CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 12:30 AM ET)

What this means for you

This week: 3,088 CVEs published, 233 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 3,088; Show in the list
Critical, last 7 days: 233; Show in the list
Healthcare-tagged, last 7 days: 9; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product broadcom:fabric_operating_system. Show all products

66 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2020-1967	High 7.5	Segmentation fault in SSL_check_chain Assigned by openssl	Apr 21, 2020
CVE-2020-13632	Medium 5.5	ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query. Assigned by mitre	May 27, 2020
CVE-2020-13631	Medium 5.5	SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c. Assigned by mitre	May 27, 2020
CVE-2020-13630	High 7.0	ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature. Assigned by mitre	May 27, 2020
CVE-2020-15778	High 7.8	scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. Assigned by mitre	Jul 23, 2020
CVE-2019-25013	Medium 5.9	The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read. Assigned by mitre	Jan 3, 2021
CVE-2021-22876	Medium 5.3	curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. Assigned by hackerone	Apr 1, 2021
CVE-2021-22890	Medium 4.3	curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. Assigned by hackerone	Apr 1, 2021
CVE-2021-22555 Known exploited	High 8.3	Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE Assigned by Google	Jul 7, 2021
CVE-2022-22576	High 8.1	An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was au… Assigned by hackerone	May 25, 2022

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.