CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 11:30 PM ET)

What this means for you

This week: 3,368 CVEs published, 234 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,368; Show in the list
Critical, last 7 days: 234; Show in the list
Healthcare-tagged, last 7 days: 5; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product siemens:ruggedcom_ape1808. Show all products

98 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2022-1271	High 8.8	An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. Assigned by redhat	Aug 31, 2022
CVE-2022-37454	Critical 9.8	The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic… Assigned by mitre	Oct 20, 2022
CVE-2023-0286	High 7.4	X.400 address type confusion in X.509 GeneralName Assigned by openssl	Feb 8, 2023
CVE-2023-44487 Known exploited	High 7.5	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. Assigned by mitre	Oct 9, 2023
CVE-2023-38546	Not yet scored	This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. Assigned by hackerone	Oct 17, 2023
CVE-2023-38545	High 8.8	This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. Assigned by hackerone	Oct 17, 2023
CVE-2023-48795	Medium 5.9	The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from… Assigned by mitre	Dec 17, 2023
CVE-2024-3596	Critical 9.0	RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. Assigned by certcc	Jul 9, 2024
CVE-2024-52963	Low 3.5	A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via spec… Assigned by fortinet	Jan 14, 2025
CVE-2024-32122	Low 2.1	A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclo… Assigned by fortinet	Apr 8, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.