CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 9:23 AM ET)

What this means for you

This week: 3,109 CVEs published, 233 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 3,109; Show in the list
Critical, last 7 days: 233; Show in the list
Healthcare-tagged, last 7 days: 10; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product siemens:ruggedcom_rox_rx5000. Show all products

38 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2019-12900	Critical 9.8	BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors. Assigned by mitre	Jun 19, 2019
CVE-2020-12762	High 7.8	json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend. Assigned by mitre	May 8, 2020
CVE-2021-36084	Low 3.3	The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper). Assigned by mitre	Jun 30, 2021
CVE-2021-36085	Low 3.3	The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperms and hashtab_map). Assigned by mitre	Jun 30, 2021
CVE-2021-36086	Low 3.3	The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list). Assigned by mitre	Jun 30, 2021
CVE-2021-36087	Low 3.3	The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). Assigned by mitre	Jun 30, 2021
CVE-2022-0778	High 7.5	Infinite loop in BN_mod_sqrt() reachable when parsing certificates Assigned by openssl	Mar 15, 2022
CVE-2022-36123	High 7.8	The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). Assigned by mitre	Jul 29, 2022
CVE-2022-37434	Critical 9.8	zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. Assigned by mitre	Aug 4, 2022
CVE-2020-35525	High 7.5	In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing. Assigned by redhat	Aug 31, 2022

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.