5.0	An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. Assigned by redhat	Mar 20, 2019
CVE-2019-3862	High 7.3	An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. Assigned by redhat	Mar 20, 2019
CVE-2019-3855	High 7.5	An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. Assigned by redhat	Mar 21, 2019
CVE-2019-3858	Medium 5.0	An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. Assigned by redhat	Mar 21, 2019
CVE-2019-3863	High 7.5	A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. Assigned by redhat	Mar 25, 2019
CVE-2019-3861	Medium 5.0	An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. Assigned by redhat	Mar 25, 2019
CVE-2019-3860	Medium 5.0	An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. Assigned by redhat	Mar 25, 2019
CVE-2019-3857	High 7.5	An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. Assigned by redhat	Mar 25, 2019
CVE-2019-3856	High 7.5	An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. Assigned by redhat	Mar 25, 2019
CVE-2019-16168	Medium 6.5	In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the… Assigned by mitre	Sep 9, 2019
CVE-2019-17498	High 8.1	In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a s… Assigned by mitre	Oct 21, 2019
CVE-2019-19317	Critical 9.8	lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other… Assigned by mitre	Dec 5, 2019
CVE-2019-19645	Medium 5.5	alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements. Assigned by mitre	Dec 9, 2019
CVE-2019-19646	Critical 9.8	pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns. Assigned by mitre	Dec 9, 2019
CVE-2019-19603	High 7.5	SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash. Assigned by mitre	Dec 9, 2019
CVE-2019-19956	High 7.5	xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs. Assigned by mitre	Dec 24, 2019
CVE-2019-20388	High 7.5	xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak. Assigned by mitre	Jan 21, 2020
CVE-2020-11656	Critical 9.8	In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement. Assigned by mitre	Apr 9, 2020
CVE-2020-11655	High 7.5	SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled. Assigned by mitre	Apr 9, 2020
CVE-2020-13871	High 7.5	SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late. Assigned by mitre	Jun 6, 2020
CVE-2020-14155	Medium 5.3	libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring. Assigned by mitre	Jun 15, 2020
CVE-2020-14145	Medium 5.9	The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. Assigned by mitre	Jun 29, 2020
CVE-2020-15999 Known exploited	Critical 9.6	Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome	Nov 3, 2020
CVE-2019-25013	Medium 5.9	The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read. Assigned by mitre	Jan 4, 2021
CVE-2020-35493	Medium 5.5	A flaw exists in binutils in bfd/pef.c. Assigned by redhat	Jan 4, 2021
CVE-2020-35494	Medium 6.1	There's a flaw in binutils /opcodes/tic4x-dis.c. Assigned by redhat	Jan 4, 2021
CVE-2020-35495	Medium 5.5	There's a flaw in binutils /bfd/pef.c. Assigned by redhat	Jan 4, 2021
CVE-2020-35496	Medium 5.5	There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereferen… Assigned by redhat	Jan 4, 2021
CVE-2020-35507	Medium 5.5	There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to caus… Assigned by redhat	Jan 4, 2021
CVE-2021-3177	Critical 9.8	Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untru… Assigned by mitre	Jan 19, 2021
CVE-2021-3156 Known exploited	High 7.8	Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends wit… Assigned by mitre	Jan 26, 2021
CVE-2021-3326	High 7.5	The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts th… Assigned by mitre	Jan 27, 2021
CVE-2021-23336	Medium 5.9	Web Cache Poisoning Assigned by snyk	Feb 15, 2021
CVE-2020-27618	Medium 5.5	The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails t… Assigned by mitre	Feb 26, 2021
CVE-2021-3449	Medium 5.9	NULL pointer deref in signature_algorithms processing Assigned by openssl	Mar 25, 2021
CVE-2021-3450	High 7.4	CA certificate check bypass with X509_V_FLAG_X509_STRICT Assigned by openssl	Mar 25, 2021
CVE-2021-20305	High 8.1	A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply fun… Assigned by redhat	Apr 5, 2021
CVE-2021-31879	Medium 6.1	GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007. Assigned by mitre	Apr 29, 2021
CVE-2021-3537	Medium 5.9	A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. Assigned by redhat	May 14, 2021
CVE-2021-3518	High 8.8	There's a flaw in libxml2 in versions before 2.9.11. Assigned by redhat	May 18, 2021
CVE-2021-3517	High 8.6	There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. Assigned by redhat	May 19, 2021
CVE-2021-3426	Medium 5.7	There's a flaw in Python 3's pydoc. Assigned by redhat	May 20, 2021
CVE-2021-3516	High 7.8	There's a flaw in libxml2's xmllint in versions before 2.9.11. Assigned by redhat	Jun 1, 2021
CVE-2021-3520	Critical 9.8	There's a flaw in lz4. Assigned by redhat	Jun 2, 2021
CVE-2021-3541	Medium 6.5	A flaw was found in libxml2. Assigned by redhat	Jul 9, 2021
CVE-2021-35942	Critical 9.1	The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially r… Assigned by mitre	Jul 22, 2021
CVE-2021-37600	Medium 5.5	An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/se… Assigned by mitre	Jul 28, 2021
CVE-2021-3580	High 7.5	A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. Assigned by redhat	Aug 5, 2021

Page 1 of 2Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.