CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 14:10 UTC )
This week: 5,511 CVEs published, 359 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,511 Show in the list Critical, last 7 days 359 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product siemens:ruggedcom_rst2428p . Show all products
CVE Severity Title Published CVE-2024-44990 Medium 5.5 bonding: fix null pointer deref in bond_ipsec_offload_ok Assigned by Linux
Sep 4, 2024 CVE-2024-44989 Medium 5.5 bonding: fix xfrm real_dev null pointer dereference Assigned by Linux
Sep 4, 2024 CVE-2024-44987 High 7.8 ipv6: prevent UAF in ip6_send_skb() Assigned by Linux
Sep 4, 2024 CVE-2024-44960 Medium 5.5 usb: gadget: core: Check for unset descriptor Assigned by Linux
Sep 4, 2024 CVE-2024-6119 High 7.5 Possible denial of service in X.509 name checks Assigned by openssl
Sep 3, 2024 CVE-2024-44944 Medium 5.5 netfilter: ctnetlink: use helper function to calculate expect ID Assigned by Linux
Aug 30, 2024 CVE-2024-45492 High 7.3 An issue was discovered in libexpat before 2.6.3. Assigned by mitre
Aug 30, 2024 CVE-2024-45490 Critical 9.8 An issue was discovered in libexpat before 2.6.3. Assigned by mitre
Aug 30, 2024 CVE-2024-45491 High 7.3 An issue was discovered in libexpat before 2.6.3. Assigned by mitre
Aug 30, 2024 CVE-2024-44935 Medium 5.5 sctp: Fix null-ptr-deref in reuseport_add_sock(). Assigned by Linux
Aug 26, 2024 CVE-2024-43893 Medium 5.5 serial: core: check uartclk for zero to avoid divide by zero Assigned by Linux
Aug 26, 2024 CVE-2024-43890 Medium 5.5 tracing: Fix overflow in get_free_elt() Assigned by Linux
Aug 26, 2024 CVE-2024-43889 Medium 5.5 padata: Fix possible divide-by-0 panic in padata_mt_helper() Assigned by Linux
Aug 26, 2024 CVE-2024-41996 High 7.5 Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expe… Assigned by mitre
Aug 26, 2024 CVE-2024-43882 High 7.8 exec: Fix ToCToU between perm check and set-uid/gid usage Assigned by Linux
Aug 21, 2024 CVE-2024-43871 Medium 5.5 devres: Fix memory leakage caused by driver API devm_free_percpu() Assigned by Linux
Aug 21, 2024 CVE-2024-7264 Medium 6.3 ASN.1 date parser overread Assigned by curl
Jul 31, 2024 CVE-2024-42154 Medium 4.4 tcp_metrics: validate source addr length Assigned by Linux
Jul 30, 2024 CVE-2024-42131 Medium 4.4 mm: avoid overflows in dirty throttling logic Assigned by Linux
Jul 30, 2024 CVE-2024-42106 Medium 5.5 inet_diag: Initialize pad field in struct inet_diag_req_v2 Assigned by Linux
Jul 30, 2024 CVE-2024-42094 High 7.1 net/iucv: Avoid explicit cpumask var allocation on stack Assigned by Linux
Jul 29, 2024 CVE-2024-42093 High 7.3 net/dpaa2: Avoid explicit cpumask var allocation on stack Assigned by Linux
Jul 29, 2024 CVE-2024-42082 Medium 5.5 xdp: Remove WARN() from __xdp_reg_mem_model() Assigned by Linux
Jul 29, 2024 CVE-2024-42070 Medium 5.5 netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers Assigned by Linux
Jul 29, 2024 CVE-2024-41046 High 8.8 net: ethernet: lantiq_etop: fix double free in detach Assigned by Linux
Jul 29, 2024 CVE-2024-41006 Medium 5.5 netrom: Fix a memory leak in nr_heartbeat_expiry() Assigned by Linux
Jul 12, 2024 CVE-2024-41005 Medium 4.7 netpoll: Fix race condition in netpoll_owner_active Assigned by Linux
Jul 12, 2024 CVE-2024-41004 Medium 5.5 tracing: Build event generation tests only as modules Assigned by Linux
Jul 12, 2024 CVE-2024-41000 High 7.8 block/ioctl: prefer different overflow check Assigned by Linux
Jul 12, 2024 CVE-2024-40995 Medium 5.5 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() Assigned by Linux
Jul 12, 2024 CVE-2024-40984 High 7.8 ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." Assigned by Linux
Jul 12, 2024 CVE-2024-40980 High 7.5 drop_monitor: replace spin_lock by raw_spin_lock Assigned by Linux
Jul 12, 2024 CVE-2024-40961 Medium 5.5 ipv6: prevent possible NULL deref in fib6_nh_init() Assigned by Linux
Jul 12, 2024 CVE-2024-40960 Medium 5.5 ipv6: prevent possible NULL dereference in rt6_probe() Assigned by Linux
Jul 12, 2024 CVE-2024-40959 Medium 5.5 xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() Assigned by Linux
Jul 12, 2024 CVE-2024-40958 High 7.8 netns: Make get_net_ns() handle zero refcount net Assigned by Linux
Jul 12, 2024 CVE-2024-40945 Medium 5.5 iommu: Return right value in iommu_sva_bind_device() Assigned by Linux
Jul 12, 2024 CVE-2024-40905 Medium 4.7 ipv6: fix possible race in __fib6_drop_pcpu_from() Assigned by Linux
Jul 12, 2024 CVE-2024-39503 High 7.8 netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type Assigned by Linux
Jul 12, 2024 CVE-2024-39502 High 7.8 ionic: fix use after netif_napi_del() Assigned by Linux
Jul 12, 2024 CVE-2024-39493 Medium 5.5 crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak Assigned by Linux
Jul 10, 2024 CVE-2024-39489 Medium 5.5 ipv6: sr: fix memleak in seg6_hmac_init_algo Assigned by Linux
Jul 10, 2024 CVE-2024-3596 Critical 9.0 RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. Assigned by certcc
Jul 9, 2024 CVE-2024-39487 High 7.1 bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() Assigned by Linux
Jul 9, 2024 CVE-2024-39482 High 7.8 bcache: fix variable length array abuse in btree_iter Assigned by Linux
Jul 5, 2024 CVE-2024-5535 Critical 9.1 SSL_select_next_proto buffer overread Assigned by openssl
Jun 27, 2024 CVE-2024-39468 High 7.5 smb: client: fix deadlock in smb2_find_smb_tcon() Assigned by Linux
Jun 25, 2024 CVE-2024-39292 High 7.8 um: Add winch to winch_handlers before registering winch IRQ Assigned by Linux
Jun 24, 2024 CVE-2024-36288 Critical 9.8 SUNRPC: Fix loop termination condition in gss_free_in_token_pages() Assigned by Linux
Jun 21, 2024 CVE-2024-38780 Medium 5.5 dma-buf/sw-sync: don't enable IRQ from sync_print_obj() Assigned by Linux
Jun 21, 2024
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
