CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Oct 30, 2026, 2:30 AM ET)

What this means for you

This week: 3,354 CVEs published, 232 critical, and 2 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,354; Show in the list
Critical, last 7 days: 232; Show in the list
Healthcare-tagged, last 7 days: 5; Show in the list
Known exploited (CISA KEV): 1,764; Show in the list

Showing CVEs that name the product netapp:service_level_manager. Show all products

16 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2017-5645	Critical 9.8	In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that,… Assigned by apache	Apr 17, 2017
CVE-2019-14379	Critical 9.8	SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), lead… Assigned by mitre	Jul 29, 2019
CVE-2019-16942	Critical 9.8	A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. Assigned by mitre	Oct 1, 2019
CVE-2019-16943	Critical 9.8	A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10.	Oct 1, 2019
CVE-2019-17267	Critical 9.8	A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10.	Oct 6, 2019
CVE-2019-20330	Critical 9.8	FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking. Assigned by mitre	Jan 2, 2020
CVE-2020-8840	Critical 9.8	FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter. Assigned by mitre	Feb 10, 2020
CVE-2020-25649	High 7.5	A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. Assigned by redhat	Dec 3, 2020
CVE-2020-35491	High 8.1	FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource. Assigned by mitre	Dec 17, 2020
CVE-2020-35490	High 8.1	FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource. Assigned by mitre	Dec 17, 2020

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.