CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 09:30 UTC)

What this means for you

This week: 5,436 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,436; Show in the list
Critical, last 7 days: 355; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product oracle:mysql_server. Show all products

113 CVEs, showing 101 to 113PreviousPage 3 of 3

CVE	Severity	Title	Published
CVE-2021-22901	High 8.1	curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. Assigned by hackerone	Jun 11, 2021
CVE-2021-22898	Low 3.1	curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Assigned by hackerone	Jun 11, 2021
CVE-2021-3450	High 7.4	CA certificate check bypass with X509_V_FLAG_X509_STRICT Assigned by openssl	Mar 25, 2021
CVE-2021-3449	Medium 5.9	NULL pointer deref in signature_algorithms processing Assigned by openssl	Mar 25, 2021
CVE-2021-21351	Critical 9.1	XStream is a Java library to serialize objects to XML and back again.	Mar 23, 2021
CVE-2021-21348	High 7.5	XStream is a Java library to serialize objects to XML and back again.	Mar 23, 2021
CVE-2021-21344	Critical 9.8	XStream is a Java library to serialize objects to XML and back again.	Mar 23, 2021
CVE-2020-28196	High 7.5	MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite l… Assigned by mitre	Nov 6, 2020
CVE-2019-10219 Healthcare	Medium 6.5	A vulnerability was found in Hibernate-Validator. Assigned by redhat	Nov 8, 2019
CVE-2019-5482	Critical 9.8	Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. Assigned by hackerone	Sep 16, 2019
CVE-2019-5481	Critical 9.8	Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. Assigned by hackerone	Sep 16, 2019
CVE-2019-5443	High 7.8	A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run the code (as an openssl "engine")… Assigned by hackerone	Jul 2, 2019
CVE-2019-5436	High 7.8	A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1. Assigned by hackerone	May 28, 2019

PreviousPage 3 of 3

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.