CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 11:10 PM ET)

What this means for you

This week: 3,265 CVEs published, 234 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,265; Show in the list
Critical, last 7 days: 234; Show in the list
Healthcare-tagged, last 7 days: 5; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product siemens:sinema_remote_connect_server. Show all products

24 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2019-19956	High 7.5	xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs. Assigned by mitre	Dec 24, 2019
CVE-2020-7595	High 7.5	xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation. Assigned by mitre	Jan 21, 2020
CVE-2021-22925	Medium 5.3	curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. Assigned by hackerone	Aug 4, 2021
CVE-2021-22924	Low 3.7	libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take… Assigned by hackerone	Aug 5, 2021
CVE-2021-40438 Known exploited	Critical 9.0	mod_proxy SSRF Assigned by apache	Sep 16, 2021
CVE-2021-45960	High 8.8	In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memo… Assigned by mitre	Jan 1, 2022
CVE-2021-46143	High 8.1	In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize. Assigned by mitre	Jan 5, 2022
CVE-2022-22827	High 8.8	storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. Assigned by mitre	Jan 7, 2022
CVE-2022-22826	High 8.8	nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. Assigned by mitre	Jan 7, 2022
CVE-2022-22825	High 8.8	lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. Assigned by mitre	Jan 7, 2022

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.