CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 06:40 UTC)

What this means for you

This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,437; Show in the list
Critical, last 7 days: 357; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product broadcom:fabric_operating_system. Show all products

66 CVEs, showing 51 to 66PreviousPage 2 of 2

CVE	Severity	Title	Published
CVE-2025-1976 Known exploited	High 8.6	Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6 Assigned by brocade	Apr 24, 2025
CVE-2024-3596	Critical 9.0	RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. Assigned by certcc	Jul 9, 2024
CVE-2022-33186	Critical 9.8	A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remote unauthenticated attacker to execute on a Brocade Fabric OS switch commands c…	Dec 8, 2022
CVE-2022-27776	Medium 6.5	A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number. Assigned by hackerone	Jun 1, 2022
CVE-2022-27775	High 7.5	An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a conn… Assigned by hackerone	Jun 1, 2022
CVE-2022-27774	Medium 5.7	An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is… Assigned by hackerone	Jun 1, 2022
CVE-2022-22576	High 8.1	An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was au… Assigned by hackerone	May 26, 2022
CVE-2021-22555 Known exploited	High 8.3	Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE Assigned by Google	Jul 7, 2021
CVE-2021-22890	Medium 4.3	curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. Assigned by hackerone	Apr 1, 2021
CVE-2021-22876	Medium 5.3	curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. Assigned by hackerone	Apr 1, 2021
CVE-2019-25013	Medium 5.9	The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read. Assigned by mitre	Jan 4, 2021
CVE-2020-15778	High 7.8	scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. Assigned by mitre	Jul 24, 2020
CVE-2020-13630	High 7.0	ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature. Assigned by mitre	May 27, 2020
CVE-2020-13631	Medium 5.5	SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c. Assigned by mitre	May 27, 2020
CVE-2020-13632	Medium 5.5	ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query. Assigned by mitre	May 27, 2020
CVE-2020-1967	High 7.5	Segmentation fault in SSL_check_chain Assigned by openssl	Apr 21, 2020

PreviousPage 2 of 2

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.