CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 4:40 AM ET)

What this means for you

This week: 3,083 CVEs published, 231 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 3,083; Show in the list
Critical, last 7 days: 231; Show in the list
Healthcare-tagged, last 7 days: 9; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product netapp:clustered_data_ontap. Show all products

63 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2023-2953	High 7.5	A vulnerability was found in openldap. Assigned by redhat	May 29, 2023
CVE-2023-28322	Low 3.7	An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even whe…	May 26, 2023
CVE-2023-28321	Medium 5.9	An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as "Subject Alternative Name" in TLS server certificates.	May 26, 2023
CVE-2023-28320	Medium 5.9	A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time.	May 26, 2023
CVE-2023-28319	High 7.5	A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash.	May 26, 2023
CVE-2023-27537	Medium 5.9	A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". Assigned by hackerone	Mar 29, 2023
CVE-2023-27538	High 7.7	An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have pr… Assigned by hackerone	Mar 29, 2023
CVE-2023-27533	Critical 9.8	A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during serve… Assigned by hackerone	Mar 29, 2023
CVE-2023-23915	Medium 6.5	A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Assigned by hackerone	Feb 22, 2023
CVE-2023-23916	Medium 6.5	An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can be compressed mult… Assigned by hackerone	Feb 22, 2023

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.