CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 09:00 UTC )
This week: 5,436 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,436 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product oracle:utilities_testing_accelerator . Show all products
24 CVEs, showing 1 to 24
CVE Severity Title Published CVE-2021-4104 Healthcare
High 7.5 Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 Assigned by apache
Dec 14, 2021 CVE-2021-39152 High 8.5 XStream is a simple library to serialize objects to XML and back again. Aug 23, 2021 CVE-2021-39150 High 8.5 XStream is a simple library to serialize objects to XML and back again. Aug 23, 2021 CVE-2021-39140 Medium 6.3 XStream is a simple library to serialize objects to XML and back again. Aug 23, 2021 CVE-2021-39154 High 8.5 XStream is a simple library to serialize objects to XML and back again. Aug 23, 2021 CVE-2021-39153 High 8.5 XStream is a simple library to serialize objects to XML and back again. Aug 23, 2021 CVE-2021-39151 High 8.5 XStream is a simple library to serialize objects to XML and back again. Aug 23, 2021 CVE-2021-39149 High 8.5 XStream is a simple library to serialize objects to XML and back again. Aug 23, 2021 CVE-2021-39148 High 8.5 XStream is a simple library to serialize objects to XML and back again. Aug 23, 2021 CVE-2021-39147 High 8.5 XStream is a simple library to serialize objects to XML and back again. Aug 23, 2021 CVE-2021-39146 High 8.5 XStream is a simple library to serialize objects to XML and back again. Aug 23, 2021 CVE-2021-39145 High 8.5 XStream is a simple library to serialize objects to XML and back again. Aug 23, 2021 CVE-2021-39141 High 8.5 XStream is a simple library to serialize objects to XML and back again. Aug 23, 2021 CVE-2021-39139 High 8.8 XStream is a simple library to serialize objects to XML and back again. Aug 23, 2021 CVE-2021-39144 Known exploited
High 8.5 XStream is vulnerable to a Remote Command Execution attack Assigned by GitHub_M
Aug 23, 2021 CVE-2021-2351 Healthcare
High 8.3 Vulnerability in the Advanced Networking Option component of Oracle Database Server. Assigned by oracle
Jul 20, 2021 CVE-2021-36090 Healthcare
High 7.5 Apache Commons Compress 1.0 to 1.20 denial of service vulnerability Assigned by apache
Jul 13, 2021 CVE-2021-35517 Healthcare
High 7.5 Apache Commons Compress 1.1 to 1.20 denial of service vulnerability Assigned by apache
Jul 13, 2021 CVE-2021-35516 Healthcare
High 7.5 Apache Commons Compress 1.6 to 1.20 denial of service vulnerability Assigned by apache
Jul 13, 2021 CVE-2021-35515 Healthcare
High 7.5 Apache Commons Compress 1.6 to 1.20 denial of service vulnerability Assigned by apache
Jul 13, 2021 CVE-2021-33037 Healthcare
Medium 5.3 Incorrect Transfer-Encoding handling with HTTP/1.0 Assigned by apache
Jul 12, 2021 CVE-2021-22118 Healthcare
High 7.8 In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory,… Assigned by vmware
May 27, 2021 CVE-2021-29425 Healthcare
Medium 6.5 Possible limited path traversal vulnerabily in Apache Commons IO Assigned by apache
Apr 13, 2021 CVE-2019-10219 Healthcare
Medium 6.5 A vulnerability was found in Hibernate-Validator. Assigned by redhat
Nov 8, 2019
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
