CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 06:30 UTC)

What this means for you

This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,437; Show in the list
Critical, last 7 days: 357; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product siemens:ruggedcom_crossbow_station_access_controller_sac. Show all products

11 CVEs, showing 1 to 11

CVE	Severity	Title	Published
CVE-2026-11824	High 7.8	SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate Assigned by VulnCheck	Jun 9, 2026
CVE-2026-11822	High 7.8	SQLite before 3.53.2 Memory Corruption in FTS5 Extension Assigned by VulnCheck	Jun 9, 2026
CVE-2025-71316	Critical 9.8	SQLite sqldiff remote code execution via argument injection Assigned by cisa-cg	Jun 4, 2026
CVE-2025-70873	High 7.5	An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file. Assigned by mitre	Mar 12, 2026
CVE-2025-6965	High 7.2	Integer Truncation on SQLite Assigned by Google	Jul 15, 2025
CVE-2025-3277	Medium 6.9	An integer overflow can be triggered in SQLite’s `concat_ws()` function. Assigned by Google	Apr 14, 2025
CVE-2025-29088	Medium 5.6	In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash). Assigned by mitre	Apr 10, 2025
CVE-2025-29087	Low 3.2	In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. Assigned by mitre	Apr 7, 2025
CVE-2024-0232	Medium 4.7	Sqlite: use-after-free bug in jsonparseaddnodearray Assigned by redhat	Jan 16, 2024
CVE-2023-7104	Medium 5.5	SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow Assigned by VulDB	Dec 25, 2023
CVE-2022-0778	High 7.5	Infinite loop in BN_mod_sqrt() reachable when parsing certificates Assigned by openssl	Mar 15, 2022

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.