CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 06:30 UTC)

What this means for you

This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,437; Show in the list
Critical, last 7 days: 357; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product netapp:hci_baseboard_management_controller. Show all products

12 CVEs, showing 1 to 12

CVE	Severity	Title	Published
CVE-2025-0725	High 7.3	gzip integer overflow Assigned by curl	Feb 5, 2025
CVE-2023-3141	High 7.1	A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. Assigned by redhat	Jun 9, 2023
CVE-2023-32233	High 7.8	In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Assigned by mitre	May 8, 2023
CVE-2023-26607	High 7.1	In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c. Assigned by mitre	Feb 26, 2023
CVE-2023-23559	High 7.8	In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition. Assigned by mitre	Jan 13, 2023
CVE-2022-41222	High 7.0	mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move. Assigned by mitre	Sep 21, 2022
CVE-2022-2097	Medium 5.3	AES OCB fails to encrypt some bytes Assigned by openssl	Jul 5, 2022
CVE-2022-27780	Medium 5.3	The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a different URL usingthe wrong host name when it is later retrieved.F… Assigned by hackerone	Jun 1, 2022
CVE-2021-46143	High 8.1	In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize. Assigned by mitre	Jan 6, 2022
CVE-2021-45960	High 8.8	In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memo… Assigned by mitre	Jan 1, 2022
CVE-2020-11023 Known exploited Healthcare	Medium 6.9	Potential XSS vulnerability in jQuery Assigned by GitHub_M	Apr 29, 2020
CVE-2019-19054	Medium 4.7	A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by tri… Assigned by mitre	Nov 18, 2019

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.