CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 10:10 UTC)

What this means for you

This week: 5,469 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,469; Show in the list
Critical, last 7 days: 357; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product netapp:ontap_select_deploy_administration_utility. Show all products

83 CVEs, showing 51 to 83PreviousPage 2 of 2

CVE	Severity	Title	Published
CVE-2021-3156 Known exploited	High 7.8	Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends wit… Assigned by mitre	Jan 26, 2021
CVE-2021-3177	Critical 9.8	Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untru… Assigned by mitre	Jan 19, 2021
CVE-2020-35507	Medium 5.5	There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to caus… Assigned by redhat	Jan 4, 2021
CVE-2020-35496	Medium 5.5	There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereferen… Assigned by redhat	Jan 4, 2021
CVE-2020-35495	Medium 5.5	There's a flaw in binutils /bfd/pef.c. Assigned by redhat	Jan 4, 2021
CVE-2020-35494	Medium 6.1	There's a flaw in binutils /opcodes/tic4x-dis.c. Assigned by redhat	Jan 4, 2021
CVE-2020-35493	Medium 5.5	A flaw exists in binutils in bfd/pef.c. Assigned by redhat	Jan 4, 2021
CVE-2019-25013	Medium 5.9	The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read. Assigned by mitre	Jan 4, 2021
CVE-2020-15999 Known exploited	Critical 9.6	Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome	Nov 3, 2020
CVE-2020-14145	Medium 5.9	The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. Assigned by mitre	Jun 29, 2020
CVE-2020-14155	Medium 5.3	libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring. Assigned by mitre	Jun 15, 2020
CVE-2020-13871	High 7.5	SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late. Assigned by mitre	Jun 6, 2020
CVE-2020-11655	High 7.5	SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled. Assigned by mitre	Apr 9, 2020
CVE-2020-11656	Critical 9.8	In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement. Assigned by mitre	Apr 9, 2020
CVE-2019-20388	High 7.5	xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak. Assigned by mitre	Jan 21, 2020
CVE-2019-19956	High 7.5	xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs. Assigned by mitre	Dec 24, 2019
CVE-2019-19603	High 7.5	SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash. Assigned by mitre	Dec 9, 2019
CVE-2019-19646	Critical 9.8	pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns. Assigned by mitre	Dec 9, 2019
CVE-2019-19645	Medium 5.5	alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements. Assigned by mitre	Dec 9, 2019
CVE-2019-19317	Critical 9.8	lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other… Assigned by mitre	Dec 5, 2019
CVE-2019-17498	High 8.1	In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a s… Assigned by mitre	Oct 21, 2019
CVE-2019-16168	Medium 6.5	In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the… Assigned by mitre	Sep 9, 2019
CVE-2019-3856	High 7.5	An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. Assigned by redhat	Mar 25, 2019
CVE-2019-3857	High 7.5	An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. Assigned by redhat	Mar 25, 2019
CVE-2019-3860	Medium 5.0	An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. Assigned by redhat	Mar 25, 2019
CVE-2019-3861	Medium 5.0	An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. Assigned by redhat	Mar 25, 2019
CVE-2019-3863	High 7.5	A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. Assigned by redhat	Mar 25, 2019
CVE-2019-3858	Medium 5.0	An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. Assigned by redhat	Mar 21, 2019
CVE-2019-3855	High 7.5	An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. Assigned by redhat	Mar 21, 2019
CVE-2019-3862	High 7.3	An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. Assigned by redhat	Mar 20, 2019
CVE-2019-3859	Medium 5.0	An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. Assigned by redhat	Mar 20, 2019
CVE-2019-9169	Critical 9.8	In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match. Assigned by mitre	Feb 26, 2019
CVE-2016-5195 Known exploited	High 7.0	Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-… Assigned by Chrome	Nov 10, 2016

PreviousPage 2 of 2

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.