CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,469 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,469
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product siemens:ruggedcom_rox_rx1524. Show all products

28 CVEs, showing 1 to 28
CVESeverityTitlePublished
CVE-2019-12900Critical 9.8BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
Assigned by mitre
Jun 19, 2019
CVE-2020-12762High 7.8json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
Assigned by mitre
May 9, 2020
CVE-2021-36084Low 3.3The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).
Assigned by mitre
Jul 1, 2021
CVE-2021-36085Low 3.3The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperms and hashtab_map).
Assigned by mitre
Jul 1, 2021
CVE-2021-36086Low 3.3The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).
Assigned by mitre
Jul 1, 2021
CVE-2021-36087Low 3.3The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow).
Assigned by mitre
Jul 1, 2021
CVE-2022-0778High 7.5Infinite loop in BN_mod_sqrt() reachable when parsing certificates
Assigned by openssl
Mar 15, 2022
CVE-2022-36123High 7.8The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss).
Assigned by mitre
Jul 29, 2022
CVE-2022-37434Critical 9.8zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field.
Assigned by mitre
Aug 5, 2022
CVE-2020-35525High 7.5In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.
Assigned by redhat
Sep 1, 2022
CVE-2023-29491High 7.8ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME…
Assigned by mitre
Apr 14, 2023
CVE-2023-29383Low 3.3In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger).
Assigned by mitre
Apr 14, 2023
CVE-2020-21047Medium 5.5The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787),…
Assigned by mitre
Aug 22, 2023
CVE-2023-46218Medium 6.5This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible.
Assigned by hackerone
Dec 7, 2023
CVE-2024-22365Medium 5.5linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.
Assigned by mitre
Feb 6, 2024
CVE-2024-28085Low 3.3wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv.
Assigned by mitre
Mar 27, 2024
CVE-2024-3596Critical 9.0RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.
Assigned by certcc
Jul 9, 2024
CVE-2024-50602Medium 5.9An issue was discovered in libexpat before 2.6.4.
Assigned by mitre
Oct 27, 2024
CVE-2024-52533Critical 9.8gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.
Assigned by mitre
Nov 11, 2024
CVE-2025-0395Medium 6.2When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffe…
Assigned by glibc
Jan 22, 2025
CVE-2024-12133Medium 5.3Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos
Assigned by redhat
Feb 10, 2025
CVE-2024-12243Medium 5.3Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos
Assigned by redhat
Feb 10, 2025
CVE-2025-46836Medium 6.6net-tools Stack-based Buffer Overflow vulnerability
Assigned by GitHub_M
May 14, 2025
CVE-2025-49796Critical 9.1Libxml: type confusion leads to denial of service (dos)
Assigned by redhat
Jun 16, 2025
CVE-2025-49794Critical 9.1Libxml: heap use after free (uaf) leads to denial of service (dos)
Assigned by redhat
Jun 16, 2025
CVE-2025-6020High 7.8Linux-pam: linux-pam directory traversal
Assigned by redhat
Jun 17, 2025
CVE-2025-7425High 7.8Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr
Assigned by redhat
Jul 10, 2025
CVE-2025-15467High 8.8Stack buffer overflow in CMS (Auth)EnvelopedData parsing
Assigned by openssl
Jan 27, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.