CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 10:10 UTC)

What this means for you

This week: 5,470 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,470; Show in the list
Critical, last 7 days: 357; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product netapp:smi-s_provider. Show all products

15 CVEs, showing 1 to 15

CVE	Severity	Title	Published
CVE-2018-0735	Medium 5.9	Timing attack against ECDSA signature generation Assigned by openssl	Oct 29, 2018
CVE-2019-20388	High 7.5	xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak. Assigned by mitre	Jan 21, 2020
CVE-2020-7595	High 7.5	xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation. Assigned by mitre	Jan 21, 2020
CVE-2020-1967	High 7.5	Segmentation fault in SSL_check_chain Assigned by openssl	Apr 21, 2020
CVE-2021-3541	Medium 6.5	A flaw was found in libxml2. Assigned by redhat	Jul 9, 2021
CVE-2022-23308	High 7.5	valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. Assigned by mitre	Feb 26, 2022
CVE-2022-29824	Medium 6.5	In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf) and tree.c (xmlBuffer) don't check for integer overflows. Assigned by mitre	May 3, 2022
CVE-2022-1292	Critical 9.8	The c_rehash script allows command injection Assigned by openssl	May 3, 2022
CVE-2022-1343	Medium 5.3	OCSP_basic_verify may incorrectly verify the response signing certificate Assigned by openssl	May 3, 2022
CVE-2022-1434	Medium 5.9	Incorrect MAC key used in the RC4-MD5 ciphersuite Assigned by openssl	May 3, 2022
CVE-2022-1473	High 7.5	Resource leakage when decoding certificates and keys Assigned by openssl	May 3, 2022
CVE-2022-2068	Critical 9.8	The c_rehash script allows command injection Assigned by openssl	Jun 21, 2022
CVE-2022-2097	Medium 5.3	AES OCB fails to encrypt some bytes Assigned by openssl	Jul 5, 2022
CVE-2022-40304	High 7.8	An issue was discovered in libxml2 before 2.10.3. Assigned by mitre	Nov 23, 2022
CVE-2023-29552 Known exploited	High 7.5	The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. Assigned by mitre	Apr 25, 2023

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.