CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 10:10 UTC)

What this means for you

This week: 5,470 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,470; Show in the list
Critical, last 7 days: 357; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product oracle:sd-wan_edge. Show all products

11 CVEs, showing 1 to 11

CVE	Severity	Title	Published
CVE-2019-15218	Medium 4.6	An issue was discovered in the Linux kernel before 5.1.8. Assigned by mitre	Aug 19, 2019
CVE-2019-10219 Healthcare	Medium 6.5	A vulnerability was found in Hibernate-Validator. Assigned by redhat	Nov 8, 2019
CVE-2020-10543	High 8.2	Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow. Assigned by mitre	Jun 5, 2020
CVE-2020-12723	High 7.5	regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls. Assigned by mitre	Jun 5, 2020
CVE-2020-13943	Medium 4.3	If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation o… Assigned by apache	Oct 12, 2020
CVE-2020-25649	High 7.5	A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. Assigned by redhat	Dec 3, 2020
CVE-2020-17527	High 7.5	Apache Tomcat: Request header mix-up between HTTP/2 streams Assigned by apache	Dec 3, 2020
CVE-2020-35491	High 8.1	FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource. Assigned by mitre	Dec 17, 2020
CVE-2021-33037 Healthcare	Medium 5.3	Incorrect Transfer-Encoding handling with HTTP/1.0 Assigned by apache	Jul 12, 2021
CVE-2022-22963 Known exploited	Critical 9.8	In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression t… Assigned by vmware	Apr 1, 2022
CVE-2022-22965 Known exploited	Critical 9.8	A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. Assigned by vmware	Apr 1, 2022

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.